Privacy Policy

Effective Date: January 1, 2025
GE Finder ("we," "us," or "our") is committed to protecting your privacy and complying with all applicable privacy laws, including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other state privacy regulations. This policy explains what information we collect, how we use it, and your rights regarding your personal data.

Information We Collect

We collect only the essential information needed to provide our Global Entry appointment alert service:

Personal Information You Provide

  • Email Address: Required to send you Global Entry appointment alerts and service communications
  • Name: First name for personalized communications
  • Enrollment Center Preferences: Your selected Global Entry locations for targeted alerts
  • Date Preferences: Optional date range preferences to customize your alerts
  • Payment Information: Processed securely through Stripe (we do not store payment details)

Information Automatically Collected

  • Usage Data: Anonymous analytics about service usage to improve performance
  • Device Information: Basic device and browser information for service optimization
  • IP Address: For security purposes and fraud prevention (automatically deleted after 30 days)
  • Log Data: Service logs for troubleshooting and security monitoring

What We Don't Collect

We practice data minimization and explicitly do NOT collect:

  • Phone numbers or SMS data
  • Social Security Numbers or government ID numbers
  • Passport or travel document information
  • Social media profiles or personal browsing history
  • Location data beyond your selected enrollment centers
  • Biometric information
  • Financial account information (handled by Stripe)

How We Use Your Information

We use your personal information only for the following lawful purposes:

Primary Purpose: Providing Global Entry appointment alerts based on your preferences
  • Service Delivery: Monitoring appointment availability and sending email notifications
  • Customer Support: Responding to your inquiries and providing assistance
  • Service Improvement: Analyzing anonymous usage data to enhance our service
  • Legal Compliance: Meeting legal obligations and protecting our rights
  • Fraud Prevention: Detecting and preventing fraudulent activities
We do not and will never:
  • Sell your personal information to third parties
  • Share your data for advertising purposes
  • Use your information for purposes other than those disclosed

Information Sharing and Disclosure

We may share your information only in the following limited circumstances:

Service Providers

  • Stripe: Payment processing (subject to Stripe's privacy policy)
  • Email Service Provider: Sending appointment alerts (data encrypted in transit)
  • Cloud Infrastructure: Secure hosting with SOC 2 compliant providers

Legal Requirements

  • When required by law, court order, or government request
  • To protect our rights, property, or safety
  • To prevent fraud or illegal activities
  • In connection with a business transfer (with notice to you)

All service providers are bound by strict data protection agreements and cannot use your data for their own purposes.

Data Security and Protection

We implement comprehensive security measures to protect your personal information:

  • Encryption: All data transmission uses SSL/TLS encryption
  • Access Controls: Limited access on a need-to-know basis with multi-factor authentication
  • Infrastructure Security: SOC 2 compliant cloud providers with regular security audits
  • Data Minimization: We collect and retain only necessary information
  • Regular Updates: Continuous security monitoring and system updates
  • Incident Response: Procedures in place for data breach notification

Data Retention

We retain your personal information only as long as necessary:

  • Active Subscriptions: Data retained for the duration of your service (typically 90 days)
  • Automatic Deletion: Personal data automatically deleted 30 days after subscription expiration
  • Payment Records: Retained for 7 years for tax and legal compliance (anonymized)
  • Support Records: Deleted after 2 years unless ongoing legal requirements
  • Anonymous Analytics: May be retained indefinitely as it cannot identify you

Your Privacy Rights

You have comprehensive rights regarding your personal information:

Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have additional rights:

  • Right to Know: Request details about personal information we collect, use, and share
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt-out of sale/sharing (we don't sell data, but you can opt-out)
  • Right to Limit: Limit use of sensitive personal information
  • Right to Non-Discrimination: Equal service regardless of exercising privacy rights

Universal Rights (All Users)

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Request immediate deletion of your data
  • Portability: Receive your data in a portable format
  • Unsubscribe: Cancel your subscription at any time
  • Withdraw Consent: Withdraw consent for data processing
How to Exercise Your Rights:
Email us at support@gefinder.com or use the contact information below. We will respond within 45 days (or as required by applicable law).

Cookies and Tracking

We use minimal tracking technologies:

  • Essential Cookies: Required for service functionality (cannot be disabled)
  • Analytics: Anonymous usage statistics to improve our service
  • No Advertising Cookies: We do not use cookies for advertising or behavioral tracking

You can control cookies through your browser settings, though disabling essential cookies may affect service functionality.

Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will delete such information immediately.

International Data Transfers

Your information may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

  • Standard Contractual Clauses approved by relevant authorities
  • Adequacy decisions where applicable
  • Other legally recognized transfer mechanisms

Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices, technology, or legal requirements:

  • Notice: We'll update the effective date and notify you of material changes
  • Email Notification: Significant changes will be communicated via email
  • Continued Use: Your continued use constitutes acceptance of the updated policy
  • Opt-Out: You may cancel your service if you disagree with changes

State-Specific Information

California Residents

Categories of Personal Information: Identifiers (email, name), commercial information (subscription details), internet activity (usage logs)

Business Purpose: Providing appointment alert services

No Sale of Data: We have not sold personal information in the past 12 months

Shine the Light: You may request information about data sharing for direct marketing (we don't share for this purpose)

Virginia, Colorado, Connecticut, and Utah Residents

You have rights similar to California residents, including the right to access, delete, correct, and opt-out of certain data processing. Contact us to exercise these rights.

Privacy Questions or Requests?

We're committed to protecting your privacy and responding to your concerns.