Legal
Privacy Policy
This is a plain-language summary provided for transparency. It is a draft pending formal legal review and does not yet constitute the final terms.
Last updated: 6 August 2026
What we collect
Account details (name, email, phone), booking and traveler details you enter, messages you send us, and basic technical data needed to run and secure the site.
Why
To take and fulfil your bookings, confirm them with providers, process payments, send transactional emails, support you, and keep the service secure.
Who processes your data
Supabase (database, accounts, and authentication), Stripe (payments — card details go directly to Stripe), Resend (transactional and notification email), Cloudflare (content delivery and security), Sentry (error monitoring), and — only with your consent — Microsoft Clarity and Google Analytics. We share only what each needs to do its job.
Cookies
See our Cookie policy.
Analytics
With your consent we use Microsoft Clarity, which records a replay of your session, and Google Analytics 4, which counts page views. Names, emails, phone numbers, and free-text fields are masked before the replay leaves your browser — form fields by Clarity's strict masking, and the pages that display them by an explicit mask on our side. We never see your card details: they go straight to Stripe. Sensitive values are stripped from page addresses before they are sent. In the EEA, the UK and Switzerland none of this loads until you accept it.
Error monitoring
We use Sentry to be told when something breaks. This is disclosed rather than consented: it stores nothing on your device, sends nothing unless an error occurs, records no session replay, and is configured not to attach personal identifiers. When an error is sent it includes a short technical trail of the recent pages and requests that led to it, with sensitive values stripped from the addresses.
Retention
We keep booking records as long as needed for the service and our legal and accounting obligations.
Your choices
You can contact us to access or correct your information, or to ask about deletion.
Data controller
Airpasso Corp. (a Delaware C corporation), registered at 800 N King Street, Suite 304 -3667, Wilmington, DE 19801, United States.
