Privacy Policy

JourneyBench ("we", "us", "our") is operated by JourneyBench, registered in Sri Lanka, with a registered address at Kurunegala, Sri Lanka. This policy explains how we collect, use, and protect information you provide when you use journeybench.com and our related services (the "Service").

• Account data: email address, name, and password hash when you sign up.
• Workspace data: tour details, inquiries, guest records, hotel and activity libraries, invoices, and any documents you upload.
• Payment data: subscription status and billing history via our payment processor (LemonSqueezy). We do not store card numbers.
• Usage data: pages visited, feature usage, error logs, and browser type via Vercel Analytics.
• Cookies: session cookies for authentication; analytics cookies (see our Cookie Banner).

• To operate the Service, including saving your work and syncing it across devices.
• To process subscriptions, issue receipts, and communicate about your account.
• To improve the Service, understand which features are used, and diagnose bugs.
• To send transactional and (with consent) product update emails.

We rely on: (a) contract - to deliver the Service you signed up for; (b) legitimate interest- to improve the Service and prevent abuse; (c) consent - for optional cookies and marketing emails.

• Supabase - our database and authentication provider.
• Vercel - our hosting and edge analytics provider.
• LemonSqueezy - our payment processor.
• Resend / SendGrid - our transactional email provider (final choice varies by region).
• Cloudflare Turnstile - anti-abuse verification on sign-up.
• OpenRouteService - travel-time calculation (aggregated, no personal data).

We do not sell your data to third parties. We do not share your workspace content with anyone except as required to deliver the Service or by law.

We retain your account data for as long as your account is active. After you cancel and request deletion, we remove personal data within 30 days, except where retention is required by law (for example, invoices for tax reporting).

Depending on your jurisdiction, you have the right to:

• Access, correct, or delete your personal data.
• Export a copy of your data.
• Object to certain processing, or withdraw consent.
• Lodge a complaint with a supervisory authority in your country.

To exercise any of these rights, email [email protected].

We use TLS in transit, encryption at rest, row-level security in our database, and industry-standard authentication. No system is perfect - if you believe your account has been compromised, contact us immediately.

Our infrastructure providers may process data outside your country of residence. Where applicable we rely on Standard Contractual Clauses and the safeguards provided by those vendors.

The Service is not intended for people under 16. We do not knowingly collect data from minors.

We may update this policy from time to time. When we do, we update the "Last updated" date above and, for material changes, notify you by email.

Questions? Email [email protected] or write to JourneyBench, Kurunegala, Sri Lanka.