Privacy policy

Information we collect

• Traveler names, delivery email, selected flight, route, and travel date.
• Order status and provider identifiers needed to reconcile payment and delivery.
• Limited anonymous product events, such as whether search or Checkout was started. These events do not include names, email, route, order IDs, payment IDs, or document contents.
• Basic server logs needed to operate and secure the service. Operational logs do not intentionally contain traveler or payment details.

How we use it

We use the information to search flights, create the document, process payment, deliver the PDF, provide support, prevent abuse, and maintain the service. We do not sell personal information or use traveler details for advertising.

Service providers

• Amadeus may receive route and date search fields. It does not receive traveler names or delivery email from FlightLeaf.
• Stripe processes payment and receives the delivery email and order reference. FlightLeaf does not receive full card details.
• Resend receives the delivery email, message content, and attached PDF. Resend states that standard-plan email and log data is retained for 30 days.
• PostHog receives allowlisted anonymous conversion events when analytics is configured. Automatic page capture and session recording are disabled.
• Our hosting and database providers store application data and backups in the United States.

Retention and security

We keep order information only as long as reasonably needed to deliver the service, handle support, prevent abuse, and meet legal or accounting obligations. Download links expire seven days after order creation. We use access controls, HTTPS in production, server-only secrets, and signed download links, but no system can guarantee absolute security.

Your choices

You can ask us to access, correct, or delete information associated with your order. We may need to retain limited records where required by law or for legitimate fraud, dispute, or accounting needs.

Children and international use

FlightLeaf is not directed to children under 18. Information may be processed in the United States, where privacy laws may differ from those where you live.

Contact

Privacy requests can be sent to hello@inversionconsultants.com.