Privacy Policy

1. Introduction

Welcome to FlightMate. We respect your privacy and are committed to protecting your personal information with the highest standards. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our flight deals newsletter service, including our website (www.flightmate.dev) and email communications.

By accessing, visiting, or using FlightMate, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

This policy was last updated on January 2025 and is effective immediately for new users and within 30 days for existing users.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when using our service:

• Email Address: Required for account creation and sending flight deal newsletters
• City Preferences: Your selected departure city for personalized flight deals
• Subscription Tier: Your chosen plan (Free, Monthly, or Annual)
• Payment Information: Processed securely through Stripe (we do not store credit card details)

2.2 Automatically Collected Information

When you use FlightMate, we automatically collect certain technical information:

• Email Engagement Data: Open rates, click-through rates, and email client information
• Device Information: Device type, operating system, and browser type
• Usage Data: Pages visited, time spent on pages, and navigation patterns
• IP Address: Used for fraud prevention and security purposes

2.3 Information We Do NOT Collect

We believe in minimal data collection. We do NOT collect:

• Your full name (unless you provide it in support communications)
• Phone numbers
• Physical addresses
• Social media profiles
• Passport or travel document information
• Booking history or flight purchases

3. How We Use Your Information

We use the information we collect to:

• Deliver Our Service: Send you curated flight deal emails based on your selected city and subscription tier
• Process Payments: Handle subscription billing through our payment processor, Stripe
• Improve User Experience: Analyze engagement to improve deal quality and email content
• Communicate With You: Send account notifications, subscription updates, and respond to support requests
• Prevent Fraud: Detect and prevent fraudulent activity, abuse, and security incidents
• Comply With Legal Obligations: Meet legal and regulatory requirements

We will NEVER use your information for advertising purposes or sell your data to third parties.

4. How We Share Your Information

4.1 Service Providers

We share your information with trusted third-party service providers who help us operate FlightMate:

• Stripe: Payment processing and subscription management
• Resend: Email delivery infrastructure
• PostgreSQL (Hosted): Database hosting for subscriber information
• Redis (Hosted): Caching and session management

These service providers are contractually obligated to protect your data and may only use it to provide services to FlightMate.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government requests or regulatory requirements
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

4.3 Business Transfers

If FlightMate is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

4.4 What We Don't Share

We will NEVER:

• Sell your personal information to data brokers or advertisers
• Share your information with airlines or booking platforms
• Use your data for targeted advertising
• Provide your email to third-party marketing services

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL
• Secure Storage: Personal data is stored in encrypted databases with access controls
• Payment Security: Credit card information is handled exclusively by Stripe (PCI-DSS compliant)
• Access Controls: Limited employee access to personal data on a need-to-know basis
• Regular Audits: Periodic security reviews and vulnerability assessments

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

6. Data Retention

We retain your information for as long as necessary to provide our service and comply with legal obligations:

• Active Subscribers: We retain your data for the duration of your subscription
• Cancelled Subscriptions: Data is retained for 90 days to allow reactivation, then deleted
• Payment Records: Retained for 7 years for tax and accounting purposes (as required by law)
• Email Engagement Data: Anonymized after 12 months

You may request immediate deletion of your data at any time by contacting us through our contact form.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request a copy of all personal data we hold about you. We will provide this information in a machine-readable format (JSON or CSV) within 30 days.

7.2 Correction

You can update your email address and city preferences at any time through your account settings or by contacting support.

7.3 Deletion

You have the right to request deletion of your personal data. We will delete your information within 30 days, except where retention is required by law.

7.4 Opt-Out of Emails

You can unsubscribe from our emails at any time by:

• Clicking the "Unsubscribe" link in any email
• Cancelling your subscription through your account settings
• Contacting us through our contact form

7.5 GDPR Rights (EU Residents)

If you are located in the European Union, you have additional rights under GDPR:

• Right to object to data processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

7.6 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

To exercise any of these rights, contact us through our contact form.

8. Cookies and Tracking Technologies

8.1 What Cookies We Use

FlightMate uses minimal cookies and tracking technologies:

• Essential Cookies: Required for login, session management, and core functionality
• Analytics Cookies: Track page views and user engagement (anonymized)
• Email Tracking: Track email opens and clicks to improve content

8.2 What We Don't Use

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking
• Social media tracking pixels
• Retargeting or remarketing cookies

8.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect site functionality. For more information, see our Cookie Policy.

9. Third-Party Links

Our emails contain links to airline websites and booking platforms. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Important: FlightMate does not use affiliate links. All links are provided for informational purposes only, and we do not receive compensation from airlines or booking platforms.

10. Children's Privacy

FlightMate is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately through our contact form, and we will delete it promptly.

11. International Data Transfers

FlightMate is based in the United States. If you are accessing our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries.

By using FlightMate, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify you via email
• Your continued use after changes are posted constitutes acceptance

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days.