Privacy Policy

Last Updated: April 3, 2026

The Flight Agent ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights over it.

1. Data We Collect

Data	Purpose
Email address	Account authentication and deal alert delivery
Flight preferences (origin, destination, budget, currency)	Running your automated price scouts
Notification settings (Telegram ID, phone number)	Sending alerts via your chosen channel — only if you provide them
Subscription tier and billing status	Enforcing plan limits; managed by Lemon Squeezy
Usage data (scout scans, deal alerts sent)	Service analytics and billing accuracy

We do not collect physiological data, government IDs, or financial card details. Payment card data is handled entirely by Lemon Squeezy and never passes through our servers.

2. How We Use Your Data

To operate your flight scouts and deliver price alerts
To manage your account and subscription
To improve service reliability and performance
To respond to your support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

To provide the Service, we integrate with the following providers:

Supabase — database and authentication (data stored in encrypted EU/US data centres)
Anthropic Claude — primary AI model for deal analysis and Butler chat (your email is never sent to the AI)
Google Gemini — fallback AI model (same data handling policy; no personal identifiers sent)
Travelpayouts — flight price data source (only route and date parameters are shared)
Lemon Squeezy — payment processing and subscription management
Vercel — serverless hosting (no personal data stored at the edge beyond request logs)

4. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all profile data, flight scouts, and deal history are permanently deleted from our production database within 24 hours. Backup copies may persist for up to 30 days before being purged.

5. Cookies and Tracking

We use essential session cookies to maintain your login state. We do not use advertising pixels, cross-site tracking, or analytics cookies. No third-party trackers are embedded in the application.

6. Security

Data is stored in encrypted Supabase databases with row-level security policies. Authentication uses industry-standard JWT tokens. All data in transit is encrypted via TLS. We follow security best practices and regularly review our infrastructure.

7. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate data via your profile settings
Deletion — delete your account and all associated data at any time from your dashboard
Portability — request your data in a portable format
Object — object to processing of your data in certain circumstances

To exercise any of these rights, contact us at support@theflightagent.app. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Privacy Contact
For privacy-related requests or questions, email us at support@theflightagent.app