Privacy Policy
We collect only what's needed to make your reservation and support you. This page explains what that is, in plain language.
Last updated: September 15, 2026
1. What we collect
Passenger details: first and last names, gender and date of birth — required by airlines to create a reservation.
Contact details: email address and phone number, so we can deliver the PDF and so the airline can reach you if needed.
Billing details: billing country and postal code, passed to our payment processor. We never receive your card number.
Technical data: IP address, browser information, approximate location and usage events, used for security, abuse prevention and (with your consent) analytics.
Support messages: what you send us through the contact form, together with your name, email and order number.
2. Why we use it
To create and deliver your reservation, process your payment, send transactional emails (confirmation, PDF, refunds, schedule changes), provide support, prevent fraud and abuse, comply with legal obligations, and — only if you opt in — send our newsletter.
The legal bases are performance of the contract with you, our legitimate interests (security, abuse prevention, improving the service) and your consent (analytics cookies, newsletter).
3. Who processes it
Duffel (flight search and reservations) and the airline operating the flight; Stripe (payments); Supabase (database and file storage); Resend (email delivery); PostHog (analytics, only with consent); Vercel (hosting). Each processor only receives the data needed for its task.
We don't sell personal data and we don't share it with advertisers.
4. How long we keep it
Passenger data (names, date of birth, phone) is pseudonymised 12 months after the order ends. Order and payment records are kept for as long as accounting and tax rules require. Support messages are kept for two years. Newsletter data is kept until you unsubscribe.
5. Cookies
Essential cookies keep your checkout session and remember your cookie choice. Analytics cookies (PostHog) are only set after you allow them in the cookie banner; you can change your mind at any time by clearing the site's cookies.
6. Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to processing, and withdraw consent at any time. If you're in the EU/UK you can also complain to your data-protection authority.
To exercise any of these rights, write to us through the contact form or at support@boardably.co with your order number.