Menu

DestinationHub Privacy Policy

Effective Date: May 5, 2026

Welcome to DestinationHub, operated by Programmatic LLC. We provide a business-to-business software platform that empowers tourism boards, venues, and event operators ("Creators") to design, manage, and publish interactive digital maps, tours, and experiences for their audiences ("End Users").

We believe that privacy is a fundamental right, not just a regulatory hurdle. Because our platform serves two distinct groups, our data responsibilities vary. For Creators, we act as a data controller with respect to Creator account and billing information.

For End Users interacting with Creator-published content, DestinationHub provides the underlying technology platform. Creators determine what content is published and how their experiences are configured. DestinationHub processes limited technical data to operate the platform but does not control or make decisions regarding Creator Content.

This Privacy Policy is provided for transparency purposes and does not independently create contractual obligations beyond those contained in applicable agreements, including the Terms of Service and any applicable Data Processing Addendum.

This Privacy Policy explains in plain language what information we collect, why we need it, and how we protect it across all our global operations. If you have any questions about this policy or your data, please reach out to us at privacy@destinationhub.io.

Nothing in this Privacy Policy should be interpreted as legal advice or as a guarantee that use of the platform will ensure compliance with any specific law or regulation.

PRIVACY AT A GLANCE

  • What We Collect: We may collect account information, usage data, device information, support communications, analytics data, uploaded content, and other information provided through the Services.

  • How We Use Information: We use information to provide and improve the Services, support accounts, maintain security, analyze usage, process transactions, communicate with users, and operate our business.

  • Creator Content: Customers and Creators may upload maps, tours, media, text, and related content that can be viewed or interacted with by End Users.

  • Cookies and Analytics: We use cookies and similar technologies to operate the Services, improve functionality, analyze traffic, and understand engagement.

  • Third-Party Providers: We may use hosting providers, analytics providers, payment processors, infrastructure services, communications tools, and other third-party providers to support the Services.

  • International Processing: Information may be processed in the United States and other countries where we or our service providers operate.

  • Your Choices and Rights: Depending on your location, you may have rights relating to access, correction, deletion, portability, objection, or limitation of certain data processing activities.

  • Security: We use reasonable administrative, technical, and organizational safeguards designed to protect information, but no system can be guaranteed completely secure.

  • Children and Educational Use: The Services are not directed toward children and are not intended for unsupervised educational or classroom use involving minors without Customer oversight and compliance responsibilities.

  • Contact Us: Questions regarding privacy or data practices may be directed to info@destinationhub.io.

  • Important: This summary is provided for convenience only and does not modify or replace the full Privacy Policy. In the event of any conflict between this summary and the full Privacy Policy, the full Privacy Policy controls.

1. Definitions

For purposes of this Privacy Policy:

“Company,” “DestinationHub,” “we,” “us,” or “our” means Programmatic LLC, doing business as DestinationHub.

“Cookies” means small text files, identifiers, pixels, tags, scripts, or similar technologies stored on or accessed through a device or browser.

“Creator Content” means content uploaded, published, managed, or distributed through the Services by Customers or Authorized Users, including maps, tours, text, images, videos, and related materials.

“Customer” means an organization, business, creator, or individual using the Services.

“End User” means a visitor, viewer, participant, or other individual who accesses or interacts with Creator Content or publicly available portions of the Services.

“Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identifiable individual.

“Process,” “Processing,” or “Processed” means collecting, storing, using, accessing, disclosing, transferring, analyzing, deleting, or otherwise handling Personal Data.

“Services” means the DestinationHub platform, website, applications, mapping tools, hosted experiences, and related services operated by DestinationHub.

“Third-Party Services” means external providers, integrations, analytics providers, payment processors, infrastructure providers, or other third-party systems connected to the Services.

“Usage Data” means technical, analytics, device, browser, interaction, session, diagnostic, or performance information collected through use of the Services.

