Privacy Policy

Volward is the data controller for personal data collected through the use of the service, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

We collect the following data, strictly necessary for the operation of the service:

• Passenger identity : gender, first name, last name
• Contact : email address
• Flight data : departure/arrival airports, travel dates
• Payment data : processed directly by Stripe (we do not store card numbers)
• Technical data : IP address, browser (for security purposes only)

• Creating and managing your temporary flight booking
• Sending your ticket by email and order-related notifications
• Processing payment and managing refunds
• Compliance with our legal obligations

We never sell your data to third parties. We do not use it for advertising or profiling purposes.

Your data is hosted on servers located in Europe, in compliance with GDPR requirements. Our PostgreSQL database is hosted on a European VPS.

The following sub-processors access certain data as part of the service:

• Stripe (payments) — payment data, EU headquarters
• Duffel (flight booking) — passenger names, flight data
• Resend (transactional emails) — email address
• Cloudflare (CDN and security) — technical data

• Order data: 13 months (accounting obligations)
• Account data (if created): until account deletion
• Technical logs: 12 months maximum

Under GDPR, you have the following rights:

• Right of access : obtain a copy of your personal data
• Right to rectification : correct inaccurate data
• Right to erasure : request deletion of your data
• Right to data portability : receive your data in a structured format
• Right to object : object to the processing of your data

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Under your right to erasure (GDPR Article 17), you may request the deletion of all personal data associated with your email address. This action is irreversible.

To delete your data, send an email to [email protected] with the subject line 'Delete my data'. We will process your request within 30 days.

Volward only uses strictly necessary cookies for the operation of the service (authentication session). No tracking or advertising cookies are used.

For any questions: [email protected]. You may also file a complaint with your local data protection authority.