Legal
Privacy Policy
Last updated July 1, 2026
Data we collect
- Account: name, email, phone, hashed password.
- Travel: passenger names, DOB, passport, contact, GST, seat/meal preferences.
- Usage: search history, device, IP address, cookies for personalization.
How we use it
To issue tickets, service your bookings, prevent fraud, personalize offers, and comply with law.
Sharing
We share only what is necessary with airlines, payment processors (Stripe), and government authorities when required. We never sell your data.
Retention
Booking records: 7 years (tax law). Marketing profiles: until you opt out. Account: until deletion request.
Your rights
- Access, correct, or delete your data at any time from Account settings.
- Download a copy of your data on request.
- Opt out of marketing without affecting service emails.
Security
TLS in transit, encrypted at rest, row-level security on the database, and least-privilege access controls.
Contact
Reach our DPO at privacy@travelbird.travel.
