Privacy Policy

Searches: origin, destination, dates, passengers, cabin, language and currency. No sign-up required.

Price alerts: e-mail, name and phone (optional), watched routes and notification preferences.

Referrals to partners: searched route, date and time, browser (user-agent), referring page and a random click identifier. IP addresses are only stored irreversibly (cryptographic hash).

Support: e-mail, name and the content of your messages.

Direct sales (when available): passenger data required for ticketing, stored encrypted. Card data is handled by the payment provider, not by FlyXperience.

AI assistant (Travel Brain): the messages you send to the assistant.

Local storage and essential cookies: language, currency, access to your alerts and your cookie choice.

Partner script (only with your consent): Travelpayouts Drive, by Travelpayouts, measures visits and clicks and may turn travel links into affiliate links, using its own cookies and identifiers. You accept or decline in the cookie notice and can change your choice at any time under "Cookie preferences" in the footer.

Providing the service you requested (search, alerts, support and, when applicable, booking) — art. 7, V.

Sending alerts by e-mail or WhatsApp with your consent, which you can withdraw at any time — art. 7, I.

Enabling the partner script (Travelpayouts Drive) with your consent, which you can withdraw at any time — art. 7, I.

Security, fraud prevention, aggregated statistics and attribution of referrals to partners — legitimate interest, art. 7, IX.

Complying with legal and tax obligations, such as keeping sales records — art. 7, II.

Partners (Aviasales, Trip.com, Airalo, Yesim, Kiwitaxi, Localrent and AirHelp): when you click through to a partner, you go to its website with the route or destination and a random click identifier, without your personal data. From then on, the partner’s privacy policy applies.

Service providers: hosting and database, e-mail delivery, WhatsApp Business (Meta), AI provider (Anthropic, when the assistant uses AI), flight suppliers and payment provider (for direct sales).

Travelpayouts (only if you accept partners): receives browsing and click data collected by the Drive script, under Travelpayouts’ privacy policy.

We do not sell personal data.

Some providers are located outside Brazil (for example, in the United States and Singapore). Such transfers follow art. 33 of the LGPD, with contractual clauses and appropriate safeguards.

Alerts, notifications and profile: until you delete them.

Searches and referrals: as long as needed for statistics and commission reconciliation; once you delete your data they are no longer linked to you.

Sales records: for the period required by tax law.

You may confirm processing, access, correct, export (portability) and delete your data, and withdraw consent (art. 18 LGPD).

The alerts page has "Export my data" and "Delete my data" buttons. You can also ask through support or the privacy e-mail below.

We use encryption in transit and at rest for sensitive data, role-based access control, attempt limits and an audit trail of administrative actions.

This policy may be updated. The last update date is shown at the end of the page.