Privacy Policy

PointsLegend is a brand of HireGlobalteam LLC ("we," "us," "our"). We operate the PointsLegend service that finds credit card points and miles deals and sends personalized email alerts to help you maximize your travel redemptions. This policy explains what we collect, why we collect it, and who we share it with.

If you have any questions, email us at hello@pointslegend.com.

Information you provide

• ·Your name and email address (required to create an account)
• ·Your home airport — used to match flight deals to your location
• ·Your preferred loyalty programs (e.g. Chase Ultimate Rewards, Amex Membership Rewards)
• ·Onboarding preferences (cabin class, destinations, travel goals)
• ·Payment information — processed directly by Stripe; we never see or store your card number

Information we collect automatically

• ·Log data: IP address, browser type, pages viewed, timestamps
• ·Device data: operating system, browser, device type
• ·Email engagement data: opens and clicks on the alerts we send you

Information we don't collect

• ·We do not buy information from data brokers
• ·We do not collect your real-time location
• ·We do not collect credit card balances, credit scores, or full card numbers

• ·Operate the service — find deals that match your preferences and send you alerts
• ·Send transactional emails (account confirmation, password reset, receipts)
• ·Improve the product — analyze which deals resonate, test alert formatting
• ·Prevent fraud and abuse
• ·Comply with legal obligations

We share data with a small set of service providers (“sub-processors”) that help us operate PointsLegend. Each is contractually obligated to handle your data per their own privacy standards.

• ·Supabase — database hosting and authentication
• ·Resend — transactional and alert email delivery
• ·Stripe — payment processing, if you subscribe to a paid plan
• ·Anthropic — AI-powered deal discovery (we send anonymized deal data, not personal identifiers)
• ·Vercel — web hosting and edge delivery

We do not sell your personal information and we do not share it for third-party marketing purposes. We may disclose information if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of our users.

• ·A session cookie keeps you logged in after you sign in
• ·We use privacy-focused analytics to understand aggregate product usage
• ·We do not use third-party advertising cookies or tracking pixels

• ·Account data is retained for as long as your account is active. Deleted within 30 days of account deletion on request.
• ·Email engagement data (opens, clicks) is retained for up to 18 months, then anonymized.
• ·Payment and billing records are retained as required by applicable tax and financial law (typically 7 years).

Depending on where you live, you may have the right to access, correct, delete, or export the personal data we hold about you. To exercise any of these rights, email hello@pointslegend.com. We respond within 30 days.

California residents (CCPA)

You have the right to know what personal information we collect, to delete it, and to non-discrimination for exercising these rights. We do not sell your personal information.

EU and UK residents (GDPR)

Our legal bases for processing are (a) performance of the contract you entered into with us by signing up, and (b) our legitimate interest in improving the product and preventing abuse.

Unsubscribing

Every marketing email we send includes an unsubscribe link. Transactional emails (receipts, security notices) are required for account operation and can't be disabled while you have an active account.

PointsLegend is not intended for users under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we'll delete it.

We'll post any changes here and update the “Last updated” date above. For material changes, we'll email registered users before the changes take effect.

Questions, requests, or complaints? hello@pointslegend.com