Privacy Policy

1. What we collect

• Account information: name, email address, and a hashed password.
• Booking details: flight requested, passenger count, and any message you send to an operator.
• Payment information: handled entirely by Stripe. We store a Stripe reference to your card or bank transfer, never your full card number or bank account number.
• Device information: if you use the SkyAccess mobile app, a push-notification token tied to your device.
• Communications: messages you send us or an operator through the platform, and support emails.

2. How we use it

To process your booking request, communicate with you and the operator about it, take payment, prevent fraud, and comply with recordkeeping requirements that apply to charter bookings. We do not use your information to build advertising profiles, and we do not sell it.

3. Who we share it with

• The charter operator for your specific booking — your name, passenger count, and any message you sent, so they can actually fly you.
• Stripe, to process payment.
• [Resend / your email provider], to send booking and account emails.
• [Twilio, if enabled], for SMS or call updates about your booking.

We do not share your information with anyone else, and never for their own marketing purposes.

4. Cookies

We use a session cookie to keep you signed in. We don't use third-party advertising or tracking cookies.

5. How long we keep it

We keep booking and payment records for as long as required for tax, accounting, and legal purposes (typically several years), and account information for as long as your account is active.

6. Your rights

You can ask us to see, correct, or delete the personal information we hold about you by emailing [privacy@yourdomain.com]. We'll keep whatever a completed booking legally requires us to retain even after a deletion request.

7. Security

Payment details are handled by Stripe, a PCI-DSS-compliant payment processor — we never see or store your full card or bank details. Passwords are stored hashed, never in plain text.

8. Children

SkyAccess is not intended for anyone under 18, and we don't knowingly collect information from them.

9. Changes to this policy

We'll update the date at the top of this page whenever this policy changes.

10. Contact

Questions about this policy: [privacy@yourdomain.com]