privacy policy

Fülle Atelier GmbH
Clayallee 22
14195 Berlin
Germany
hello@voyture.app

We have not appointed a data protection officer, as we are not legally required to do so. Please direct all privacy requests to the email address above.

You can browse the map, open place pages and plan a roadtrip without an account. When you plan a trip before signing in, the draft trip is stored only in your browser (local storage) so it is not lost when you sign in or purchase. It never leaves your device until you save it to your account.

• Account data: your email address, a securely hashed password (or, if you choose Google sign-in, the identifier and email address provided by Google), an optional name, and the dates of creation and last sign-in.
• Saved places: which curated places you mark as “I want to go here”, linked to your account.
• Saved roadtrips: the trips you save — start and destination, trip length and the stops in your route — linked to your account.
• Trip drafts: the last trip you planned, stored in your browser’s local storage (key voiture:draft-trip) and, together with a purchase intent marker, removed once used.
• VOYTURE PASS data: status, start and expiry date, price paid, currency, renewal setting, and your documented consent to immediate access (see section 6).
• Technical server and log data: IP address, date and time of request, requested URL, referrer, browser and operating system information — generated automatically when our servers deliver the site.
• Support correspondence: the content of emails you send us.

We do not use web analytics and we do not make automated decisions about you. With your consent we use the Meta Pixel and the Meta Conversions API for reach and conversion measurement (see section 4a).

Technically necessary storage: a session token that keeps you signed in, and the local-storage entries described above for your trip draft and your pass intent. These are essential for the functions you request (Art. 6(1)(b) GDPR, § 25(2) no. 2 TDDDG) and are used without consent.

Optional marketing storage: cookies and identifiers set by the Meta Pixel. These are only set after you actively accept them in our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). We store your decision itself in your browser under voiture:cookie-consent-v2 so that we do not have to ask again. You can change or withdraw your decision at any time via the Cookies link in the footer, with effect for the future.

If you consent, we use the Meta Pixel and the Meta Conversions API of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. The Meta Pixel is a piece of JavaScript loaded in your browser; the Conversions API transmits comparable events from our server. We use both to understand which of our campaigns and pages lead to relevant actions — such as a page view, a planned trip or a VOYTURE PASS purchase — and to measure and improve our advertising on Meta platforms.

The data processed for this purpose can include: your IP address, information about your browser, device and operating system, the page visited and the referring page, the events triggered and, for a purchase, the order value and currency, as well as Meta cookies and identifiers such as _fbp and _fbc. Where you are logged into a Meta service, Meta may match these events with your Meta account. We do not transmit special categories of personal data.

Legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without consent neither the pixel is loaded nor are server-side events sent. Withdrawal is possible at any time through the Cookies link in the footer.

With regard to the collection and transmission of these events, we and Meta act as joint controllers (Art. 26 GDPR) on the basis of Meta’s controller addendum; Meta’s further processing of the data for its own purposes takes place under its own responsibility and privacy policy. Data may be transferred to the United States on the basis of Standard Contractual Clauses and Meta’s certification under the EU – U.S. Data Privacy Framework. Event data is retained by us only for as long as needed for transmission and measurement; Meta’s retention follows its own policy.

• Art. 6(1)(b) GDPR — performance of a contract: your account, your saved places and trips, the VOYTURE PASS and its access.
• Art. 6(1)(f) GDPR — legitimate interests: secure, stable and abuse-free operation of the website, server logs, and answering your enquiries.
• Art. 6(1)(c) GDPR — legal obligations: retention of invoicing and tax-relevant records.
• Art. 6(1)(a) GDPR, § 25(1) TDDDG — consent: the Meta Pixel and the Meta Conversions API. Withdrawable at any time.

Payments for the VOYTURE PASS are not yet live. As soon as they are, they will be processed by Stripe Payments Europe, Ltd. (Ireland) as an independent controller for payment processing. In that case, the data you enter in the checkout (name, email, billing and payment details) is transmitted directly to Stripe; we receive only the information required to grant and account for your pass — such as a customer and subscription identifier, the amount paid and the payment status. We never receive or store your full card details.

Together with a purchase we store your active, non-preselected consent to immediate provision of the digital product and your acknowledgement that this causes your right of withdrawal to lapse, including the time of that consent. This documentation is required to prove the lawful start of performance (Art. 6(1)(b) and (c) GDPR).

We work with a small number of providers who process data on our behalf under data processing agreements pursuant to Art. 28 GDPR:

• Lovable (Lovable Labs Incorporated) — hosting and delivery of the website and its server functions, including infrastructure operated on our behalf.
• Supabase (Supabase, Inc., using infrastructure in the European Union) — database, authentication and file storage for account data, saved places, saved trips, pass records and place images.
• Google Ireland Ltd. — only if you choose to sign in with Google. In that case Google processes your sign-in as an independent controller under its own privacy policy.
• Our email provider — delivery of transactional messages such as sign-up confirmation and password resets.
• Stripe — payment processing, once the VOYTURE PASS checkout is live (see section 6).
• Meta Platforms Ireland Ltd. — Meta Pixel and Meta Conversions API, only with your consent and as joint controller for the event measurement described in section 4a.

Some of the providers named above are established in the United States or may involve support access from outside the European Economic Area. Where personal data is transferred to a third country, it is safeguarded by the European Commission’s Standard Contractual Clauses and, where applicable, by the provider’s certification under the EU – U.S. Data Privacy Framework, supplemented by technical and organisational measures such as encryption in transit and at rest.

• Account data, saved places and saved trips: for as long as your account exists. If you delete your account, they are deleted with it.
• Pass records including consent documentation: for the duration of the contract and afterwards for as long as statutory retention periods require (generally up to ten years for accounting records).
• Server logs: for a short period for security and troubleshooting, then deleted or anonymised.
• Support correspondence: until your enquiry is resolved and any commercial retention periods have expired.
• Trip drafts in local storage: until you clear your browser storage or the draft is used.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, write to hello@voyture.app.

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany). You may also contact the authority in your place of residence.

An account, an email address and a valid payment are required to purchase and use the VOYTURE PASS. Without them we cannot provide the contractual service. Browsing and planning remain possible without providing any of this data.

We will update this policy when our service or the providers we use change — for example when the VOYTURE PASS checkout goes live. The current version always applies.