2. What We Collect & Why

We collect information to make our platform functional, secure, and useful. The type of data we gather depends on how you interact with DestinationHub.

Information You Give Us Directly

When Creators register for an account, we collect your name, professional email address, billing details, and account preferences. We need this information to establish your account, process your subscription payments, and provide customer support.

Legal Basis: Processing this data is necessary for the performance of our contract with you.

Information Collected Automatically

When End Users access a map or tour, or when Creators use our administrative dashboard, we automatically collect certain technical data. This includes device information (such as browser type and operating system), usage analytics (how you navigate the interactive experiences), and precise geolocation data. We collect precise geolocation to ensure that location-based features—like showing an End User where they are on a digital tour map—function correctly. We limit the collection and retention of precise geolocation data to what is reasonably necessary to provide location-based functionality.

Legal Basis: We rely on consent obtained by Creators or through platform mechanisms where applicable for precise geolocation and non-essential tracking, and our legitimate interest in maintaining and improving our platform for basic device and usage data.

Information from Third Parties

We integrate with a select few third-party services to run our business smoothly. For example, when a Creator pays for a subscription, our payment processor (Stripe) provides us with limited billing confirmation data (but never your full credit card number). We also receive aggregated usage reports from Google Analytics.

Legal Basis: We process this information based on our legitimate interest in managing our business operations and understanding market trends.

3. How We Use Your Information

We do not collect data just to have it. Every piece of information we process serves a specific purpose in delivering or improving DestinationHub.

  • Core Service Delivery: We use Creator account data and End User location data to operate the platform, publish interactive maps, and ensure the software functions as intended. (Contract)

  • Service Improvement and Personalization: We analyze aggregated usage data to understand which features are popular, identify bugs, and design better tools for our Creators. (Legitimate Interest)

  • Communication: We use Creator email addresses to send important service updates, billing receipts, and technical notices. (Contract and Consent)

  • Security and Fraud Prevention: We monitor platform activity and device data to detect suspicious behavior, prevent unauthorized access, and protect our infrastructure. (Legitimate Interest)

  • Legal Compliance: We may process financial records or retain certain data to comply with tax laws and global regulatory requirements. (Legal Obligation)

  • Marketing: With your permission, we may send Creators promotional emails about new platform features. You can opt out of these communications at any time. (Consent)

4. Platform Role & Creator Responsibility

  • For Creator account information, billing information, and DestinationHub operational data, DestinationHub generally acts as a controller or business. For Personal Data processed solely on behalf of Customers through the Services, DestinationHub generally acts as a processor or service provider.

  • DestinationHub acts solely as a technology platform. We do not create, control, or monitor Creator Content or how Creators use personal data within their experiences.

Creators are solely and exclusively responsible for ensuring that their collection and use of End User data complies with applicable privacy laws, including providing required notices and obtaining any necessary consents.

  • DestinationHub does not independently verify that Creator implementations comply with applicable privacy laws.

5. When We Share Your Information

We respect your privacy and limit the sharing of your information to what is strictly necessary. We do not sell personal data in the traditional sense of exchanging it for monetary value.

When we do share information, it is subject to appropriate contractual and operational safeguards with the following categories of recipients:

  • Essential Service Providers: We share data with trusted infrastructure partners to run our platform. This includes Amazon Web Services (AWS) for secure cloud hosting, Stripe for secure payment processing, and Google Analytics for understanding platform traffic.

  • Legal Requirements: We will disclose your information if we are legally required to do so by a valid subpoena, court order, or other governmental request, or to protect the rights, property, or safety of us, our users, Creators, or the public.

  • Business Transitions: If we are involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify Creators via email before any data is transferred and becomes subject to a different privacy policy.

  • With Your Consent: We may share your information with other third parties if you explicitly ask or authorize us to do so.

