Privacy Policy

Flighht ("Flighht", "we", "us", "our") operates flighht.com and provides a members-only flight deals subscription service. Flighht is the data controller for personal data processed through this service. This policy explains what data we collect, why, the legal basis for processing, and your rights.

When you create an account, we collect your name, email address, and an encrypted password hash. We never store your password in plain text.

To personalise your deals we also collect: your home airport, dream destination, preferred trip types, travel companion, travel frequency, and budget — all provided by you at signup.

We collect basic usage data (page views, deal clicks, sign-ins) to improve the product. We do not sell this data.

Billing and payment data (card details, billing address, tax identifiers) is collected and processed directly by our payment provider — see section 4. We do not store full card numbers on our servers.

We process your data on the following legal bases under GDPR / UK GDPR:

• Performance of a contract — to create and operate your account, deliver personalised deals in your Hub, and process your membership.
• Legitimate interests — to secure the service, prevent fraud, debug issues, and improve the product through aggregate analytics.
• Legal obligation — to keep billing and tax records as required by law.
• Consent — where we ask for it (e.g. non-essential cookies, marketing emails). You can withdraw consent at any time.

We share only what is necessary with the following categories of recipients:

• Square, Inc. — our payment processor. Square processes your payment, handles refunds and chargebacks. See Square's privacy notice.
• Hosting and backend (Supabase / Lovable Cloud) — authentication, database, and storage.
• Analytics and product tooling — to understand usage and improve the product.
• Authorities and professional advisers — where required by law.

We never sell your personal data to third parties.

We use essential cookies for login and session management, and a small number of analytics cookies to understand usage. See our Cookie Policy for details.

Subject to applicable law, you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email flighht@outlook.com. We aim to respond within one month.

We keep account data while your membership is active, and for up to 12 months after cancellation for billing and compliance. Anonymous usage logs may be kept longer. Billing records held by Square are retained per Square's own policy and applicable tax law.

Data is stored on Lovable Cloud (Supabase) with encryption in transit and at rest. Access is limited to authorised personnel.

Questions about your data? Email flighht@outlook.com.