Privacy Policy

Who is responsible

SeatMap.app is operated from Perth, Western Australia. For privacy questions or complaints, email privacy@seatmap.app.

Information we collect

If you create an account, we keep your name, email address, verification state, newsletter choice, and the account and session records needed to sign you in. Email sign-in uses a password credential. Google or Apple sign-in can add the provider account identifier and profile fields they return. Session records can include a token, expiry time, IP address, and browser information.

We keep the product information you choose to add, including saved flights, watched flights, a seat paired to a flight, reviews, review photos, and messages you send us. A traveller profile can include your height range, travelling group, priorities, turbulence preference, free-text specific needs, home airport, preferred airlines and aircraft, and seat preference. Specific-needs text can reveal health or disability information, so please do not include diagnoses or detail we do not need.

When you visit, analytics, advertising, security, and error tools can receive pages viewed, referral information, cookie or device identifiers, browser and device details, approximate location derived from an IP address, and technical events. Reviews and photos also carry moderation and upload records. If you buy Pro, we keep Stripe customer and subscription references, plan, billing state, and event identifiers. Stripe keeps the card details entered on its checkout.

Services we use

These services process information for the jobs described below. What they receive depends on the feature you use and their configuration.

• Hosting and data: Vercel hosts the application, Neon stores product data, Cloudflare R2 stores review photos, Redis supports short-lived application state, and Inngest runs background work.
• Accounts and communications: the account system handles email, password and OAuth sign-in data. Resend sends verification, password reset, flight watch, and opted-in product emails.
• Seat Advisor and moderation: Anthropic receives the Seat Advisor prompt and selected map context to generate a recommendation. Review text and photo moderation can also be sent to Anthropic through background jobs. Do not submit confidential or unnecessary health information.
• Payments: Stripe takes payment and returns customer, subscription, invoice, and event information. We do not receive your full card number.
• Analytics and diagnostics: Google Analytics measures use, Microsoft Clarity provides heatmaps and sampled session recordings, and Sentry records errors and sampled replay context. Masking settings reduce what appears in recordings, but they do not make every event anonymous.
• Advertising: Journey by Mediavine, Mediavine Grow, and advertising partners can use cookies, IP addresses, device identifiers, and page activity to select, deliver, limit, and measure ads.

Cookies and consent

Essential storage supports sign-in, security, and saved choices. Analytics and advertising tools can set their own cookies or identifiers. Blocking essential storage can stop account features working. You can clear cookies in your browser and use Google's analytics opt-out tools.

In regions where our site consent banner appears, it offers Accept or Decline for the tools controlled by that banner. The choice and date are kept for 12 months in the first-party sm_consent cookie. Advertising choices can be handled in a separate Mediavine control. A browser's Global Privacy Control signal is not a substitute for checking these controls because SeatMap does not yet process that signal as a separate account-level request.

How we use information

We use this information to provide accounts and saved features, run flight watches, deliver service emails, answer Seat Advisor requests, moderate contributions, take payments, prevent misuse, diagnose faults, measure the service, and show advertising. If you opt into product email, we use your address for those messages until you unsubscribe.

SeatMap does not sell account details for money. Advertising partners can receive or share browsing identifiers for behavioural advertising. Some privacy laws call that a sale, sharing, or targeted advertising even when no money is paid for the data. Use the available advertising and consent controls to limit that activity.

Overseas processing

SeatMap and its providers can process data outside your country. Their service regions, subprocessors, and support locations can change, and we have not verified a complete country list for every data flow. This means your information can be subject to the laws of another place. Contact us if you need the current information we hold about a particular provider.

Your choices

Your Account page lets you change newsletter and traveller-profile choices. Your dashboard lets you stop flight watches. You can also ask for access, correction, deletion, or another right available where you live by emailing privacy@seatmap.app. We may ask for enough information to verify that the account is yours. We will explain if a legal or technical reason limits what we can do.

If you have a privacy complaint, tell us what happened and how you would like it fixed. We will investigate and respond. If you are not satisfied, you may be able to complain to the privacy regulator where you live, including the Office of the Australian Information Commissioner in Australia.

Retention and security

We keep information while it supports the service, an account, a watch, a transaction, security, dispute handling, or a legal obligation. The period depends on the record and provider configuration. When we receive a deletion request, we verify the requester and assess the linked account, product, and provider records in scope. Billing and webhook event identifiers, fraud or security records, backups, and provider logs can remain where needed to prevent duplicate processing, preserve evidence, or meet legal duties. We will explain what we can delete and what must remain rather than promising that every identifier disappears at once.

We use access controls, transport security, provider safeguards, and operational checks intended to reduce risk. No internet service can promise complete security. Please use a unique password and contact us if you think your account or information has been exposed.

Children

SeatMap.app is intended for people arranging travel, not for children to use on their own. We do not currently run an age check during sign-up. A parent or guardian who believes a child submitted personal information can contact us to request review and removal.

Changes

We will update this page when our tools or practices change and move the date at the top. For anything privacy-related, email privacy@seatmap.app.