Aviunion

Privacy Policy

Last Updated: March 21, 2026

1. Introduction

Aviunion ("Aviunion," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our flight search and comparison services, websites, and related features (collectively, the "Service").

This Policy applies where Aviunion determines the purposes and means of processing your personal information (as a "controller" under GDPR and equivalent laws). For certain activities, we may act as a "processor" on behalf of a business customer and will process data in accordance with that customer's instructions and our data processing agreement.

2. Who We Are; How to Contact Us

  • Controller: Aviunion
  • Email: contact@aviunion.com

3. Information We Collect

3.1 Information You Provide

  • Search inputs (origin cities, destinations, dates, number of passengers)
  • Account information (such as email address, authentication provider details, and any profile information you submit)
  • Saved trips, search history, tracked-search settings, and tracked-flight email preferences associated with your account
  • Communications and support requests
  • Feedback, reviews, and survey responses

3.2 Information Collected Automatically

  • Device and technical data (IP address, browser type, operating system, device identifiers)
  • Usage data (pages viewed, clicks, referring/exit pages, timestamps, session duration)
  • Approximate location derived from IP address
  • Cookies and similar technologies, including browser storage such as localStorage and sessionStorage (see Section 9)
  • Analytics data collected by Google Analytics, including page views, device information, IP addresses, and usage patterns

3.3 Information from Third Parties

  • Flight and pricing data from third-party data partners and aggregators
  • Analytics data from measurement and analytics providers, including Google Analytics
  • Fraud prevention and security signals

We do not intentionally collect sensitive personal information (e.g., precise geolocation, health, or payment card numbers) through the Service. Payments for bookings (if any) are handled directly by third-party Providers; we do not collect or store your payment card details.

4. Purposes and Legal Bases (GDPR/UK GDPR)

We process personal information for the following purposes and legal bases:

  • Provide and operate the Service (legal basis: performance of a contract or steps prior to entering into a contract; legitimate interests)
  • Provide account features such as saved trips, tracked searches, search history, and related settings (legal basis: performance of a contract; legitimate interests)
  • Send service communications, tracked-search notifications, and digest emails you request or enable (legal basis: performance of a contract; legitimate interests; consent where required)
  • Improve, maintain, and personalize the Service (legal basis: legitimate interests)
  • Analytics, measurement, and service quality (legal basis: legitimate interests for basic page view tracking via Google Analytics)
  • Security and fraud prevention, debugging, and incident response (legal basis: legitimate interests; legal obligation)
  • Communicating with you, including responding to inquiries (legal basis: legitimate interests; performance of a contract)
  • Compliance with legal obligations and enforcement of our terms (legal basis: legal obligation; legitimate interests)
  • Store browser-side preferences and restore in-progress search context on your device when functional storage is permitted (legal basis: consent or legitimate interests, depending on applicable law and the storage involved)
  • Marketing communications (legal basis: consent, where required)

Where we rely on legitimate interests, we balance those interests against your rights and expectations and implement safeguards to protect your privacy.

5. How We Share Information

We may disclose personal information to:

  • Service providers (processors) that host, support, analyze, or secure the Service (e.g., cloud hosting, analytics, customer support tools)
  • Identity and authentication providers we use to manage account access
  • Email delivery and messaging providers we use to send service and tracked-search emails
  • Google Analytics, our analytics service provider, which collects and processes usage data including page views, device information, and IP addresses
  • Data partners and flight information Providers to retrieve current flight data
  • Professional advisors, auditors, and insurers
  • Authorities, regulators, and others where required by law or to protect rights, safety, and security
  • Successors in the event of a merger, acquisition, or asset transfer

We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

6. International Transfers

If you access the Service from outside the country where our servers are located (currently, the United States), your information may be transferred to, stored, and processed in the United States and other countries with different data protection laws. For example, Google Analytics data may be transferred to Google's servers located in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum/IDTA and Swiss equivalents) and implement additional measures as needed.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data. For example, account records, saved trips, tracked-search records, and search-history records may be retained while your account remains active and for a reasonable period afterward. Search and operational logs may be retained for up to 24 months unless a longer period is required for security, fraud prevention, or legal reasons. Information stored in your browser remains on your device until it expires, is replaced, you withdraw consent where applicable, or you clear it.

8. Your Privacy Rights

8.1 GDPR/UK GDPR (EEA/UK Residents)

You may have the right to request access, correction, deletion, restriction, or portability of your personal information, and to object to certain processing (including processing based on legitimate interests). Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. You also have the right to lodge a complaint with your local supervisory authority.

8.2 U.S. State Privacy Rights (e.g., CA, CO, CT, VA, UT)

Subject to verification, you may have the right to request: (i) access to and portability of personal information, (ii) deletion, (iii) correction, and (iv) information about our data practices. You may also have the right to opt out of processing for targeted advertising, sale, or certain profiling. We do not sell personal information or process it for targeted advertising. If you believe otherwise, contact us at contact@aviunion.com. If we deny your request, you may have a right to appeal; instructions will be provided in our response.

8.3 Exercising Your Rights

To exercise your rights, contact us at contact@aviunion.com. We may request information to verify your identity and residency. You may authorize an agent to submit requests where permitted by law, provided we can verify the agent and your authorization.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the Service. These technologies may include browser storage such as localStorage and sessionStorage.

9.1 Types of Cookies

  • Essential cookies and storage (required for core functionality, security, consent state, and active-search/session continuity)
  • Functional or preference storage (to remember settings such as form entries, selected tool state, time-format preferences, and dismissed in-app update notices when permitted)
  • Analytics cookies and analytics storage (e.g., Google Analytics) - used to understand how visitors interact with the Service, including page views, device information, and usage patterns

9.2 Your Choices

We use Google Analytics to improve service quality and understand usage patterns. Google Analytics collects information such as page views, device information, IP addresses, and usage patterns.

We also use browser storage to support core product behavior, which may include preserving active search state, restoring calendar or multi-origin form context, saving cookie preferences, and remembering whether product-update walkthroughs have already been dismissed on your device.

For users in the EU/EEA/UK: We request your consent before setting analytics cookies. If you do not consent, we use Google Consent Mode to send cookieless, aggregated measurements that do not identify you individually. You can manage your analytics preferences via our cookie banner.

For users in the United States: Analytics is enabled by default under our legitimate interests for service improvement. You can manage cookies through your browser settings. Functional browser-storage choices are applied on-device through our cookie settings experience.

You can learn more about Google's privacy practices at https://policies.google.com/privacy.

10. Security

We employ administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and security monitoring. However, no system is fully secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to children under 13 in the United States or under 16 in the EEA/UK. We do not knowingly collect personal information from such children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

12. Third-Party Websites and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Your interactions with Providers (e.g., airlines and travel agencies) are governed by their terms and privacy policies.

13. Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects without human involvement. If this changes, we will provide required notices and rights.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on the Service and become effective when posted unless stated otherwise. We will update the "Last Updated" date at the top of this Policy. Your continued use of the Service after the effective date constitutes acceptance of the changes.

15. Contact Us

If you have questions about this Policy or our data practices, contact us at:

  • Email: contact@aviunion.com