Privacy Policy
Last updated: September 2026
1. Who we are
AirAlarms (“the Service”) is a flight search and price-alert service. When you use our platform (https://flight-three-delta.vercel.app), we act as the data controller for the personal data described below.
2. What we collect
- Account data: your email address, used to sign you in and send price alerts.
- Alert data: routes, dates, traveler counts, cabin class and target prices you choose to track.
- Usage data: anonymous analytics (pages visited, search behaviour) to improve the Service.
- Subscription data: for paid plans, payments are handled by Paddle.com as our Merchant of Record (see section 4). We receive your billing email, subscription status and plan tier — we never see or store your card details.
3. How we use your data
- To sign you in and maintain your session.
- To monitor flight prices on routes you track and email you when a deal appears.
- To provide, improve and secure the Service.
- To attribute bookings we refer you to (commissions fund the Service).
4. Third parties
We share minimal data with the services required to run AirAlarms: our hosting provider (Vercel), our database provider (Supabase), and our email provider (Resend). Prices are retrieved from our flight-data partners (Travelpayouts, Ignav, Google Flights via SerpApi). We never sell your personal data.
Payments — Paddle.com (Merchant of Record): paid subscriptions are sold and processed by Paddle.com Market Ltd. When you subscribe, Paddle acts as the merchant of record: it collects and processes your payment, handles taxes (including VAT/GST), and issues refunds. We share only your email address and subscription identifiers with Paddle for this purpose. Paddle's own privacy policy applies to its payment processing: paddle.com/legal/privacy.
5. Cookies and analytics
We use essential cookies to keep you signed in and to securely link magic-link logins. If analytics are enabled, they are privacy-friendly and never tied to your identity unless you opt in.
6. How long we keep data
Alerts and account data are kept while your account is active. You can delete alerts at any time, and you may request full account deletion by contacting us. Analytic aggregates are kept for at most 26 months.
7. Your rights
Depending on your location (including under the GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. Email us to exercise any of these rights — we respond within 30 days.
8. Contact
Questions about this policy? Reach us via the contact page.