Privacy Policy
This policy explains what personal data Snagfly collects, why, who we share it with, and the rights you have. It covers snagfly.com and the Snagfly app at app.snagfly.com.
1. Who is responsible for your data
Snagfly, operated by Moid Khan (an individual sole proprietor) in Pakistan, is the data controller for personal data processed through snagfly.com and app.snagfly.com. Contact us at hello@snagfly.com for any privacy question.
2. What we collect
| Category | Examples |
|---|---|
| Account data | Email address, and any name or preferences you provide when you join the waitlist or create an account. |
| Wishlist data | The destinations and routes you pin, your home airport, and alert preferences. |
| Usage data | How you interact with the site and app, alerts opened or clicked, device and browser type, and approximate location derived from your IP address. |
| Payment data | Handled by Paddle, our Merchant of Record. We receive confirmation of your plan and limited billing details, but we do not store your full card number. |
| Communications | Messages you send us, e.g. support emails. |
3. How we use it
- To run the core service: monitor fares for your pinned routes and send you deal alerts.
- To create and manage your account and process subscriptions (via Paddle).
- To respond to support requests and administer the $300 savings guarantee.
- To improve and secure the service, prevent abuse, and detect fraud.
- To send service and, where permitted, occasional product emails. You can opt out of non-essential email at any time.
- To comply with legal obligations.
4. Legal bases (for EEA/UK users)
We rely on: contract (to provide the service you sign up for), legitimate interests (to secure and improve Snagfly and prevent abuse), consent (for non-essential cookies and optional marketing, which you can withdraw), and legal obligation (for tax and record-keeping).
5. Who we share data with
We do not sell your personal data. We share it only with service providers who help us run Snagfly, under appropriate data-protection terms:
| Provider | Purpose |
|---|---|
| Paddle.com | Payments, billing, invoicing, and tax — as our Merchant of Record. |
| Resend | Sending transactional and deal-alert emails. |
| Vercel | Website and app hosting and delivery. |
| Upstash | Rate-limiting and operational data storage. |
| Cloudflare (Turnstile) | Bot protection on our sign-up forms. |
| Travelpayouts | Affiliate attribution on outbound booking links. |
We may also disclose data where required by law, to enforce our terms, or in connection with a merger or acquisition.
6. Cookies & tracking
We use a small number of cookies and similar technologies: strictly necessary ones (e.g. security via Cloudflare Turnstile, remembering your light/dark theme), and affiliate-attribution cookies set when you click an outbound booking link (via Travelpayouts). You can control cookies through your browser settings; blocking some may affect functionality.
7. Data retention
We keep your data for as long as your account is active. When you cancel or delete your account, we delete your personal data within 30 days, unless you ask us to keep your destination wishlist for a future return, or we are required to retain certain records (for example, transaction records kept by Paddle for tax purposes).
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to processing, and to withdraw consent. EEA/UK residents may lodge a complaint with their data-protection authority. California and other U.S. state residents may have rights to know, delete, correct, and opt out of "sale"/"sharing" — we do not sell personal data. To exercise any right, email hello@snagfly.com; we respond within the time required by law.
9. International transfers
Snagfly and its providers may process data in countries other than yours. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.
10. Security
We use industry-standard measures — encryption in transit (HTTPS), access controls, and reputable infrastructure providers — to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children
Snagfly is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
12. Changes
We may update this policy. We will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.
13. Contact
Questions or requests? Email hello@snagfly.com or see our contact page.