Privacy Policy

Last updated: 9 June 2026

This is a starting template — have it reviewed by qualified legal counsel before operating commercially. It describes how Voyila is built to handle data, but it is not legal advice and has not been reviewed by a lawyer.

This policy explains what data Voyila collects when you search for and book flights, why we collect it, who we share it with, and the choices you have.

1. What we collect

Account information. Your email address, used to sign you in. We use a magic-code (email) sign-in, so we don't store a password.
Traveller profiles. Details you save to make booking faster: names, dates of birth, passport details (number, country, expiry), contact details (email, phone), and your seat or meal preferences.
Frequent-flyer numbers. Loyalty account numbers you add, so you can earn miles on bookings.
Booking history. The trips you book, search activity, any price alerts you set, and account credit balances and refunds.
Payment information. Payments are processed by Stripe. We do not store your full card number — Stripe handles card data. We keep a record of the booking amount and payment status for your order history.

2. Why we collect it

We use this data to provide the service: to search for and book your flights, to enable one-tap rebooking by securely reusing your saved traveller details, to attach loyalty numbers so you earn miles, to process payments and refunds, to send booking confirmations and price-alert notifications, and to keep your account secure. We don't sell your personal data.

3. Who we share it with

We share only what's needed to deliver your booking, with the providers that make Voyila work:

Duffel and the airlines — to search inventory and fulfil your booking. To issue a ticket, the airline needs the passenger and passport details for that trip.
Stripe — to process your payment and any refunds securely.
Resend — to send transactional email, such as your sign-in code and booking confirmations.

These providers process your data to perform their service for us. We may also disclose data where required by law.

4. Retention

We keep your account and traveller profiles for as long as your account is active, so one-tap rebooking keeps working. We retain booking and payment records for as long as needed to support your trips and to meet legal, accounting, and tax obligations. When you delete your account, we delete your profile data, except records we are required to keep (such as transaction records for compliance).

5. Your rights

You can access and update your traveller profiles at any time from your profile page, and delete a saved traveller or your account. Depending on where you live, you may also have rights to a copy of your data or to object to certain processing. To make a request, contact us using the details below.

6. Cookies & sessions

We use a session cookie to keep you signed in after you enter your magic code. This is essential to the service. We don't use cookies to sell your data to advertisers.

7. Security

We limit access to your data to what's needed to run the service, and we rely on established providers (Stripe for payments, Duffel for booking, Resend for email) for parts of the flow. No system is perfectly secure, but we take reasonable steps to protect your information — and we deliberately avoid storing full card numbers ourselves.

8. Contact us

Questions or a privacy request? Email us at [email protected] (placeholder — replace with your real support address before launch).

Reminder: this document is a template. Please have it reviewed by qualified legal counsel before you operate Voyila commercially.