Draft template, pending legal review. This policy has not yet been reviewed by a lawyer and may change before CheapFlightPlan starts selling tickets. Ticket sales are not open yet.

Privacy Policy

Last updated: October 26, 2026

This policy explains how [COMPANY LEGAL NAME] ("CheapFlightPlan") handles personal information when you use cheapflightplan.com.

What we collect

• Searches: airports, dates, number and age group of travelers, cabin class. We use these to fetch fares and do not link them to you unless you are signed in.
• Waitlist: your email address, if you join the AI assistant waitlist.
• Account and bookings: name, email, phone, and for each traveler the details airlines require (full name, date of birth, gender, and passport details where needed), plus your booking history and support requests.
• Payments: handled by [PAYMENT PROCESSOR]. We receive a payment reference and limited card details (such as brand and last four digits), never your full card number.
• Technical data: IP address, browser type, and error logs, used for security, abuse prevention (including rate limiting) and fixing problems.

How we use it

• To search fares, make and manage bookings, issue tickets, and send confirmations and service messages.
• To prevent fraud and abuse, and to secure the Site.
• To meet legal, tax and accounting obligations.
• To email you about the AI assistant if you joined the waitlist. You can unsubscribe at any time.

Who we share it with

We share booking details with the airlines operating your flights and with Duffel, our booking technology provider, which passes them to airlines. We also use service providers for hosting (Vercel), database and authentication (Supabase), payments ([PAYMENT PROCESSOR]), bot protection (Cloudflare) and email ([EMAIL PROVIDER]). Airlines and governments may require passenger data (such as Advance Passenger Information) for international travel. We do not sell your personal information.

International transfers

Your data is processed in the United States and may be shared with airlines and authorities in the countries you travel to or through, including Bangladesh.

Retention

We keep booking records for [RETENTION PERIOD, e.g. 7 years] for legal and accounting reasons, error logs for 30 days, and waitlist emails until you unsubscribe or the waitlist closes.

Your choices and rights

You can ask to access, correct or delete your personal information by emailing [PRIVACY EMAIL]. Depending on where you live (for example California under the CCPA/CPRA), you may have additional rights, including to know what we collect and to not be discriminated against for exercising your rights. We will verify your identity before acting on a request.

Children

Accounts are for adults. A parent or guardian books travel for children and provides their details.

Security

We use encryption in transit, access controls and database row-level security. No system is perfectly secure; tell us at [SECURITY EMAIL] if you find a vulnerability.

Contact

[COMPANY LEGAL NAME], [REGISTERED ADDRESS], [PRIVACY EMAIL].