Privacy Policy

Effective: May 29, 2026  ·  Last updated: May 29, 2026  ·  Operated by Salzventure Technologies LLC

FlightPort ("we," "us," "our") is operated by Salzventure Technologies LLC, PO Box 12393, Denver, CO 80212, USA. This Privacy Policy describes the personal information we collect when you use FlightPort, how we use it, who we share it with, and the choices and rights you have. It applies to flightport.app and all companion apps on connected-TV platforms (Google TV, Android TV, and any future platforms).

1. What We Collect

Information you provide directly

When you create an account or interact with the Service, we collect:

• Account information: your email address (required) and an optional display name
• Password: if you sign up with email and password, we store a bcrypt hash only — we never see or store your plaintext password
• Flight preferences: home airports you set, saved flight numbers or routes, alert preferences, and dashboard layout settings
• Referral code: if you sign up through a referral link or enter a promo code
• Communications you send us: if you contact support, we retain the content of that communication to resolve your issue

Communication preferences (all opt-IN, all default off)

At signup and in your account settings, you can choose to opt in to:

• Marketing emails — off by default. Opt in via the signup checkbox or Settings → Email Preferences. You can opt out at any time via one-click unsubscribe or Settings.
• Product-update emails — off by default. Opt in and opt out the same way.

Account, security, and billing emails (such as password resets, payment receipts, and service notices) are required for the Service to function and cannot be turned off while your account is active. Every marketing or product-update email contains a one-click unsubscribe link.

Payment information

Payment processing for web subscriptions is handled entirely by Stripe, Inc. We do not receive or store raw payment card data (card number, CVV, full expiry). We receive limited billing metadata from Stripe — such as the last four digits, card brand, billing country, plan name, and renewal date — solely to manage your subscription and display billing information in your account. For subscriptions purchased through Google Play Billing, we receive only the platform-issued subscription identifier and status; Google processes and stores the payment data.

Usage and flight data interaction

As you use the Service, we automatically collect information about how you interact with it:

• Feature usage events: which features you use (e.g., "flight searched," "airport selected," "alert set"), associated with your user id, retained as a rolling window of the most recent 10,000 events across all users for product analytics and improvement
• Flight searches and lookups: the flight numbers, routes, and airport codes you look up, associated with your account, to power your history and saved-flight features and to improve data quality
• Session information: when you log in and log out, how long sessions last, and which TV platform or web browser you are using

Device information

• TV platform: Google TV, Android TV, or other supported platforms
• App version: so we can diagnose version-specific bugs
• Device identifiers: a coarse device fingerprint (derived from user-agent, screen size, and timezone) used solely for anti-abuse and session management as described below

Automatically collected server and network data

• IP address: collected by our hosting infrastructure (AWS Lightsail) and CDN (if applicable) for every request. Used for security, rate-limiting, and approximate geolocation (country/state level only) for analytics and abuse detection. IP addresses in server logs are retained per our infrastructure providers' default policies (typically 30–90 days).
• Request logs: URL path, HTTP method, response status, response time, and user-agent string for each request to our servers
• Referrer URL: the URL of the page that linked you to the Service (if any)

Anti-abuse signals

To detect account sharing, automated access, and other abuse, we may compute a coarse device fingerprint (user-agent, screen resolution, timezone) paired with concurrent-session timestamps and approximate location derived from IP. This data is used only for security and abuse-prevention purposes and is not used for advertising.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service — authenticate you, display flight data, sync your saved airports and flight preferences across devices, and operate the Service across all platforms
• Manage your subscription and billing — process payments through Stripe or Google Play, send receipts, manage plan features, and handle cancellations
• Send required transactional emails — account confirmation, password resets, billing receipts, and material service notices. These cannot be turned off.
• Send optional emails — marketing emails and product updates, only if you have opted in. You can opt out at any time.
• Improve the Service — analyze feature usage patterns and flight search data in aggregate (or pseudonymously) to identify what to build next, fix bugs, and improve performance
• Ensure security and prevent abuse — detect unauthorized access, rate-limit excessive use, identify credential sharing, and protect the integrity of the Service
• Operate the referral program — track qualifying referrals to credit the referring user's account
• Comply with legal obligations — respond to lawful requests from courts, government authorities, or law-enforcement agencies

We do not use your information to build advertising profiles, sell your data to third parties, or make automated decisions that produce legal or similarly significant effects about you.

