Privacy Policy

1Information We Collect

1.1 Information You Provide Directly

Data Type	Examples	Purpose	Legal Basis
Account Information	Email address, name, password	Account creation and management	Contract performance
Travel Preferences	Home airports, destinations, travel dates	Personalized deal alerts	Legitimate interest
Communication Data	Support messages, feedback	Customer service and improvement	Legitimate interest
Payment Information	Billing details (processed by payment providers)	Subscription management	Contract performance

1.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent on service
• Device Information: IP address, browser type, operating system
• Location Data: General location (country/city level) for relevant deals
• Performance Data: Service performance metrics and error reports

1.3 Information from Third Parties

• Social Login: Basic profile information if you use social media login
• Analytics Partners: Aggregated usage statistics (anonymized)
• Flight Data Providers: Public flight pricing and availability information

2How We Use Your Information

2.1 Primary Service Functions

• Deal Discovery: Monitor flights matching your preferences
• Alert Delivery: Send notifications about relevant deals
• Personalization: Customize deals based on your travel patterns
• Account Management: Maintain your subscription and preferences

2.2 Service Improvement

• Algorithm Enhancement: Improve deal detection accuracy
• Feature Development: Build new features based on user needs
• Performance Optimization: Ensure reliable service delivery
• Research & Analytics: Understand travel trends (anonymized data)

2.3 Communication

• Service Updates: Important changes to our service
• Customer Support: Respond to your questions and issues
• Marketing: Promotional content (only with your consent)

3Data Sharing & Disclosure

3.1 We DO NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 Limited Sharing for Service Delivery

• Email Service Providers: To deliver deal alerts and notifications
• Analytics Providers: Anonymized usage data for service improvement
• Payment Processors: Secure payment processing (they don't store your data)
• Cloud Hosting: Secure data storage and service infrastructure

3.3 Legal Requirements

We may disclose information when required by law, such as:

• Compliance with legal obligations
• Protection of our rights and property
• Prevention of fraud or abuse
• Emergency situations involving safety

4Data Security & Protection

4.1 Technical Safeguards

• Encryption: All data transmitted and stored is encrypted
• Secure Servers: Data stored on secure, monitored servers
• Access Controls: Strict employee access limitations
• Regular Audits: Ongoing security assessments and updates

4.2 Organizational Safeguards

• Privacy Training: All employees trained on data protection
• Data Minimization: We collect only necessary information
• Incident Response: Procedures for handling security breaches
• Vendor Management: Rigorous vetting of third-party providers

5Your Privacy Rights

6Cookies & Tracking Technologies

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration	Consent Required
Essential	Core website functionality and security	Session/1 year	No (necessary for service)
Performance	Anonymous usage analytics and optimization	2 years	Yes
Functional	Remember preferences and settings	1 year	Yes
Marketing	Personalized content and advertising	1 year	Yes

6.2 Managing Cookie Preferences

• Cookie Settings: Use our cookie preference center
• Browser Controls: Configure your browser to block or delete cookies
• Opt-Out Tools: Use industry opt-out mechanisms for advertising

7Data Retention

7.1 Retention Periods

• Account Data: Retained while your account is active
• Travel Preferences: Retained until you modify or delete them
• Communication Records: 3 years for customer service purposes
• Usage Analytics: Anonymized data retained indefinitely
• Marketing Data: Until you withdraw consent

7.2 Deletion Process

When you request account deletion:

• Personal data is removed within 30 days
• Anonymized analytics data may be retained
• Legal obligations may require some data retention
• Backup systems are purged within 90 days

8International Data Transfers

8.1 Cross-Border Data Processing

Your data may be processed in countries outside your jurisdiction for service delivery. We ensure adequate protection through:

• Adequacy Decisions: Processing in countries with adequate privacy laws
• Standard Contractual Clauses: EU-approved data transfer mechanisms
• Certification Programs: Privacy frameworks like Privacy Shield successors

9Children's Privacy

MyFlySpy is not intended for children under 16. We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it immediately and terminate the account.

10Privacy Policy Changes

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make changes:

• Notice: We'll notify you via email and on-site notifications
• Review Period: 30 days to review changes before they take effect
• Consent: Material changes require your explicit consent
• Version Control: Previous versions available upon request

11Data Protection Contact Information