This Privacy Policy explains how Wildly.ai (“Wildly,” “we,” “us,” or “our”) collects, uses, discloses, and protects your information when you use our website and flight price alert service (collectively, the “Service”). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
Information You Provide
- Account information: Your name, email address, and password when you register.
- Phone number: Required to receive SMS price alert notifications. We verify your number via a one-time code before activating SMS.
- Alert preferences: Flight routes, travel dates, passenger counts, and target price thresholds you configure.
- Payment information: Billing is handled entirely by Stripe. We receive a tokenized customer ID and subscription status — we never see, process, or store your full card number, CVV, or billing address.
Information Collected Automatically
- Log data: IP address, browser type, pages visited, and timestamps, retained for up to 90 days.
- Session cookies: We use a single httpOnly session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. We use Google Analytics for site usage analytics (see Section 11).
- Device information: Browser version and operating system, used solely for debugging and service compatibility.
Information from Third Parties
- Google OAuth (optional): If you sign in with Google, we receive your name and email address from Google.
- Flight data: Fare information sourced from the Amadeus Travel API. We do not receive personal data from Amadeus.
2. How We Use Your Information
We use the information we collect solely to operate and improve the Service:
- Create and manage your account.
- Monitor flight prices for your configured routes and send alerts when prices fall below your target.
- Send you SMS messages via Twilio and transactional emails via AWS SES (e.g., price alerts, account verification, billing receipts).
- Process payments and manage your subscription through Stripe.
- Respond to customer support requests.
- Detect and prevent fraud, abuse, and security incidents.
- Analyze aggregate, anonymized usage patterns to improve features.
We do not use your data for behavioral advertising, and we do not build advertising profiles.
3. SMS Communications and TCPA Consent
By providing your mobile phone number and enabling SMS notifications, you expressly consent to receive recurring automated text messages from Wildly.ai regarding your flight price alerts. Message frequency varies based on your active alerts and price movements.
- Message and data rates may apply.
- You can opt out at any time by replying STOP to any message or by disabling SMS in your account Settings.
- Reply HELP for assistance or contact us at support@wildly.ai.
- Opting out of SMS does not delete your account or cancel your subscription.
SMS notifications are delivered through Twilio Inc. Your phone number is shared with Twilio solely for message delivery and is subject to Twilio's Privacy Policy.
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We share information only as follows:
- Service providers: We share data with vendors that help us operate the Service, including:
- Twilio — SMS delivery
- Stripe — payment processing
- Amazon Web Services — cloud hosting, database, and email
- Cloudflare — CDN, DDoS protection, and edge security
- Amadeus — flight data API
- Legal compliance: We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of Wildly.ai, our users, or others.
- Business transfers: If Wildly.ai is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Service before such a transfer occurs.
5. Data Retention
- Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion.
- Price history: Route price data is automatically deleted after 90 days via DynamoDB TTL.
- Server logs: Retained for 90 days.
- API request logs: Retained for 30 days.
- Payment records: Retained for 7 years as required for tax and accounting purposes. Stripe retains billing data independently per their policies.
6. Data Security
We implement industry-standard technical and organizational measures to protect your information:
- All data in transit is encrypted using TLS 1.3.
- All data at rest is encrypted using AES-256 (AWS KMS managed keys).
- Passwords are hashed via AWS Cognito using SRP protocol — we never receive your plaintext password.
- Authentication tokens are stored in httpOnly cookies and validated at the network edge.
- API keys and secrets are stored in AWS Secrets Manager, not in application code.
No method of transmission over the internet or electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at security@wildly.ai.
7. Your Rights and Choices
You have the following rights with respect to your personal information:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update inaccurate or incomplete information in your account Settings.
- Deletion: Delete your account and all associated personal data via account Settings → Delete Account. This action is irreversible.
- Portability: Export your alert data at any time from your dashboard.
- Opt-out of SMS: Disable SMS notifications in Settings or reply STOP to any message.
- Opt-out of emails: Unsubscribe via the link in any marketing email. Transactional emails (billing, security) cannot be disabled while your account is active.
8. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:
- The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information).
- The right to delete your personal information, subject to certain exceptions.
- The right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
- The right to non-discrimination for exercising your privacy rights.
To exercise these rights, contact us at privacy@wildly.ai or delete your account directly in Settings.
9. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at privacy@wildly.ai.
10. International Users
Wildly.ai is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.
11. Cookies & Analytics
We use the following cookies and analytics tools:
- Session cookie: Keeps you authenticated during your visit (httpOnly, Secure, SameSite=Strict).
- Google Analytics 4: We use Google Analytics to understand how visitors use the site (pages visited, session duration, traffic sources). Google Analytics sets cookies to distinguish users and sessions. The data is processed by Google and subject to Google’s Privacy Policy. We do not share personally identifiable information with Google Analytics.
We do not use advertising cookies or cross-site tracking cookies. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. You may also block cookies in your browser settings; doing so will require you to sign in each visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and notify you via email at least 7 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
13. Contact Us
For questions, requests, or complaints about this Privacy Policy or our data practices, please contact us:
- Email: privacy@wildly.ai
- Response time: We aim to respond within 5 business days.