Your travel data stays under control.

1. Controller and contact

Deepbridge Advisory operates REBFLY for this private pilot and acts as controller for member, booking and monitoring data. Privacy requests: hello@deepbridgeadvisory.co.uk. Complete registered-controller details will be published before any public launch.

2. Data we collect

• Google account identifier, name, email and profile image.
• Passenger legal name, date of birth, title, gender when required, nationality, contact email and telephone.
• Passport number and expiry only when the airline requires them to create an order.
• Searches, selected offers, baggage, booking references, fare rules, payments status, servicing requests, approvals and price history.
• Security, audit, error, device and network information needed to operate and defend the service.
• Messages and support records you send us.

Stripe receives payment credentials directly; REBFLY does not receive or store full card numbers or security codes.

3. Purposes and legal bases

• Contract: search, reprice, pay, book, monitor and service your flight.
• Consent: optional monitoring/communications where consent is the appropriate basis. Consent can be withdrawn without affecting earlier processing.
• Legitimate interests: secure the pilot, prevent abuse, troubleshoot failures, maintain audit trails and improve reliability, balanced against your rights.
• Legal obligation: tax, accounting, fraud, consumer and regulatory records where applicable.

4. Recipients and processors

Data is shared only as needed with Supabase (authentication/database), Vercel (hosting/jobs), Duffel and relevant airlines (flight offers/orders/servicing), Stripe (payments/refunds), Resend (transactional email), Sentry (error monitoring), Cloudflare (DNS/security) and Google (sign-in). Each provider processes information under its own role and contractual safeguards.

5. International transfers

Some providers may process data outside the European Economic Area or United Kingdom. We rely on adequacy decisions or approved contractual safeguards such as standard contractual clauses where required. You may request information about the applicable safeguard.

6. Retention

• Unsuccessful search and transient offer data: only as long as needed to perform and diagnose the request.
• Fare observations: the monitoring period plus up to 12 months for pilot validation, then deleted or anonymized.
• Booking, payment, refund and audit records: normally up to 7 years where accounting or dispute obligations apply.
• Passport data: sent only when required and removed from REBFLY application records after booking confirmation unless a legal or active servicing need requires shorter continued retention.
• Support and access records: normally up to 24 months after the pilot relationship ends.

7. Automated processing

The monitoring engine ranks comparable fares and may create a proposal. It does not execute a cancellation or rebooking without explicit human/member approval during the pilot. You can ask us to explain a proposal or request human review.

8. Security

We use access controls, row-level database policies, encrypted transport, provider secrets held server-side, payment tokenization, signed webhooks, idempotency controls, audit events and error monitoring. No service can promise absolute security; we assess and notify qualifying incidents as required.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent. You may complain to the Spanish Data Protection Agency (AEPD), the UK Information Commissioner where relevant, or your local supervisory authority. We may need to verify identity before acting.

10. Children and changes

The pilot is for adults. Children may appear only as passengers on a booking made by an authorized adult. We will notify members of material privacy changes and show the effective date above.