6. Key Privacy Rights Overview

Depending on where you live—including the European Economic Area (GDPR), the UK, Canada (PIPEDA), California (CCPA/CPRA), and other US States (VCDPA, CPA, CTDPA)—you have specific rights regarding your personal information. We aim to extend these core rights to all our users globally, subject to applicable law and our role in processing the data.

  • Access Your Data: You can request a copy of the personal information we hold about you. We will respond within the timeframes required by applicable law.

  • Correct Inaccuracies: If your account information is wrong or outdated, Creators can update it directly in the administrative dashboard or contact us for help.

  • Delete Your Data: You can ask us to erase your personal data. We will comply unless we have a legal obligation to keep it (such as tax records).

  • Port Your Data: You have the right to receive your data in a structured, commonly used, and machine-readable format to transfer it to another service.

  • Opt Out of Marketing & Sales/Sharing: You can unsubscribe from marketing emails using the link at the bottom of any message. While we do not sell data for money, US state laws define "selling" or "sharing" broadly to include some analytics tracking. You can opt out of this by clicking the "Do Not Sell or Share My Personal Information" link in our website footer.

  • Withdraw Consent: Where we rely on your consent to process data (like precise geolocation), you can withdraw it at any time through your device settings, without affecting the lawfulness of processing before the withdrawal.

  • Lodge Complaints: If you believe we have violated your privacy rights, you have the right to file a complaint with your local data protection authority.

To exercise any of these rights, please email privacy@destinationhub.io. If you are an End User seeking to exercise rights regarding data collected by a specific Creator's map or tour, End Users must direct requests regarding data collected within a specific Creator experience to that Creator, who is the responsible party for such data, as they are the data controller for that specific experience. We may assist Creators in fulfilling these requests at our discretion.

7. Data Security

We take the security of your data seriously and we implement commercially reasonable technical and organizational measures designed to protect personal data. Our databases are hosted on AWS, utilizing industry-standard encryption both in transit and at rest. We enforce strict access controls, meaning only authorized personnel who need to do their jobs can access personal data, and we continuously monitor our systems for vulnerabilities.

However, we want to be honest with you: no system connected to the internet is 100% secure. While we work tirelessly to protect your information, we cannot guarantee absolute security against highly sophisticated cyberattacks.

You also play a role in security. We encourage Creators to use strong, unique passwords and to keep their account credentials confidential. In the unfortunate event of a data breach that compromises your personal information, we will notify affected users and relevant regulators as required by applicable law, outlining the nature of the breach and the steps we are taking to mitigate it.

8. Data Retention

We keep your personal information only for as long as we need it to fulfill the purposes outlined in this policy. Our retention periods are based on the following logic:

  • Active Account Data: We retain Creator account information for the duration of our business relationship, plus a reasonable buffer of 90 days after account closure to allow for accidental deletions or account recovery.

  • Financial Records: By law, we are required to keep billing and transaction records for 7 years for tax and auditing purposes.

  • Marketing Preferences: We keep a record of your marketing preferences indefinitely to ensure we respect your choice to opt out.

  • Technical Logs: Routine server logs, device information, and usage analytics are automatically deleted or de-identified after 12 months.

  • We may retain data for longer periods where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

9. Cookies & Tracking

DestinationHub uses cookies, local storage, session storage, and similar technologies to operate the Services, remember preferences, maintain security, and understand how the platform is used.

  • Essential Cookies: These are strictly necessary for the platform to function, such as keeping Creators logged into their dashboards or remembering security settings.

  • Analytics Cookies: We use third-party cookies from Google Analytics to see how visitors interact with our website and published tours, helping us improve the user experience.

You have control over these technologies. When you first visit our site, you will see a banner allowing you to accept or reject non-essential cookies. You can also manage your preferences at any time through your browser settings.

Some browsers offer a “Do Not Track” (DNT) setting. Because there is no uniform standard for DNT signals, our platform does not currently respond to them.