3. Who We Share It With (Sub-Processors)

We do not sell or "share" your personal information for cross-context behavioral advertising as those terms are defined under California's CCPA/CPRA. We do not rent or trade your personal information. We disclose information only to the sub-processors listed below, each of which acts on our behalf and is contractually prohibited from using your data for their own commercial purposes, and as otherwise required by law.

Legal disclosures. We may also disclose your personal information where required by law, subpoena, court order, or government authority, or where we in good faith believe disclosure is necessary to: comply with a legal obligation; protect and defend our rights or property; prevent or investigate potential wrongdoing; protect the safety of users or others; or protect against legal liability.

Business transfers. If Salzventure Technologies LLC merges with, is acquired by, or sells substantially all of its assets to another entity, your personal information may be transferred as part of that transaction. We will notify you of any such transfer by email or prominent notice on the Service before your information becomes subject to a different privacy policy.

Note on flight data queries. When you search for a flight or look up airport data, that query — including the flight number, airport code, or route — is sent to FlightAware (AeroAPI) to retrieve the requested information. By using the Service, you acknowledge this data flow. We do not send your name, email, or account identifier to these data providers.

4. Cookies, Local Storage, and Tracking

FlightPort uses localStorage (in web browsers) and equivalent native app storage (on TV platforms) to store:

• Your authentication token (so you stay logged in)
• Cached flight data (to speed up loading and reduce data usage)
• Your preferences and settings (saved airports, layout, display options)

We do not use advertising cookies or cross-site tracking pixels. We do not participate in any advertising network or data broker. We do not use tracking technologies to follow you across other websites or apps.

Strictly necessary session cookies may be set by our infrastructure providers (for example, for load balancing or CSRF protection) where technically required. These are operational necessities, not tracking tools.

If you clear your browser's localStorage or reinstall the TV app, your cached preferences will be cleared, but your account data remains on our servers and will be restored when you log in again.

5. Data Retention and Deletion

We retain your account information (email address, display name, plan, and preferences) for as long as your account is active or as required by law (for example, billing records may be retained for tax and legal compliance purposes for up to 7 years).

Your flight usage history (searches and lookups) is retained for as long as your account exists to power your history feature. You can clear your search history at any time from your account settings.

Server-access logs follow our infrastructure providers' default retention policies (typically 30–90 days). The in-app feature analytics event log is a rolling window of the most recent 10,000 events across all users and is not individually linked to your account after 90 days.

Account deletion. You can delete your account at any time from your account settings. When you delete your account, we will:

• Cancel any active web subscription we process directly and stop future direct billing. If you subscribed through Google Play or another app store, you must cancel renewal through that store's subscription manager.
• Delete your account row, email address, preferences, saved airports, and flight history within 30 days
• Retain billing records and transaction history as required by applicable law (typically 7 years for tax purposes)
• Retain anonymized, aggregated analytics data that cannot be linked back to you

If you request deletion by email rather than through the in-app flow, email us at flightport-support@salzventure.com with "Delete My Account" in the subject line and we will process the request within 30 days.

6. Security

We take the security of your personal information seriously and implement reasonable technical and organizational measures to protect it, including:

• TLS 1.2+ encryption for all data in transit
• bcrypt hashing for all stored passwords (we never store plaintext passwords)
• JWT bearer tokens with bounded expiry for session authentication
• Server-side enforcement of subscription tier access controls
• Least-privilege access controls on our cloud infrastructure
• We do not store raw payment card data — all card processing occurs within Stripe's PCI-compliant environment

No method of internet transmission or electronic storage is 100% secure. While we work hard to protect your personal information, we cannot guarantee absolute security, and we disclaim liability for breaches that are outside our direct control. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Children's Privacy and Minimum Age

The Service is not directed to children under 13. To create an account, you must be at least 18 years old (or the age of legal majority in your jurisdiction, if higher). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at flightport-support@salzventure.com and we will delete the information promptly.

