Privacy Policy

1. Introduction

At Avolal ("we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our flight booking platform. Please read this policy carefully.

2. Information We Collect

2.1 Personal Information

When you use our Service, we collect personal information that you provide directly, including:

• Account Information: Name, email address, phone number, password
• Traveler Information: Full names, dates of birth, passport details, nationality, gender
• Payment Information: Credit/debit card details (processed securely through Stripe)
• Contact Information: Billing address, emergency contact details
• Travel Preferences: Seat preferences, meal preferences, airline loyalty programs
• Identity Documents: Passport scans or ID documents when required

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Usage Data: Search queries, flights viewed, bookings made, time spent on pages
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate location based on IP address
• Cookies and Tracking: Session data, preferences, authentication tokens
• Analytics Data: Page views, clicks, navigation patterns

2.3 Information from Third Parties

We may receive information from:

• Authentication Services: When you sign in with Clerk authentication
• Airlines and Travel Providers: Booking confirmations, flight status updates
• Payment Processors: Payment confirmation and transaction data from Stripe
• Analytics Providers: Aggregated usage statistics

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Process and manage your flight bookings
• Communicate booking confirmations and updates
• Provide customer support and respond to inquiries
• Send important notifications about your travel
• Manage your account and preferences

3.2 Service Improvement

• Analyze usage patterns to improve our AI search algorithms
• Enhance user experience and interface design
• Develop new features and functionality
• Troubleshoot technical issues and bugs
• Conduct research and analytics

3.3 Security and Fraud Prevention

• Detect and prevent fraudulent transactions
• Verify user identity and prevent unauthorized access
• Monitor for suspicious activity
• Comply with security requirements

3.4 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent harm
• Enforce our Terms of Service
• Protect our rights and property

3.5 Marketing (With Your Consent)

• Send promotional emails about deals and features
• Personalize recommendations based on your preferences
• Provide targeted advertisements (you can opt out)

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Airlines and Travel Providers: To complete your bookings and provide travel services
• Payment Processors (Stripe): To process payments securely
• Authentication Services (Clerk): To manage user accounts and authentication
• Database Services (Supabase): To store and manage data securely
• Email Services (Resend): To send booking confirmations and notifications
• Error Tracking (Sentry): To monitor and fix technical issues
• Analytics Providers: To understand how our Service is used

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to prevent harm or illegal activity.

4.3 Business Transfers

If Avolal is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Secure Storage: Sensitive data is encrypted at rest in our databases
• Payment Security: Payment data is handled by PCI-DSS compliant payment processors (Stripe)
• Access Controls: Strict access controls and authentication for our systems
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff trained on data protection best practices

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records, transaction history)
• Resolve disputes and enforce our agreements
• Improve our services through analysis

Booking records are typically retained for 7 years to comply with financial regulations. You can request deletion of your account at any time, subject to legal retention requirements.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Request a copy of your personal data
• Receive your data in a structured, machine-readable format

7.2 Correction

• Update or correct inaccurate information
• Most information can be updated directly in your account settings

7.3 Deletion

• Request deletion of your account and personal data
• Subject to legal retention requirements

7.4 Objection and Restriction

• Object to processing of your information
• Restrict how we process your data

7.5 Withdraw Consent

• Opt out of marketing communications at any time
• Withdraw consent for optional data processing

To exercise these rights, contact us through the feedback form in the application or email privacy@avolal.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings and choices
• Analytics Cookies: Understand how you use our Service
• Performance Cookies: Monitor and improve Service performance

You can control cookies through your browser settings, but disabling certain cookies may affect Service functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete it.

11. Third-Party Links

Our Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when this policy was last revised.

13. Regional-Specific Information

13.1 European Union (GDPR)

If you are in the EU, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to lodge a complaint with a supervisory authority
• Right to data portability
• Right to object to automated decision-making
• Legal basis for processing (contract performance, legitimate interests, consent)

13.2 California (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to deletion
• Right to non-discrimination for exercising privacy rights

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@avolal.com
• Support: Use the feedback form in the application
• Data Protection Officer: Available upon request

We will respond to your inquiry within 30 days.