1. Who We Are & Scope

UpFlight (“we,” “our,” or “us”) is a provider of AI-driven ancillary sales services for travel operators. This Privacy Policy describes how we collect, use, share, and protect personal data when you access our website, platform, or services.

2. Data We Collect

We may collect the following categories of information:

• Identity & Contact Data: Name, email address, phone number, etc.

• Account Data: Credentials and related account information.

• Usage & Technical Data: IP addresses, device/browser information, interaction logs.

• Communications Data: Records of correspondence between you and our team.

We collect this information when you interact with our site, book a demo, sign up for services, or communicate with us.

3. Purposes & Legal Bases for Processing

We process your data for purposes including:

• Delivering core services and managing your account.

• Communicating with you about demos, updates, and offers.

• Improving and personalizing our services.

• Ensuring compliance with legal obligations.

• Protecting against fraud or security threats.

Where applicable (e.g., for EEA individuals), processing is based on performance of a contract, legal obligation, or our legitimate interests.

4. Disclosure & Sharing

Your data may be shared with:

• Service Providers: Agents or partners performing services on our behalf (e.g., hosting, analytics).

• Legal Authorities: if required by law or to safeguard our legal rights.

• Business Transfers: in the event of a merger, acquisition, or asset sale, with adequate safeguards in place.

5. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we implement appropriate safeguards—such as Standard Contractual Clauses—to ensure continued protection. Amadeus Discover

6. Data Retention

We retain personal data as long as necessary to fulfill its purpose (including legal or reporting obligations), then securely delete or anonymize it. Amadeus Discover

7. Security Measures

We implement reasonable organizational and technical security measures to protect your data from unauthorized access, alteration, or loss. Amadeus Discover

8. Your Rights

Depending on your jurisdiction, you may have rights including:

• Accessing your data

• Requesting correction or deletion

• Restricting or objecting to processing

• Revoke consent if processing is consent-based

• Lodging a complaint with a supervisory authority

Contact details for such requests should be provided, including an email or mailing address.

9. Changes to This Policy

We may update this Privacy Policy over time. Revisions will be posted with an updated effective date. harmony.framer.media