What we collect
Account details, Journey preferences, booking information, payment status, device data and how you use Fareglitch.
Your data, explained plainly
Privacy should not be hidden in tiny text.
This policy explains what Fareglitch collects, why we need it, who we share it with, and what control you have. We have written it to be read by people, not only lawyers.
The useful version first
The important bits
We collect only the information needed to run your account, personalise your travel feed, process bookings, prevent fraud and improve Fareglitch.
Why we use it
To show relevant deals, create bookings, provide support, keep accounts secure and understand what needs improving.
Who receives it
Airlines, Duffel, Stripe and essential infrastructure providers receive only the data needed to deliver their part of the service.
Your control
You can request access, correction, deletion, restriction or export of your data and withdraw marketing or analytics consent.
1. Who we are
Fareglitch is operated by Duolution OÜ, an Estonian private limited company with registry code 17379191.
Duolution OÜ
Kämpinguranna tee 8
Kloogaranna, Harjumaa 76708
Estonia
support@fareglitch.net
Duolution OÜ is the controller of personal data processed for Fareglitch, unless another company is separately identified as responsible for its own processing.
2. Data we collect
Account and profile data
This may include your name, email address, profile image, login provider, preferred language, currency, time zone, telephone number, date of birth, nationality and country of residence.
Journey and travel preference data
When you create a Journey, we may collect your departure airports, destinations, travel dates, budget, number of travellers, baggage preferences, maximum stops, flight duration, self-transfer settings, comfort preferences and airports or countries you want to avoid.
Activity and recommendation data
We may record which offers you view, save, hide or book, how you interact with the deal feed, which notifications you open and how you use Fareglitch features. This helps us avoid showing irrelevant offers and improve recommendations.
Booking and passenger data
To create and manage a flight booking, we may collect passenger names, dates of birth, gender or title where required, nationality, contact details, itinerary, booking references, ticket information, baggage choices and passport or identity document details where required by the airline.
When you enter data about another passenger, you confirm that you are authorised to provide it for the booking.
Payment data
Stripe or another payment provider processes card and payment details. Fareglitch may store transaction amount, currency, payment status, Stripe customer IDs, checkout session IDs, payment intent IDs, refund information and limited payment method details supplied by Stripe.
We do not ordinarily receive or store your complete card number or card security code.
Device and technical data
We may collect your IP address, browser, operating system, device type, application version, language, time zone, user-agent, session identifiers, login timestamps, security events, approximate location derived from IP address and diagnostic information.
Analytics and advertising data
With consent where required, we may use Google Analytics 4 and Google Ads to understand page and screen views, feature usage, campaign attribution, conversions and technical performance. Meta Pixel and Meta mobile technologies may be introduced in the future and will not be activated without the disclosures and consent controls required by law.
Support and communications
When you contact us, we may retain your name, contact details, message contents, booking reference, attachments and the steps taken to resolve the issue.
3. How we use your data
We use personal data to:
- create and manage your Fareglitch account;
- save and process your Journeys;
- personalise and rank travel offers;
- validate prices and availability;
- create and manage flight bookings;
- process payments, refunds and chargebacks;
- send booking, account and security notifications;
- provide customer support;
- detect fraud, misuse and security threats;
- comply with accounting, tax and legal obligations;
- measure and improve Fareglitch;
- send marketing where you have consented or where law permits it.
Fareglitch may automatically rank offers based on your Journey rules, budget, preferences and previous interactions. We do not currently use this process to make decisions that produce legal or similarly significant effects on you.
4. Legal bases
Under data protection law, we rely on the following legal bases:
Contract
To create your account, operate Journeys, process bookings, provide support and perform actions you request before or under a contract.
Legal obligation
To comply with accounting, tax, consumer protection, fraud prevention and other legal requirements.
Legitimate interests
To secure Fareglitch, prevent abuse, improve the service, manage disputes and provide relevant recommendations, where those interests do not override your rights.
Consent
For non-essential analytics, advertising, optional marketing and other uses where consent is required. You may withdraw consent at any time.
5. Who we share data with
We may share personal data with:
- Airlines, to create and manage your reservation and ticket.
- Duffel and other booking technology providers, to search, revalidate, create and service bookings.
- Stripe and other payment providers, to process payments, refunds, disputes and fraud checks.
- Hosting and infrastructure providers, including providers used for application hosting, databases, Redis, background jobs, delivery, backups and security.
- Google, where Google login, Google Analytics 4 or Google Ads is used.
- Support, email and notification providers, where needed to send messages or resolve requests.
- Professional advisers and authorities, where reasonably necessary or legally required.
Airlines and certain other travel providers may act as independent controllers under their own privacy notices and legal obligations.
Fareglitch may display affiliate content from services such as Viator. When you leave Fareglitch and complete a transaction with a third party, that company’s privacy policy applies to its processing.
6. International data transfers
Travel is international, and some airlines or technology providers may process personal data outside Estonia or the European Economic Area.
Where required, we use an appropriate transfer mechanism such as a European Commission adequacy decision, Standard Contractual Clauses or another legally recognised safeguard. We may also apply supplementary technical and contractual protections where appropriate.
7. How long we keep data
We do not keep every category of data for the same period. The following periods are our current intended limits and may be extended where law, fraud prevention or an active dispute requires it.
Account and profile While your account is active, then ordinarily deleted or anonymised within 30 days of deletion.
Journeys and recommendation historyWhile active or up to two years after your last relevant activity.
Session and security dataOrdinarily up to 12 months.
Analytics dataOrdinarily up to 14 months, depending on platform settings.
Support communicationsOrdinarily up to three years after the matter is closed.
Incomplete checkout dataOrdinarily up to 12 months.
Booking and transaction records At least seven years where required for accounting, tax or legal claims.
BackupsDeleted data may remain in protected backups for up to 90 days.
We may keep aggregated or anonymised information for longer where it can no longer reasonably identify you.
8. Your rights
Depending on applicable law, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of data;
- restrict how data is processed;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent at any time;
- object to direct marketing;
- complain to a data protection authority.
Some rights are subject to legal exceptions. For example, deleting your account does not require us to erase booking and accounting records that we must retain by law.
Need a copy or want something deleted?
Email us from the address connected to your Fareglitch account. We may ask for reasonable information to verify your identity.
9. Security
We use technical and organisational measures designed to protect personal data, including encrypted connections, password hashing, access controls, session security, restricted production access, monitoring and protected backups.
No online service can guarantee absolute security. Use a strong, unique password and contact us immediately if you believe your account has been compromised.
10. Children
Fareglitch accounts and booking services are intended for people aged 18 or older. An adult may enter information about a child passenger where the adult is legally authorised to make the booking.
11. Changes to this policy
We may update this policy when Fareglitch changes, new providers are introduced or legal requirements change. We will publish the revised version and update the date at the top of the page. Where required, we will provide additional notice or ask for new consent.
12. Contact us
Questions, concerns and data requests can be sent to:
CompanyDuolution OÜ
Registry code17379191
AddressKämpinguranna tee 8, Kloogaranna, Harjumaa 76708, Estonia
You may also lodge a complaint with the Estonian Data Protection Inspectorate or the competent data protection authority in your country of residence.