Privacy Policy

FlyClaim is committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

We collect the following types of information:

• Google Account Information: Your name, email address, and profile picture when you sign in with Google.
• Gmail Access: Read-only access to emails from Air Canada containing flight confirmation and itinerary information. We do not read or store other emails.
• Flight Information: Flight numbers, dates, departure/arrival cities, and booking confirmation numbers extracted from your flight emails.
• Payment Information: Payment details are processed securely by Stripe. We store only transaction references, not your credit card details.

2. How We Use Your Information

We use your information to:

• Identify Air Canada flights from your email
• Track flight status and delays
• Determine eligibility for compensation under APPR
• Submit compensation claims on your behalf to Air Canada
• Process success fee payments
• Send you notifications about your flights and claims

3. Third Parties

We share your information with the following third parties:

• Air Canada: To submit compensation claims through their SSET portal, we share your name, email, flight details, and booking reference.
• Stripe: Our payment processor securely handles all payment transactions.
• Supabase: Our database provider stores your account and flight data with encryption at rest.

We do not sell your personal information to third parties.

4. Data Retention

We retain your account data for as long as your account is active. Flight and claim data is retained for 7 years after your last activity for legal and tax purposes. You can request deletion of your data at any time, subject to legal retention requirements.

5. Your Rights

Under Canadian privacy law, you have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Request deletion of your data (subject to legal requirements)
• Withdraw consent for data processing
• Disconnect your Gmail account at any time

To exercise these rights, visit your account settings or contact us.

6. Security Measures

We protect your data with industry-standard security measures including encryption in transit (TLS) and at rest, secure authentication via Google OAuth, access controls, and regular security reviews. We use Supabase Row Level Security to ensure you can only access your own data.

7. Cookies and Tracking

We use essential cookies for authentication and session management. We use privacy-friendly analytics to understand how our service is used. We do not use advertising cookies or trackers.

8. Contact Us

For privacy concerns or to exercise your rights, contact our Privacy Officer at privacy@flyclaim.ca. We will respond to your request within 30 days as required by PIPEDA.