Privacy Policy

Overview

Layflat ("we," "us," or "our") operates layflat.travel. This Privacy Policy explains what information we collect, how we use it, and who we share it with. We keep it simple: we collect only what's necessary to run the Service, we don't sell your data, and we rely on reputable third-party providers to handle sensitive operations like authentication and payments.

1. Information We Collect

We collect the following categories of information:

• Account information — your email address and any profile information provided during registration.
• Search and alert history — the routes, dates, and cabin classes you search for and create alerts on.
• Subscription information — your current plan tier and billing status. Full payment details (card numbers, etc.) are handled exclusively by Stripe and are never stored by Layflat.
• Usage data — basic logs including IP address, browser type, and pages visited, used for security and service improvement.

2. How We Use Your Information

We use the information we collect to:

• Operate and improve the Service
• Send alert notifications for the routes you've configured
• Process subscription payments and manage your account
• Respond to support requests
• Detect and prevent abuse or unauthorized access

3. Third-Party Service Providers

We work with the following third-party providers to operate the Service. Each provider handles data according to their own privacy policies.

• Clerk — handles account authentication and identity management. Clerk stores your email address and manages login sessions.
• Stripe — processes subscription payments. Stripe stores your payment method details; Layflat receives only billing status and plan information.
• Neon — provides the PostgreSQL database that stores your account data, search history, and alerts.
• AWS (Amazon Web Services) — provides hosting and infrastructure for the Service.

4. We Do Not Sell Your Data

Layflat does not sell, rent, or trade your personal information to third parties for marketing or any other purpose. We share your data only with the service providers listed above, as required to operate the Service.

5. Cookies

We use cookies minimally. The primary cookies set on layflat.travel are authentication cookies managed by Clerk, which are necessary to keep you logged in. We do not use third-party advertising cookies or tracking pixels.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within a reasonable period, except where we are required to retain it for legal or compliance purposes.

7. Security

We take reasonable technical and organizational measures to protect your information. Authentication and session management are delegated to Clerk, and payment data is handled exclusively by Stripe — two providers with dedicated security programs. No system is perfectly secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

9. Contact

Questions or concerns about this Privacy Policy may be directed to legal@layflat.travel.