Legal
Privacy Policy
This is a plain-language summary provided for transparency. It is a draft pending formal legal review and does not yet constitute the final terms.
Last updated: 4 October 2026
What we collect
Account details (name, email, phone), booking and traveler details you enter, messages you send us, and basic technical data needed to run and secure the site.
Why
To take and fulfil your bookings, confirm them with providers, process payments, send transactional emails, support you, and keep the service secure.
Who processes your data
Supabase (database, accounts, and authentication), Stripe (payments — card details go directly to Stripe), Resend (transactional and notification email), Cloudflare (content delivery and security), Sentry (error monitoring), and — only with your consent — Microsoft Clarity and Google Analytics. We share only what each needs to do its job.
Cookies
See our Cookie policy.
Analytics
With your consent we use Microsoft Clarity, which records a replay of your session, and Google Analytics 4, which counts page views. Names, emails, phone numbers, and free-text fields are masked before the replay leaves your browser — form fields by Clarity's strict masking, and the pages that display them by an explicit mask on our side. We never see your card details: they go straight to Stripe. Sensitive values are stripped from page addresses before they are sent. In the EEA, the UK and Switzerland none of this loads until you accept it.
Error monitoring
We use Sentry to be told when something breaks. This is disclosed rather than consented: it stores nothing on your device, sends nothing unless an error occurs, records no session replay, and attaches only a random account number, never your name or email; once your account is deleted, that number is no longer linked to a profile. When an error is sent it includes a short technical trail of the recent pages and requests that led to it, with sensitive values stripped from the addresses.
Retention
We keep booking, invoice, refund and wallet records for as long as our legal and accounting obligations require, including after you delete your account. When an account is deleted we remove the name and contact details from its bookings and passengers; issued invoices keep the name and email they were issued to, and our payment provider keeps its own payment records.
Your choices
You can delete your account yourself in Account → Edit profile. The deletion happens 14 days after you ask; until then you can sign in and cancel it. Open bookings, open disputes and a wallet balance must be settled first. You can also email us to access, correct or delete your information.
Data controller
Airpasso Corp. (a Delaware C corporation), registered at 800 N King Street, Suite 304 -3667, Wilmington, DE 19801, United States.
