Privacy & Data

Your flight confirmation number is sensitive information. I understand this responsibility and built privacy controls directly into how MyAtlasPal works, not as an afterthought.

I Take This Seriously

Look, I'm going to be straight with you about data and privacy. In the wrong hands, someone could potentially access your booking, see your travel plans, or cause other problems. I understand this responsibility.

What Data We Actually Need

To Track Your Flights

Confirmation number - obviously, since that's how we look up your flight

Passenger name - required to access your booking information

Email address - so we can send you alerts when deals appear

What We Don't Need

Credit card information - we never see it, never store it

Passport numbers - none of our business

Seat preferences - we can see what you're assigned, but don't store personal preferences

Travel companions - we only track the name you give us

Your Data, Your Control

Delete Anytime, Really Delete

When you delete a flight from your dashboard, it's immediately purged from our database. Not "marked for deletion" or "archived for 90 days." Gone.

This includes:

• Your confirmation number
• All flight details we fetched
• Price history for that flight
• Any alerts we set up

One click, actually deleted.

Account Deletion

Want to delete your entire account? Same deal. Everything gets purged immediately. We don't keep "anonymized" copies or anything like that.

Third-Party Services (And Why I Picked Them)

I don't just randomly pick services to handle your data. Every third-party tool goes through my own vetting process.

Flight Data Retrieval Service

The service that actually fetches your flight information from Delta operates under:

• SOC 2 Type II compliance - audited security controls
• Enterprise-grade encryption for all data in transit and at rest
• Automatic data purging - they delete scraped data within 30 days

• No data sharing with other customers or advertisers
• Geographic data restrictions - they can't move your data outside specified regions

I chose them specifically because their security practices match what I'd expect from a healthcare platform (which is what I build professionally).

Email Service

Our email alerts go through a service that:

• Doesn't scan your emails for advertising
• Provides detailed delivery tracking so we know alerts actually reach you
• Supports proper authentication (SPF, DKIM, DMARC) to prevent spoofing
• Handles unsubscribes properly and honors them immediately

The Analytics Question

Here's where I ask for your help, but it's completely optional.

Anonymous Analytics That Help Everyone

If you opt-in, we can keep anonymized data that helps other travelers:

• Route-specific pricing patterns - "upgrades on this route typically drop 3 weeks before departure"
• Aircraft-specific trends - "A330-900neo upgrades are usually reasonable, A350s less so"

• Seasonal patterns - "summer Europe routes see more pricing volatility"
• Time-of-day insights - "deals often appear between 2-4 AM Eastern"

What "Anonymized" Actually Means

• No confirmation numbers stored
• No passenger names connected to the data

• Routes generalized (not specific flight numbers)
• Dates rounded to weeks, not specific days

You Decide

This is opt-in during signup and you can change your preference anytime. If you say no, absolutely no data gets kept after you delete flights.

Security Practices

How We Protect Your Data

• Database encryption - everything encrypted at rest
• Secure connections - all communication uses HTTPS/TLS
• Access controls - only automated systems access your data, no human browsing
• Regular security updates - infrastructure stays patched and current
• Monitoring - we watch for unusual access patterns

What We Monitor

• Failed login attempts - to catch potential account takeovers
• Unusual data requests - patterns that might indicate compromised accounts
• Service performance - to catch issues before they affect you

What We Don't Monitor

• Your browsing habits outside MyAtlasPal
• Other airline bookings you might have
• How often you check the dashboard

My Personal Commitment

I built this tool for myself first. I'm trusting the same systems with my own travel data that I'm asking you to trust with yours.

I'm not trying to build a data business. This isn't about collecting information to sell to advertisers or other companies. It's about making upgrade tracking work properly.

I understand the responsibility. Your confirmation number in the wrong hands could cause real problems. I've built this system with that in mind from day one.

The Legal Stuff (In Plain English)

Data Location

Your data is stored in secure data centers in the United States. It doesn't get moved to other countries.

Government Requests

If law enforcement shows up with a valid warrant, I have to comply. But there's not much here they'd be interested in - we're tracking flight upgrades, not planning international incidents.

Service Changes

If I ever need to change how data is handled, I'll email everyone first. No surprise privacy policy updates.

Questions or Problems

Email me directly if you have concerns about your data. I respond to these personally, not through some customer service system.

Contact

Data question? Privacy concern? Want to know exactly what we have stored for your account?

Email me directly - I don't outsource privacy questions to customer service.

I'll respond personally and honestly about what data we have and how it's being handled.

Last updated: January 2025 • MyAtlasPal • Built by someone who takes data seriously