Privacy Policy

Who we are

• Data controller: [ŞİRKET ADI], [ADRES].
• For any privacy question: [İLETİŞİM E-POSTASI].

What we collect

• Account details: your email address and name. If you sign in with Google, Facebook or Apple, the name and email address that service shares with us.
• Booking details: travellers' names, date of birth, gender, nationality and passport number; email address and phone number for contact. Airlines require these to issue tickets.
• Payment details: we do not store card details on our servers. Payments are taken through the payment provider's secure components.
• Preferences: your chosen language and currency, stored in your browser as cookies and local storage.
• Technical data: IP address and browser information in server logs, to keep the site secure and working.

How we use it

• To search flights, issue your ticket and manage your booking.
• To send you your ticket and any flight changes.
• To create your account, let you sign in and show your tickets on My trips.
• To prevent fraud and meet our legal obligations.
• We only send updates such as price alerts if you ask for them, and you can unsubscribe at any time.

Who we share it with

• Airlines and our flight provider (Duffel): the traveller and contact details needed to issue tickets.
• Infrastructure providers: Supabase (accounts and database), Vercel (website hosting).
• Sign-in providers: Google, Facebook or Apple, if you choose to sign in with them.
• Payment provider: to take your payment.
• We do not sell your personal data or share it for advertising. Some providers may process data outside the European Economic Area; in that case legal safeguards (such as standard contractual clauses) apply.

How long we keep it

• We keep account details until you delete your account.
• We keep booking records for the legally required period: [SAKLAMA SÜRESİ].

Cookies

• We only use cookies that are needed for the site to work: session (sign-in), language, currency and your recent bookings in this browser.
• We do not use advertising or tracking cookies. If we ever do, we will ask for your consent first.

Your rights

• Under the GDPR (and Turkish KVKK) you have the right to access, correct and delete your data, to object to processing and to take your data to another service.
• To make a request, write to [İLETİŞİM E-POSTASI]. You can use the same address to delete your account.
• You can also complain to your local data protection authority (in the Netherlands: Autoriteit Persoonsgegevens).

Changes

If we update this policy we will publish it on this page and notify you of important changes by email.