8. International Users — GDPR and Data Transfers

The Service is operated from the United States and is primarily intended for users in the United States. We do not specifically target or market the Service to residents of the European Economic Area (EEA), the United Kingdom, or Switzerland. If you choose to access the Service from outside the United States, you do so at your own initiative and are responsible for compliance with your local laws.

EU/UK Representative. Because we do not systematically offer goods or services to individuals in the EEA or UK and do not monitor behavior of individuals in the EEA or UK as a primary business activity, we have not appointed an Article 27 GDPR EU representative at this time. If our business practices change such that GDPR Article 27 representation is required, we will appoint a representative and update this policy accordingly.

Legal basis for processing (EEA / UK / Swiss users who access the Service)

For any users in the EEA, UK, or Switzerland who access the Service, we process your personal data on the following legal bases under the GDPR or UK GDPR:

• Performance of a contract — processing your account data, flight preferences, and billing information to provide the Service you signed up for
• Legitimate interests — processing infrastructure logs, anti-abuse signals, and anonymized usage analytics to operate a secure and functional internet service. We have balanced these interests against your rights and concluded they do not override your fundamental rights.
• Consent — sending marketing or product-update emails. You may withdraw consent at any time by unsubscribing or updating Settings → Email Preferences, without affecting the lawfulness of processing before withdrawal.
• Legal obligation — retaining billing records and responding to lawful government requests

International data transfers

When personal data of EEA, UK, or Swiss data subjects is transferred to our U.S.-based sub-processors (listed in §3), we rely on the European Commission's Standard Contractual Clauses (SCCs) — including the UK International Data Transfer Addendum where applicable — as the legal transfer mechanism, supplemented by appropriate technical and organizational measures. A copy of the relevant SCCs is available on request by emailing flightport-support@salzventure.com.

Note on FlightAware and adsb.lol: FlightAware (AeroAPI) operates from the United States. adsb.lol is a community ADS-B network that publishes aircraft position data under the Open Database License (ODbL) 1.0; we consume its public feed for the live radar map. Flight search queries forwarded to FlightAware do not include your personal account information (name, email, or account ID).

Sub-processor changes. If we add a material new sub-processor that processes EEA/UK personal data, we will update the sub-processor table in §3 and notify active accounts by email at least 30 days in advance.

Data Protection Officer

We have not appointed a Data Protection Officer because we are not required to do so under applicable law at our current scale and data processing activities. Privacy queries should be directed to flightport-support@salzventure.com.

Your GDPR / UK GDPR rights

If you are in the EEA or UK, you have the following rights under the GDPR or UK GDPR:

• Right of access — to receive a copy of your personal data we hold
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — to request deletion of your data, subject to legal retention obligations
• Right to restriction of processing — to request that we limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where we rely on consent (e.g., marketing emails), you may withdraw it at any time
• Right to lodge a complaint — with your local supervisory authority (for EEA users: your national data protection authority; for UK users: the Information Commissioner's Office at ico.org.uk)

To exercise any of these rights, contact us at flightport-support@salzventure.com. We will respond within one month (extendable by two additional months for complex requests, with notice to you).

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you the following rights:

• Right to Know — to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for collection, and the categories of third parties with whom we share it. See §1 and §3 above for this information.
• Right to Delete — to request deletion of your personal information, subject to certain legal exceptions (for example, information we need to complete a transaction, comply with a legal obligation, detect fraud, or provide a service you have requested).
• Right to Correct — to request correction of inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing — we do not sell your personal information and do not share it for cross-context behavioral advertising. We do not sell or share personal information. No opt-out action is required, but the right exists and you may exercise it by contacting us at flightport-support@salzventure.com with "Do Not Sell My Personal Information" in the subject line (your request will be confirmed and recorded, though no sale is occurring).
• Right to Limit Use of Sensitive Personal Information — we do not collect sensitive personal information as defined by CPRA (such as precise geolocation, racial or ethnic origin, health data, financial account numbers, genetic data, biometric data, or contents of private communications). The categories of personal information we collect are listed below and do not include CPRA-defined sensitive categories. If this changes, we will update this policy and provide the required disclosure and opt-out mechanism.
• Right to Non-Discrimination — we will not deny service, charge different prices, or provide a different level of service to you for exercising any of these rights.

