Privacy Policy

Controller. FON Group, Inc., 2803 Philadelphia Pike, Suite B #1850, Claymont, DE 19703, United States. Privacy contact: privacy@notredamecompanion.com.

Data collected: email, lead visitor first/last name where reservation assistance is purchased, visit date/time preferences where applicable, number of visitors where applicable, product/order details, payment status and Stripe/Paddle identifiers, support messages, Google/Apple authentication identifiers if used, technical logs, analytics/cookie consent data, advertising click IDs only when legally allowed/consented, and UTM/attribution data according to consent settings.

Purposes: provide digital travel guides, audio guides, map guides, itineraries, companion access, account/access management, reservation assistance where purchased, service emails, customer support, payment/order management, fraud/security, legal/tax/accounting, analytics only with consent where required, and marketing/ads only with consent where required.

Legal bases: contract, legal obligation, legitimate interests, and consent.

Processors/subprocessors: Supabase for database/auth; Vercel for hosting; Resend for transactional email; Stripe for payments; Paddle as future merchant/payment processor; Cookiebot for consent management; Cloudflare for DNS/security/email routing if used; Google Tag Manager for tag management; GA4 and Google Ads base tags with Consent Mode denied by default; limited Google Ads conversion measurement pings may be sent under denied Consent Mode without advertising cookies or user data; GA4 events, advertising user data, personalization, Meta Pixel, and PostHog only where consent allows; Sentry for error monitoring with PII minimization; Google OAuth and Apple OAuth as optional login providers.

Sentry session replay is disabled at launch or must be gated behind analytics consent. We avoid capturing form field contents, raw payment details, and unnecessary PII.

Advertising measurement: with your marketing consent only, we share an irreversibly hashed (SHA-256) version of your email and your advertising click identifiers (such as Google Click ID) with Google to measure the performance of Google Ads campaigns, including enhanced conversions and offline conversion import. Your raw email is never shared with Google for advertising. Google may process this data outside your country (for example in the United States) under appropriate safeguards such as the EU Standard Contractual Clauses.

You may contact us about privacy rights at privacy@notredamecompanion.com. Mandatory rights depend on your location and applicable law.