Privacy Policy

Last updated · June 10, 2026

1. Acceptance

By creating an account, signing in, or using any part of Flybook, you accept this Privacy Policy and consent to the collection, use, transfer, storage, and disclosure described here. If you do not agree, do not use Flybook.

2. What we collect

What a booking needs, plus what operating the service requires: your name and email; traveler details required for ticketing (names, titles, dates of birth — transmitted to the supplier for the booking); payment instrument tokens (card details are processed by our payment provider, not stored by Flybook); the text of your trip requests and conversation with the concierge; booking and search history; price-watch requests; support correspondence; and technical data (IP address and the approximate location derived from it — used to suggest your departure airport — device and browser data, and usage events). We may also receive data from suppliers, payment processors, and fraud-prevention services.

3. How we use it

To do what you asked: search fares, complete bookings, send confirmations and disruption updates, watch prices you asked us to watch, coordinate group trips you join, and provide support. We also use data to secure the service, prevent fraud and abuse, comply with legal and tax obligations, enforce our Terms, and improve the product using aggregate usage patterns.

4. AI transparency

The concierge is powered in part by a large language model (currently Google Gemini via API). The text of your trip requests and conversation context is sent to that API to understand what you’re asking for. Under the API terms we use, those inputs are not used to train Google’s models. The model never receives your payment details. We do not sell your conversations, and we do not use them to train models of our own.

5. Who we share with

Suppliers and processors that operate parts of the service, each receiving only what its role requires: the booking supplier network (Duffel) and the airlines/hotels/operators fulfilling your trip; our database and authentication provider (Supabase); our hosting provider (Vercel); our AI language provider (Google); payment processors; and professional advisors. We may disclose data when required by law, subpoena, court order, or to protect our rights, users, or the public, and to a successor entity in the event of a merger, acquisition, financing, reorganization, or sale of assets. We do not sell personal information for monetary consideration.

6. International transfers

Your data may be transferred to, stored in, and processed in jurisdictions outside your country of residence, including the United States, where data-protection laws may differ. By using Flybook you consent to these transfers.

7. Retention

Booking and transaction records are retained as long as legal, tax, and audit obligations require — which may extend beyond account closure. Conversation context lives in your browser session. Price watches and account data persist until you delete them or ask us to. Anonymized and aggregated data may be retained indefinitely.

8. Security

We use commercially reasonable safeguards — encryption in transit, server-side payment-amount verification, scoped access keys, and security headers — but no system is impenetrable and we cannot guarantee security. Transmission and storage of data carry inherent risk.

9. Your rights

Depending on where you live, you may have rights under laws like the GDPR (EU) or CCPA/CPRA (California) to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to non-discrimination for exercising those rights. Email support@flybook.ai and we will honor valid requests to the extent the law requires; we may decline where verification fails or retention is legally required. Deletion may take up to ninety days to fully propagate and may not extend to backups or anonymized data.

10. Children

Flybook is not directed to children under 16 and we do not knowingly collect their data (traveler details for a child’s ticket are provided by the booking adult). If you believe a child has provided us data directly, contact us and we will take appropriate action.

11. Cookies

We use a small set of functional cookies (session, security, pre-launch access). No third-party advertising cookies.

12. Changes

We may update this policy; the date above reflects the latest version, and material changes will be highlighted in the product. Continued use after a change constitutes acceptance.

13. Contact

Privacy questions: support@flybook.ai.