Skip to content
Search

Yuzu · Legal

Privacy Policy

Last updated:

Yuzu helps you discover and compare travel options. This policy explains what information we collect, why we use it, how we store it and how you can ask us to delete it.

1. Information received from Google

If you choose Sign in with Google, we request access to your basic profile and email address. We receive and store your Google account identifier, verified email address, display name and profile picture URL.

We use your Google identifier to recognise your account, your email to associate your account with its subscription, and your name and picture to display your profile. When you start a paid checkout, your name and email are also used to set up billing with Paddle.

We do not receive your Google password or request access to Gmail messages, Google Drive files, contacts or calendars. Google access tokens are used during sign-in; we do not save Google access or refresh tokens in your account database or use them for ongoing access.

2. Other information we use

  • Travel preferences: your home airport, saved trips, search criteria and trips selected for comparison, so we can provide those features.
  • Subscription information: customer and transaction identifiers, plan, payment status, amounts, currency and billing dates received from Paddle, so we can manage Pro access and show your billing history. Payment card details are handled by Paddle; Yuzu does not store full card numbers or security codes.
  • Technical information: your IP address, session identifiers and request diagnostics, used to deliver the site, prevent abuse and investigate errors. Your IP address can also be used to suggest a nearby departure airport; this does not require precise device location.
  • Support requests: the information you send us when you ask for help or exercise your privacy rights.

3. How information is shared

Google handles authentication. Our hosting and database infrastructure process information needed to operate the service. Paddle receives your name and email when you start checkout and processes payments and subscriptions under its Privacy Policy.

Pages that load Google Fonts or your Google profile picture make requests to Google, which receives technical connection information such as your IP address. When you follow a booking link, the airline or booking provider handles information you submit on its site under its own privacy policy.

We do not sell Google user data or use it for personalised advertising. Access to account information is limited to operating and supporting Yuzu, investigating security issues and meeting legal obligations. Information may be disclosed when required by law.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.

4. Storage, security and retention

Your account profile, saved trips and subscription records are stored in our server-side database. Login sessions and temporary search state are stored separately on the server. The production site uses HTTPS, and session cookies use Secure, HttpOnly and SameSite protections. Administrative access is restricted by authentication and access checks.

Account information is kept while you use your account, unless you request deletion. After a verified deletion request, we remove the account profile, preferences and saved trips, except information that must be retained for legal obligations, accounting or resolving disputes. Billing records held by Paddle are subject to Paddle’s own retention requirements.

Session cookies have a 30-day lifetime. Signing out ends your current login session. Browser preferences remain on your device until you clear them. Revoking Google access alone does not delete information already stored by Yuzu.

5. Cookies and browser storage

We use a session cookie to keep you signed in and support security and search features. Local storage remembers your language, last departure airport and comparison list. You can remove these through your browser’s site-data settings. Blocking session cookies may prevent sign-in and some account features from working.

Paddle may use its own cookies or similar technologies when you use checkout or its customer portal.

6. Your choices and deleting your data

You can update your home airport in your account and remove saved trips from Saved trips. You may also request access to, correction of or deletion of the personal information we hold about you.

  1. Send a deletion request using the contact details below, preferably from the email address associated with your Yuzu account. Include “Delete my Yuzu account” in the subject. We may need to verify account ownership before acting on the request; never send your Google password.
  2. If you have an active paid subscription, cancel it in your account before deletion, or ask us for help with cancellation in the same request. Removing a Google connection or clearing browser data does not cancel billing.
  3. You can also remove Yuzu from your Google Account connections to stop future Google sign-in. To delete information already held by Yuzu, send the deletion request as well.

Deleting your Yuzu account removes your profile, preferences and saved trips. If some records must be retained, we will explain which records and why when responding to your request.

7. Changes to this policy

We will publish updates on this page and change the date above. If we introduce a new use of Google user data, we will notify you and request any necessary consent before using it for that purpose.

8. Contact

Yuzu is operated by Yuzudeals. For privacy questions, account deletion or other data requests, email yuzudeals@gmail.com.