Privacy Policy
Version: 1.0.0 Effective Date: 2026-09-22 Last Updated: 2026-09-22
1. Introduction
Seat Upgrade Analyzer ("we," "us," "our") operates the website at seatupgradeanalyzer.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights.
By using the Service, you agree to the collection and use of information as described in this policy.
2. What We Collect
2a. Flight and Offer Inputs
When you submit an upgrade offer for analysis, we receive the following data:
- Airline code (e.g., "DL", "UA")
- Route (stored as a one-way cryptographic hash — the actual airport codes are not stored)
- Travel date (stored only as days-until-departure, not the actual date)
- Cabin class (e.g., "economy", "business")
- Offer type (cash, miles, or miles + copay)
- Offer price (stored in a price bucket, e.g., "$50–150", not the exact price)
- Total flight duration in hours
- Aircraft type (e.g., "76W") for analytics purposes
- Elite status tier (if provided)
We do not store: your name, email, flight number, ticket number, PNR/booking reference, exact departure date, exact offer price, or any payment information.
2b. Uploaded Files (Offer Extraction — Milestone 6)
If you upload a screenshot or paste text for automatic offer extraction:
- The content is sent to the Anthropic Claude API for extraction
- The content is deleted immediately after extraction completes
- We do not store uploaded files, screenshots, or the raw text you provide
2c. Device and Usage Data
We may collect standard web analytics data via Vercel Analytics, including:
- Pages visited and navigation patterns
- Browser type and operating system (aggregated)
- Country of origin (from Vercel geo headers, not stored in our database)
- Session timing
No persistent identifiers (cookies, fingerprints) are used by our analytics.
2d. Advertising Cookies
If advertising is enabled, Google Ad Manager may set cookies on your device. See Section 6 for details.
3. What We Do Not Collect
We explicitly do not collect:
- Names, email addresses, phone numbers
- Passport, government ID, or travel document information
- Airline credentials, frequent flyer account numbers
- PNR, booking reference, or ticket numbers
- IP addresses (not stored in our database)
- Exact flight numbers (not stored)
- Exact departure dates (only days-until-departure integer)
- Exact offer prices (only price buckets)
4. How We Use Your Data
| Data | Purpose |
|---|---|
| Anonymized submission log | Aggregate analytics (e.g., average score by route type, offer price trends) |
| Country | Fraud detection and regional analytics |
| Uploaded files | Real-time offer extraction only; deleted immediately after |
We do not sell your data. We do not use your data for targeted advertising. Contextual advertising (see Section 6) uses only page-level data (route type, cabin class), not your submission inputs.
5. Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Anthropic Claude (Anthropic, PBC) | Generating plain-English explanations; offer extraction (M6) | Score components (no PII); uploaded files for extraction (deleted after use) |
| AeroDataBox (via RapidAPI) | Flight schedule lookup | Airline code, flight number, date |
| SerpAPI | Fare data lookup (Google Flights) | Origin, destination, date, cabin class |
| Neon (Neon, Inc.) | Serverless Postgres database | Anonymized submission log (see Section 2a) |
| Vercel (Vercel, Inc.) | Hosting, edge network, analytics | Request logs (standard web server logs, subject to Vercel's retention policies) |
| Google Ad Manager | Programmatic advertising | Contextual page-level signals (route type, cabin class, airline); no submission data |
Links to third-party privacy policies:
- Anthropic: https://www.anthropic.com/privacy
- Vercel: https://vercel.com/legal/privacy-policy
- Neon: https://neon.tech/privacy-policy
- SerpAPI: https://serpapi.com/privacy-policy
- Google: https://policies.google.com/privacy
6. Advertising and Cookies
If advertising is enabled, we use Google Ad Manager (GPT) to serve contextual ads.
What Google receives: Route type (e.g., "domestic_transcon"), cabin class (e.g., "business"), and airline code (e.g., "DL"). We do not share your submission inputs, scores, or any personal data with Google for advertising purposes.
Cookies: Google Ad Manager may set cookies for ad frequency capping, fraud detection, and analytics. These are Google's cookies, subject to Google's privacy policy.
How to opt out:
- Use Google's Ad Settings: https://adssettings.google.com
- Install the Google Analytics Opt-out Add-on
- Use your browser's privacy settings to block third-party cookies
Ad-free option: [Future: describe paid tier or opt-out mechanism when available.]
7. Data Retention
| Data Category | Retention Period |
|---|---|
| Submission log rows | 90 days rolling (then deleted) |
| Aggregated analytics | Indefinitely |
| Uploaded files | Deleted immediately after extraction |
| Vercel request logs | Subject to Vercel's retention policy (typically 30 days) |
8. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, disclose, and sell
- Delete personal information we hold about you
- Opt out of sale of personal information — we do not sell personal information
- Non-discrimination for exercising your privacy rights
Because we collect minimal data and do not store identifiers, we may not be able to locate records associated with you. To exercise your rights, contact us.
9. Children's Privacy
The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.
10. Security
We use industry-standard measures to protect data in transit (TLS) and at rest (Neon's encrypted storage). No method of transmission over the Internet is 100% secure.
11. Changes to This Policy
We will update this policy when material changes occur. The version number and effective date at the top of this page will be updated. Continued use of the Service after changes constitutes acceptance of the new policy.