airportal

Documents

Privacy policy

Version of 5 September 2026.

1. Who processes your data

The operator of AirPortal (https://airportal.vercel.app, bot @airportal_bot): Uladzimir Vysotski, address to be confirmed, NIP PL5223279680. Questions about your data: through the “Leave feedback” button at the bottom of any page, or by messaging the bot @airportal_bot.

2. What we collect and why

  • Telegram profile: id, name, username, avatar link, chat id. Needed so that you can sign in and receive messages from the bot. Legal basis: performance of our contract with you.
  • Your alerts: departure cities, destinations, price cap, filters, date window, delivery mode, time zone, quiet hours. This is the substance of the service. Legal basis: contract.
  • Notifications sent and clicks on “Book” links, including the browser type at the moment of the click. Needed so we do not send the same deal twice and can tell whether the deals are useful. Legal basis: contract and our legitimate interest in improving the service.
  • Feedback left through the button in the footer, together with the page it was sent from. Legal basis: legitimate interest in improving the service.
  • Pro subscription data: plan, status, term, your customer id in Stripe and payment events. We never see or store your card number; Stripe handles it. Legal basis: contract and tax record-keeping obligations.

We do not ask for an email address, phone number, identity documents or location. No special categories of data are processed.

3. Cookies

The site sets only two technical cookies: your session after signing in, and a one-time confirmation code during sign-in. There are no analytics or advertising cookies and no trackers, which is why there is no consent banner. The Stripe payment page and its cookies live on Stripe’s own domain.

4. Who we share it with

  • Supabase — database and background functions.
  • Vercel — site hosting.
  • Stripe — Pro payments, tax, receipts, the subscription management portal.
  • Telegram — delivery of the bot’s messages.
  • Travelpayouts — the source of ticket prices. It receives only routes and months, never your data.

These companies process data on our instructions, as processors. Some processing may take place outside the EU on the basis of the standard contractual clauses (SCC) adopted by those providers. Data is never sold and never shared with advertising networks.

5. How long we keep it

  • Prices we find (not linked to any person) — 14 days, then deleted automatically.
  • Profile, alerts, notification history, clicks and feedback — for as long as the account exists.
  • Payment events — for as long as tax law requires.

6. Your rights

You may obtain a copy of your data, correct it, restrict processing, object to it, and delete your account. Deletion is available in settings and takes effect immediately: profile, alerts and notification history are removed. For anything else write to us (through the “Leave feedback” button at the bottom of any page, or by messaging the bot @airportal_bot); we reply within 30 days. You may also lodge a complaint with the data protection authority in your country of residence; in Poland that is the Urząd Ochrony Danych Osobowych.

7. Changes

If anything material changes, we will write to you in the bot. The date of the current version is shown at the top of this page.