Privacy policy

What we collect

• Account data — your email address and name when you sign up or join the waitlist.
• Booking data — the flight confirmation emails you forward to us, and the details extracted from them: airline, booking reference, passenger names, flight segments, fare class, and amount paid.
• Payment data — handled entirely by Stripe. Dipback never stores your card number.
• Usage data — analytics about how you use our site and product, collected via PostHog. Contact us to opt out or request deletion of your analytics data.

How we use it

We use your data to monitor your fares, recover savings on your behalf, notify you about drops and claims, charge the success fee after savings are secured, and improve the product. We do not sell your data, and we do not use it for advertising.

Who processes it

We rely on a small set of processors to run Dipback: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Twilio SendGrid (email), PostHog (analytics), Anthropic (automated extraction of booking details from forwarded emails), and Duffel (flight fare data). Data is hosted in the United States.

Your rights

You can access, correct, or delete your data at any time. Deleting your account removes your bookings, forwarded emails, and personal data from our systems. EU residents have the rights provided by the GDPR, including data portability and the right to lodge a complaint with a supervisory authority. Contact us at hello@dipback.com for any privacy request.