Privacy Policy

Who we are

FareHalo ("we", "us") is a flight discovery, price-comparison, alert, and booking-referral service. FareHalo is currently a free, non-commercial beta. Users do not pay FareHalo for this service. The controller is:

• Controller: Andreu Juvilla Corrons, operator of FareHalo
• Email: privacy@farehalo.com

Privacy requests: privacy@farehalo.com.

What we collect

• Account data: email address and authentication credentials. Passwords are hashed and managed by Supabase Auth. FareHalo does not store plaintext passwords.
• Usage and operational records: FareHalo does not currently collect payment data. If billing records already exist from an earlier period, Stripe customer and entitlement identifiers may still be stored to meet legal record-keeping duties. FareHalo does not store full card numbers.
• Search and preferences: origins, date windows, trip length, saved searches, selected itineraries needed to complete a handoff, and related usage accounting.
• Alerts and observations: alert criteria, status (active, paused, deleted), check history, and fare observations used to decide whether to notify you.
• Communications: transactional email such as fare alerts you requested, account notices, and other service messages sent with Resend. Those messages are not marketing. FareHalo does not send marketing email unless you give separate consent for marketing.
• Technical data: operational logs needed to run and secure the service, including error logs and IP addresses in hosting logs where applicable.

Why we collect it

• To provide discovery, itinerary inspection, seller handoff, and alerts
• To apply search-allowance accounting and prevent abuse of live fare checks
• To send essential service emails, including fare alerts you requested
• To keep the service secure and to diagnose faults
• To comply with legal, tax, and accounting obligations

Where GDPR applies, we typically rely on performance of a contract (providing the service you request), legal obligation (for example tax or retained historical billing records), legitimate interests (security and service reliability, balanced against your rights), and consent where required (non-essential analytics cookies).

Processors actually used

• Supabase — authentication, account records, and application database
• Stripe — historical billing records only, if any exist from an earlier period. FareHalo does not currently accept payments
• Resend — transactional email and fare alerts
• Travelpayouts / Aviasales Data API — recently observed, indicative fare discovery. FareHalo uses this as a data source only and does not use Travelpayouts affiliate or partner booking links.
• SerpApi — on-demand Google Flights validation when you open a specific route, including return-flight and booking-option token flows. FareHalo does not invent fake flight results when capacity is exhausted.
• Mapbox — maps on the landing page and Explore when a public Mapbox token is configured; otherwise a static map fallback is used
• Vercel — website hosting, operational logs, and optional Web Analytics. Analytics load only after you accept via the cookie banner, and only in production.

FareHalo does not sell your personal data. FareHalo currently receives no affiliate commission or compensation from booking providers. FareHalo does not sell tickets and has no paid ads or sponsorships. Google sign-in, when you choose it, is configured in Supabase Auth rather than as a separate FareHalo processor for advertising.

Some providers may process data outside the EEA. Where that happens, we rely on appropriate safeguards required by law (such as Standard Contractual Clauses or an adequacy decision), where applicable.

Retention

Account, alert, and operational data are retained while your account is open. If you request deletion, FareHalo deletes or anonymizes removable data. Limited payment, tax, fraud, and dispute records may be kept for as long as the law requires. Those retained records are not used to keep providing the product to you.

Your rights

You have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time where processing is based on consent. You can pause or delete alerts in the dashboard and request account deletion from the account page. Contact privacy@farehalo.com to exercise these rights. You may also file a complaint with the Spanish data protection authority (AEPD) or another competent authority.

Cookies

Essential cookies and local storage keep you signed in and protect the session. Optional Vercel Web Analytics load only after affirmative consent. Rejecting is as available as accepting. You can change or withdraw that choice on the Cookie Policy page. See that page for details.

Beta

FareHalo may be labelled as a free, non-commercial beta. That describes product maturity and that users do not pay FareHalo. It does not remove statutory consumer or privacy rights.

Contact

privacy@farehalo.com