How to exercise California rights. Email us at flightport-support@salzventure.com with "California Privacy Request" in the subject line, or use the export/delete features in your account settings. We will respond within 45 days of a verified request, as required by California law. We may request additional information to verify your identity before processing your request.

Authorized agents. A California resident may designate an authorized agent to submit a CCPA request on their behalf. We will require the agent to provide written authorization signed by the California resident (or a valid power of attorney) and may verify the resident's identity directly. To submit a request as an authorized agent, email us at flightport-support@salzventure.com with "CCPA Authorized Agent Request" in the subject line and attach proof of authorization.

Referral program and financial incentives. Our referral program (described in the Terms of Service) constitutes a "financial incentive" program under CCPA §1798.125(b). Participation is voluntary and requires opt-in. The value of the incentive (up to one free month of service per qualifying referral, worth $3.99–$7.99) is reasonably related to the economic value of the referred subscriber to us. You may opt in to the program by generating a referral link and opt out at any time by ceasing to share it.

Shine the Light (Cal. Civ. Code §1798.83). California residents may request information about disclosure of personal information to third parties for direct-marketing purposes. We do not disclose personal information to third parties for their own direct-marketing purposes.

Categories of personal information collected (CCPA categories):

• Identifiers (email address, user ID)
• Commercial information (subscription plan, billing records, referral credits)
• Internet or other electronic network activity (feature usage, flight search history, session data, server logs)
• Geolocation data (country/state-level approximation from IP address only — no precise geolocation collected or stored)
• Inferences drawn from the above (flight preferences inferred from search patterns, used only to personalize the Service for you)

10. Other U.S. State Privacy Rights

Residents of certain U.S. states — including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana, Iowa, Tennessee, Indiana, New Hampshire, Delaware, New Jersey, Kentucky, Maryland, Minnesota, Rhode Island, and others — may have rights under applicable state law with respect to their personal information, which may include the right to access, correct, delete, and port their personal information, and the right to opt out of certain uses of personal information including targeted advertising and profiling.

We do not sell personal information. We do not process personal information for targeted advertising or profiling for decisions that produce legal or similarly significant effects.

To exercise any state privacy right, email us at flightport-support@salzventure.com with "State Privacy Request — [Your State]" in the subject line. We will respond within the timeframe required by your state's law. We may verify your identity before processing your request. If we deny your request, you may appeal by responding to our denial notice and we will reconsider within the appeal window required by your state.

Where state law provides rights with respect to warranties, liability limitations, or class actions that cannot be limited by contract, those rights are preserved for residents of those states notwithstanding any contrary provision in our Terms of Service.

11. Your Rights — Access, Correction, Deletion, and Export

Regardless of where you live, you have the following choices and rights:

• Access your data: view your account information, preferences, and saved flights at any time in your account settings
• Correct your data: update your email address, display name, and preferences at any time in your account settings
• Export your data: download a copy of your account information and flight preferences from account settings → "Download my data" (JSON format)
• Delete your data: delete your account from account settings → "Delete my account," or email us. See §5 for what happens to your data after deletion.
• Opt out of marketing emails: use the one-click unsubscribe link in any marketing email, or go to Settings → Email Preferences
• Clear your flight search history: from account settings at any time

For any request you cannot complete through the in-app settings, contact us at flightport-support@salzventure.com. We will respond within 30 days (or the timeframe required by applicable law, whichever is shorter).

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any change. For material changes — such as new categories of data collection, new third-party data sharing, or significant changes to how we use your data — we will notify active accounts by email at least 15 days before the change takes effect and surface it prominently in the Service.

Your continued use of the Service after the effective date of a material change constitutes your acceptance of the updated policy. If you do not agree to a material change, you may delete your account and stop using the Service before the effective date.

13. Contact

For privacy questions, data-rights requests, account-deletion requests, or any concern about this Privacy Policy:

Salzventure Technologies LLC
PO Box 12393
Denver, CO 80212, USA
Email: flightport-support@salzventure.com
Web: flightport.app

Please include "Privacy Request" in your email subject line and describe your request. We may ask you to verify your identity before processing your request.

For our full Terms of Service, subscription terms, disclaimers, and dispute resolution procedure, see flightport.app/terms.