Legal

Privacy Policy

Last updated July 1, 2026

Data we collect

  • Account: name, email, phone, hashed password.
  • Travel: passenger names, DOB, passport, contact, GST, seat/meal preferences.
  • Usage: search history, device, IP address, cookies for personalization.

How we use it

To issue tickets, service your bookings, prevent fraud, personalize offers, and comply with law.

Sharing

We share only what is necessary with airlines, payment processors (Stripe), and government authorities when required. We never sell your data.

Retention

Booking records: 7 years (tax law). Marketing profiles: until you opt out. Account: until deletion request.

Your rights

  • Access, correct, or delete your data at any time from Account settings.
  • Download a copy of your data on request.
  • Opt out of marketing without affecting service emails.

Security

TLS in transit, encrypted at rest, row-level security on the database, and least-privilege access controls.

Contact

Reach our DPO at privacy@travelbird.travel.