Privacy Policy

Account Information

When you sign up via Google OAuth, we receive:

• Your name and email address
• Your Google profile picture (optional)
• A unique identifier from Google

We do not have access to your Google password or any other Google services.

Trip & Travel Data

To provide our core service, we store:

• Countries you've visited
• Entry and exit dates
• Passport nationality (for visa calculations)
• Notes you add to trips

Usage Data

We use PostHog for product analytics to improve NomadSync:

• Pages visited and features used
• Device type and browser
• General location (country level only)

Error & Performance Data

We use Sentry for error monitoring to fix bugs quickly:

• Error messages and stack traces when something goes wrong
• Browser, device, and OS information
• Performance metrics (page load times)

This data helps us identify and fix issues before they affect more users.

• Visa tracking: Calculate remaining days and send alerts
• Tax residency: Help you understand potential tax obligations
• NomadMiles: Track and reward your activity on the platform
• Email notifications: Send visa expiry alerts and updates (you can opt out)
• Product improvement: Understand how people use NomadSync to make it better

If you use the NomadSync browser extension:

• The extension connects to your NomadSync account via a secure token
• It detects travel booking websites to show you relevant visa information
• We may use affiliate links on partner sites—this is how we keep the extension free
• The extension does not read your emails, passwords, or browsing history
• All extension data syncs with your account and is subject to this privacy policy

We do not sell your data. Ever.

We only share data with:

• Stripe (payments): To handle subscriptions securely
• PostHog (analytics): Product analytics to understand feature usage
• Sentry (error monitoring): Error tracking to fix bugs quickly
• Email service: To send transactional emails and alerts
• Legal requirements: If required by law or to protect our rights

All third-party services are GDPR-compliant and bound by data processing agreements.

• All data is encrypted in transit (HTTPS) and at rest
• We use Google OAuth—we never store your password
• Access to production data is limited to essential personnel
• We use industry-standard security practices and regular audits

We use cookies for:

• Essential cookies: Keep you logged in and remember preferences
• Analytics cookies: Understand how people use NomadSync

You can manage cookie preferences at any time. Some features may not work properly if you disable essential cookies.

You have the right to:

• Access: Request a copy of all data we hold about you
• Correct: Update any inaccurate information
• Delete: Request deletion of your account and all associated data
• Export: Download your trip data in a portable format
• Opt out: Unsubscribe from marketing emails at any time

To exercise these rights, email us at privacy@nomadsync.app

• Active accounts: Data retained while your account is active
• Deleted accounts: Data permanently deleted within 30 days
• Backups: May persist for up to 90 days after deletion

NomadSync is operated from the United Kingdom. By using our service, you consent to your data being transferred to and processed in the UK and other countries where our service providers operate. We comply with GDPR for EU/EEA users.

NomadSync is not intended for users under 16 years of age. We do not knowingly collect data from children.

We may update this privacy policy from time to time. We'll notify you of significant changes via email or an in-app notification. Continued use of NomadSync after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? We're happy to help.