Privacy Policy
At Flyspout, we are committed to protecting your privacy and ensuring your personal information is handled with the highest degree of care and security.
Introduction & Scope
This Privacy Policy explains how Flyspout ("Flyspout", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the Flyspout website, search and book flights, create an account, or otherwise interact with our services (collectively, the "Services"). It does not cover the practices of airlines, payment providers, or other third parties you interact with through our platform — their own privacy policies govern that use.
By using the Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Services.
Information We Collect
We collect information you provide directly (such as when you register or book a flight), information generated by using our Services (such as booking and wallet history), and limited information collected automatically.
Account Information
Name, email address, and password (encrypted) when you register. If you sign in with Google, Facebook, or Apple, we receive your name, email, and profile photo from that provider.
Booking & Passenger Data
Passenger names, dates of birth, gender, phone number, and — for certain international itineraries that require it — passport number, expiry, and issuing country. Frequent flyer / loyalty numbers if you provide them.
Payment Information
Billing name and address, and the last 4 digits / card network of any payment method you use. Flyspout does not receive or store your full card number — card data is sent directly to our payment processor, Stripe.
Wallet & Transaction History
Your Flyspout Wallet balance and a record of top-ups, bookings paid from the wallet, and refunds credited to it.
Contact & Support Data
Information you provide when you contact support, such as your name, email, and the content of your message (including any file attachments you choose to send).
Device & Usage Data
IP address, browser type, and basic interaction data collected automatically by our servers as part of normal web traffic logging.
02How We Use Your Data
Service Fulfillment
To search, price, and book flights on your behalf, including sending your passenger details to the airline and processing optional add-ons like Cancel for Any Reason.
Payments & Wallet
To process payments through Stripe and Klarna, maintain your Flyspout Wallet balance, and process refunds.
Account & Communications
To verify your account, send booking confirmations, cancellation updates, password resets, and respond to support requests.
Safety & Integrity
To detect, prevent, and respond to fraud, abuse, and security risks in the booking and payment flow.
Pricing
Route and fare data (not your personal information) may be used by automated pricing tools to help determine displayed prices. See "Third-Party Services" below.
Legal Compliance
To meet record-keeping, tax, and regulatory obligations related to travel bookings and payments.
03Automatic Data & Third-Party Services
Cookies & automatic data
We use a strictly necessary session cookie to keep you signed in, and your browser's local storage to remember app preferences (like your saved search). We do not currently use third-party advertising or analytics cookies (e.g. Google Analytics, Facebook Pixel). If that changes, we will update this Policy and request consent where required.
We share information with the following categories of third parties to deliver the Services. Each operates under its own privacy policy and is responsible for its own handling of the data we share with it.
Duffel — Flight search & booking platform
We send your flight search criteria and, when you book, your passengers' names, dates of birth, contact details, and (where required) passport information to Duffel, who relays it to the relevant airline to issue your ticket.
Stripe — Payment processing
Card payments are sent directly to Stripe. We never receive or store your full card number — only the payment outcome, card network, and last 4 digits.
Klarna — Buy Now, Pay Later
If you choose to pay in installments, your billing details are shared with Klarna (via Stripe) to process that payment plan.
Google, Facebook & Apple — Sign-in providers
If you sign in with one of these providers, they share your name, email, and profile photo with us so we can create or match your account.
Google Wallet & Apple Wallet — Digital boarding pass
If you choose to add a ticket to your phone's wallet app, your flight and booking reference are sent to Google or Apple to generate that pass.
Google Gemini & OpenAI — Automated pricing assistance
We may send anonymized route and fare data (origin, destination, base price) — never your name, email, or other personal information — to these providers to help calculate price adjustments.
Email delivery provider — Transactional email
Account verification, password reset, and booking/cancellation confirmation emails are sent through our email provider using your email address and the relevant booking details.
04Payments & Flyspout Wallet
Card payments
Processed directly by Stripe. We store the payment outcome and a reference to the transaction, not your full card number.
Flyspout Wallet
Your wallet balance and transaction history (top-ups, bookings, refunds) are stored in our database and linked to your account.
Refunds
Refunds are generally credited to your Flyspout Wallet. In some cases our support team may issue a refund directly to your original payment method instead.
Data Security & Retention
We use industry-standard safeguards to protect your information, including encrypted (HTTPS) connections, hashed account passwords, and role-restricted staff access with activity logging on our admin tools. Full payment card details are handled directly by Stripe — Flyspout never receives or stores your complete card number.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We retain booking, passenger, and payment records for as long as needed to fulfil your booking and to meet our legal, tax, and accounting obligations, even after an account is closed.
05Your Rights
Access and Rectification
You can view and update most of your account information (name, contact details, passport, address) directly from your account settings. You may also request a copy of the personal information we hold about you by contacting support.
Account Closure & Erasure
We do not yet offer self-service account deletion. To request that your account be closed and your personal data erased, contact us at the email below. We will action the request subject to legal record-keeping requirements — for example, we must keep booking and payment records for completed transactions for tax and accounting purposes even after closure.
Right to Object & Restrict
You may object to or ask us to restrict certain processing of your data by contacting support. We do not currently send marketing emails; transactional emails (booking confirmations, password resets) are necessary to operate your account.
These rights may vary depending on your country of residence. If you are located in the Philippines, you may also have rights under the Data Privacy Act of 2012 (RA 10173), including the right to lodge a complaint with the National Privacy Commission. The Services are not directed at children, and we do not knowingly collect personal information from anyone under 18 — our Services already require you to be 18 or older to book.
06Changes & Contact
We may update this Privacy Policy from time to time as our Services change. We will update the "Last Updated" date above when we do, and for material changes we will provide a more prominent notice (such as a banner on the site or an email).
Questions about this Policy or how your data is handled can be sent to customercare@flyspout.com.