10. Children's Privacy

DestinationHub is a general audience B2B platform and is not directly targeted at children. We do not offer End User account registration. However, we recognize that Creators may use our platform to build interactive maps, tours, or educational experiences that are accessed by minors. DestinationHub does not knowingly collect personal information directly from children and does not design or operate Creator Content.

Because we process precise geolocation and device data to make these experiences work, we design our platform with consideration for applicable children’s privacy laws, including COPPA. When a Creator designates an experience as directed toward children under the Designated Age (as defined in the Terms of Service):

  • Creators are solely responsible for determining whether their experiences are directed toward children and for implementing any required parental notice and consent mechanisms under applicable law.

DestinationHub provides tools that may assist Creators in limiting data collection, but we do not guarantee that such tools satisfy legal requirements in any jurisdiction. Creators acknowledge that they are solely responsible for compliance with all laws applicable to children’s data in connection with their use of the platform.

11. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your Personal Data. These rights may include:

  • The right to access Personal Data we maintain about you;

  • The right to request correction of inaccurate Personal Data;

  • The right to request deletion of Personal Data;

  • The right to request a copy of certain Personal Data in a portable format;

  • The right to object to or restrict certain processing activities;

  • The right to withdraw consent where processing is based on consent; and

  • The right to opt out of processing activities involving Personal Data, including certain targeted advertising, “sharing,” or analytics activities where applicable law provides such rights.

You may submit a privacy-related request by contacting us at privacy@destinationhub.io or by using the Privacy Request form in the footer below.

We may take reasonable steps to verify your identity before processing a request. Certain requests may be denied or limited where permitted by law, including where information must be retained for legal compliance, security, fraud prevention, billing, dispute resolution, or legitimate business purposes. Where required by applicable law, you may have the right to appeal a denial of your request by contacting us using the information provided below.

We will respond to verified requests within the timeframes required by applicable law.

Where DestinationHub processes Personal Data on behalf of a Creator, organization, or Customer, we may direct you to submit your request directly to the applicable Customer acting as the data controller.

In certain jurisdictions, you may designate an authorized agent to submit requests on your behalf, subject to applicable verification requirements.

California residents may exercise applicable opt-out rights, including rights related to certain targeted advertising, analytics, or “sharing” activities, by using our cookie preference center accessible through the “Cookies” link in the website footer and selecting update cookies button above Cookie Policy.

12. International Transfers

Because we operate globally, your personal information may be transferred to, stored, and processed in countries other than your own, primarily in the United States where our AWS servers are located.

When we transfer data originating from the European Economic Area (EEA), the UK, or Canada to other jurisdictions, we take steps intended to ensure that it receives an adequate level of protection. We achieve this by relying on recognized legal safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) and applicable adequacy decisions, intended to provide appropriate safeguards for your personal information.

13. Limitation of Responsibility

This Privacy Policy describes how we handle data but does not create any additional contractual or legal obligations beyond those set forth in our Terms of Service including any limitations of liability, disclaimers, and dispute resolution provisions contained therein.

14. Changes to this Policy

Privacy laws and technology are always evolving, and our business will grow. As a result, we may update this Privacy Policy from time to time.

If we make material changes to how we handle your personal information, we will provide fair notice by emailing Creators and posting a prominent announcement on our website before the changes take effect. Your continued use of DestinationHub after the effective date constitutes your acknowledgment of the updated policy. You can always find the most current version of this policy on our website, with the "Effective Date" clearly listed at the top.

Our actual data practices may evolve as our services develop, and may not always align perfectly with past descriptions in this policy.

15. No Warranty Regarding Data Practices

While we strive to follow the practices described in this Privacy Policy, all data processing is provided on an “as is” and “as available” basis to the extent permitted by law.

16. Contact Us

We welcome your questions, concerns, and feedback regarding this Privacy Policy. You can reach us through any of the following methods:

Programmatic LLC, doing business as DestinationHub