Privacy policy

We collect personal information that you voluntarily provide when you register for an account, express interest in our Services, or otherwise contact us. This includes:

• Email addresses
• Contact preferences (whether you have confirmed email consent and whether you have unsubscribed)
• Your home hub or departure airport selection (Toronto/YYZ, Vancouver/YVR, or Montréal/YUL) — used to show you deals relevant to where you fly from

We do not collect names, phone numbers, mailing addresses, job titles, usernames, or passwords — login is passwordless (magic-link email), so no password is ever created or stored. We do not collect any sensitive personal information (health, biometric, or similarly sensitive data).

Some information — such as your IP address, browser type, and usage activity — is collected automatically when you visit the Services, through standard web server logs and records of actions you take (such as which deal you click to book). We do not currently use any dedicated analytics service, and we do not collect device identifiers, hardware information, or your device’s geolocation.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including to:

• Deliver and facilitate delivery of the Services, including unlocking the Deal of the Day and (for subscribers) the full deal board
• Comply with our legal obligations
• Determine the effectiveness of our promotional campaigns, using the campaign tags (UTM parameters) on the link you arrived through, or the name of the website that sent you to us
• Evaluate and improve our Services, products, marketing, and user experience
• Identify usage trends
• Fulfill and manage subscription orders, processed through Stripe
• Protect our Services against fraud and abuse
• Request and respond to feedback
• Respond to your inquiries and offer support
• Send administrative information, such as login links and subscription confirmations
• Send marketing and promotional communications, where you have consented

We only share personal information with the following categories of third parties, each of whom processes it solely to provide a service to us:

• Stripe — payment processing. Stripe’s privacy policy is available at https://stripe.com/privacy. Your card number is never stored on or transmitted through our own servers.
• Resend — email delivery, so that login links and the weekly digest actually reach your inbox.
• Replit — website and application hosting.

We may also disclose information where required to comply with the law, or in connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.

Links on the Services to hotel or travel-insurance partners (via Travelpayouts and SafetyWing) are outbound links you choose to click — no personal information is transmitted to those partners by us before you do.

The route maps on our destination pages are drawn from OpenFreeMap, a free map service built on OpenStreetMap data. When a map loads, your browser fetches map tiles directly from OpenFreeMap’s servers, which therefore receive your IP address and basic browser details, as any website you visit does. No cookies are set and no account or other personal information is sent to them.

We do not sell your personal information, and we do not share it with data brokers or advertisers.

We use a single, first-party session cookie so the Services can recognize you as you browse. We do not use third-party advertising or tracking cookies, and we do not currently operate a separate cookie policy — our cookie footprint is intentionally limited to this one cookie.

The Services are hosted in Canada. Some of the service providers described above — including Stripe, Resend and OpenFreeMap — may process information outside of Canada. Where this occurs, we rely on those providers’ own safeguards for cross-border data handling.

We keep your information for as long as your account exists with us. We do not automatically delete or anonymize data on a fixed schedule after cancellation or inactivity; instead, your information is retained until you request deletion (see Section 10 below).

The Services are intended for users who are at least 18 years old. We do not knowingly collect data from or market to anyone under 18.

Where your country’s privacy law grants you the right to access, correct, or delete the personal information we hold about you, you may exercise that right by emailing legal@soswell.co.

If you have consented to receive marketing and promotional communications from us, you may withdraw that consent at any time by clicking the unsubscribe link at the bottom of any marketing email — this takes effect immediately, no login required.

Most web browsers include a Do-Not-Track (“DNT”) feature. Because no uniform standard for recognizing DNT signals has been adopted, we do not currently respond to browser DNT signals.

You can review and update the information tied to your account by logging in. To request deletion of your account or the personal information we hold about you, email legal@soswell.co.

We have implemented appropriate technical and organizational security measures designed to protect the personal information we hold, including: cryptographically signed session identity, single-use authentication links that expire quickly and cannot be replayed, verified webhook signatures for all payment-related events, parameterized database queries, and encrypted transmission of cookies in production. We never store your card number — all payment data is handled directly by Stripe. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Effective” date at the top of this page, and the updated version will be effective as soon as it is accessible. Your continued use of the Services after any changes constitutes acceptance of the revised policy.

Mihai Alexandru Coanda
1595 Rue Rachel Est, 502
Montréal, Quebec H2J 4A7
Canada
legal@soswell.co