Privacy

What we store

• Your email address — it is your account. Sign-in links go there.
• Points balances you enter — program name and a number, typed by you. We do not verify them and cannot see the real balance.
• Your alerts — the routes and criteria you asked us to watch.
• Membership status — whether the account is active, and which plan.
• MCP usage counts — how many tool calls you made today, to enforce fair use.

What we never touch

• Your loyalty accounts. We have no credentials for them and no connection to them. Balances are manual entry, by design.
• Travel payments. Booking happens on the airline or program’s own site. We never see a card used for travel.
• Passwords. There aren’t any — sign-in is an emailed link.

Who else is involved

Running the service means a handful of processors see some of this data:

• Supabase — hosts the database and sends sign-in links.
• Duffel — receives the route, date and cabin of a search to return live cash fares. It does not receive your identity.
• Stripe — will handle billing. Card details go to Stripe, never to us.

We do not sell your data, and we do not share it with airlines or loyalty programs.

Searches

Search results are cached by route, date and cabin so that repeated searches do not re-bill the upstream provider. That cache is keyed on the trip, not on you.

Deleting your data

Email [email protected] and we will delete the account and everything attached to it — balances, alerts, API keys. Deleting the account removes the membership; it does not refund it.

Cookies

We store your sign-in session in the browser so you stay logged in, and a small flag that remembers whether you were signed in so the page does not flicker on reload. No advertising or cross-site tracking cookies.

The boring parts

[Data controller identity, retention periods, and the applicable US state-privacy disclosures to be completed with counsel before public launch.]