1. Who is responsible for your data
VASA Trend AI LLC (dba HomewardFares) operates HomewardFares and is the controller of your personal data. Postal address: 131 Continental Drive, Suite 305, Newark, DE 19713, USA. Contact us about privacy at hello@homewardfares.com.
2. What we collect
- Account details: your email address, the country you chose, and when you joined.
- Travel preferences: your home airports, the destinations you care about, travel months, cabin, number of travellers and maximum stops.
- Membership and billing records: your plan, trial and renewal dates, and payment status. Card details are entered on Stripe’s secure page and go straight to Stripe. We never see or store your full card number.
- Consents: records of what you agreed to and when (for example terms, auto-renewal and marketing emails), kept so we can show we asked properly.
- Waitlist sign-ups: if you join the waitlist for a route that isn’t open yet (for example the Philippines, Europe or Latin America), we store your email address and the country you chose in a separate waitlist, along with the country you seem to be visiting from and when you joined and confirmed. This does not create an account. We send one email asking you to confirm, and once you do we use your email only to tell you when that route opens. If you don’t confirm, we won’t email you again. Joining the waitlist does not sign you up for other deal alerts, and you can unsubscribe at any time with the link in our email or by writing to us.
- Household addresses (Family plan): up to three email addresses a Family member adds so those people get a copy of the alerts. Each copy has its own unsubscribe link, and the member can remove an address at any time.
- Email activity: a record of which emails we sent you and when, and whether you asked us to stop emailing you, so we never email an address that has opted out. If you delete your account we keep only your email address on that do-not-email list, so we can keep honouring your opt-out. We do not track opens or clicks; if we ever start, we will update this page first.
- Messages you send us and notes our team makes when helping you.
- Technical data: basic logs (IP address, browser type, pages requested) kept for security and to keep the service running, and a cookie that remembers your country.
We do not collect passport details, flight bookings or anything about your trips beyond the preferences you give us.
3. Analytics
If we turn analytics on, we use PostHog to understand how people use the site (for example, which pages are visited and where people drop off at sign-up). It does not load if your browser sends a Do Not Track signal. We do not use advertising trackers or sell data to advertisers.
4. Why we use your data, and our legal basis
- To provide the service you signed up for (sending alerts that match your preferences, running your account, billing): performance of our contract with you.
- To send marketing emails about our own service, where required by law only with your consent, which you can withdraw at any time with the unsubscribe link.
- To tell you when a waitlisted route opens: your consent, given when you join the waitlist and confirm it by email. You can withdraw it at any time.
- To keep the service secure, prevent abuse and improve it: our legitimate interests, balanced against your rights.
- To keep tax and accounting records and meet other legal duties: legal obligation.
5. Who we share it with
We share personal data only with service providers who help us run HomewardFares, under contracts that limit what they can do with it:
- Stripe, for payments, subscriptions and tax calculation.
- Our email delivery provider, to send sign-in links and alerts.
- Our hosting and database providers.
- PostHog, for product analytics, if enabled.
We may also disclose data if the law requires it, to protect our rights or users’ safety, or as part of a sale or merger of the business (in which case this policy would continue to apply). We do not sell your personal information and we do not share it for cross-context behavioural advertising.
When you click a booking link, you leave our site. The airline or travel site’s own privacy policy then applies.
6. International transfers
We are based in the United States and our providers may process data in the US and other countries. Where we transfer personal data out of the EU, EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or the EU-US Data Privacy Framework where the provider is certified.
7. How long we keep it
- Account and preference data: while your account is open. When you delete your account we remove it within 30 days, apart from what we must keep.
- Billing and tax records: as long as tax law requires, usually up to 7 years.
- Consent and unsubscribe records: as long as needed to respect your choices and show we did.
- Server logs: usually no more than 90 days.
8. Deleting your account
You can delete your account from your account page, or email hello@homewardfares.com from the address on your account and we will do it for you. If you have an active paid plan, please cancel it first so you are not charged again.
9. Your rights in the EU, EEA and UK (GDPR and UK GDPR)
You have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong;
- have your data erased;
- restrict or object to our processing, including objecting at any time to direct marketing;
- data portability (receive your data in a common format);
- withdraw consent at any time, where we rely on consent.
Email us to use any of these rights. We will reply within one month. You can also complain to your local data protection authority, or in the UK to the Information Commissioner’s Office, though we would appreciate the chance to fix things first.
10. Your rights in California (CCPA, as amended by the CPRA)
If you live in California, you have the right to:
- know what personal information we collect, use and disclose, and get a copy;
- ask us to delete it;
- ask us to correct inaccurate information;
- opt out of the sale or sharing of personal information (we do not sell or share it, so there is nothing to opt out of);
- not be treated differently for using these rights.
The categories we collect are identifiers (email, IP address), commercial information (plan and billing history), internet activity (records of emails we sent you and basic site logs) and preferences. We use them for the purposes in section 4 and disclose them only to the service providers in section 5. We do not collect sensitive personal information as defined by the CCPA.
To make a request, email hello@homewardfares.com. We will confirm your identity by asking you to reply from the email address on your account. You can use an authorised agent; we may ask for proof of their authority.
Residents of other US states with similar privacy laws can make the same requests in the same way.
11. Security
We use encryption in transit, limit staff access to what they need, and sign in with one-time email links instead of passwords. No system is perfectly secure, and we will tell you and the relevant authorities about a breach where the law requires.
12. Children
HomewardFares is not meant for children under 16 and we do not knowingly collect their data.
13. Cookies
We use a small number of cookies: one to keep you signed in, one for security, and one that remembers which country’s prices you want to see. If analytics is enabled and your browser does not send Do Not Track, PostHog may set its own cookie to measure usage.
14. Changes
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, email members before they take effect.