We collect your email address and airport preferences to send flight deal alerts. We do not sell, rent, or trade your information. Paid subscribers' billing data is handled by our payment processor — we never see your full card number. You can unsubscribe or request deletion at any time.
1. Who we are
JetSnag ("JetSnag," "we," "us," "our") is a flight deal alert newsletter and subscription service operated from the United States. We monitor airfares departing from Pocatello Regional Airport (PIH), Idaho Falls Regional Airport (IDA), Friedman Memorial Airport / Sun Valley (SUN), St. George Regional Airport (SGU), and Jackson Hole Airport (JAC), and we deliver curated flight deal alerts to our subscribers.
Our primary privacy contact is deals@jetsnag.com.
2. Information we collect
2.1 Information you provide directly
- Email address. Required to deliver deal alerts and transactional communications.
- Airport preferences. Which of the five covered airports you want to receive deals from. Optional — if unspecified, you may receive deals from all covered airports.
- Subscription tier. Whether you are a Scout (free), Pro, or First Class subscriber and the selected billing cycle.
- Payment information (paid tiers only). Our third-party payment processor collects your cardholder name, card number, expiration date, CVV, and billing address. We receive only a tokenized payment reference and the last four digits of your card. We never have access to your full card number or CVV.
- Support correspondence. Any messages you send to deals@jetsnag.com are retained to allow us to respond and improve our service.
2.2 Information collected automatically
- Email engagement data. Our email service provider records delivery status, opens, clicks, bounces, and unsubscribes. This helps us remove invalid addresses and understand which deals are most useful to subscribers.
- Website access logs. Our hosting provider collects anonymized logs including IP address, browser type, operating system, referring URL, pages visited, and timestamps for security and performance purposes.
- Form submission metadata. Formspree, which processes our signup forms, logs submission timestamps and IP addresses for spam and fraud prevention.
2.3 Information we do not collect
We do not collect your full name, telephone number, date of birth, government-issued identification, passport or travel document details, precise geolocation, travel history, health data, or any other sensitive personal information beyond what is expressly described above.
3. How we use your information
We use the information we collect solely for the following purposes:
- Service delivery. Sending flight deal alerts appropriate to your tier, billing cycle, and airport preferences.
- Transactional communications. Welcome emails, subscription confirmations, billing receipts, renewal reminders, and service-related notices.
- Billing and account management. Processing payments, managing subscription upgrades, downgrades, renewals, pauses, and cancellations.
- Service improvement. Analyzing aggregate and anonymized engagement data to determine which deal types are most valuable and to improve editorial quality.
- Fraud prevention and security. Detecting and preventing spam signups, abusive use, and unauthorized access attempts.
- Legal and compliance. Maintaining records required by applicable law; responding to lawful legal process; enforcing our Terms of Service.
- Customer support. Responding to inquiries, resolving billing disputes, and troubleshooting delivery issues.
We do not use your personal information for behavioral advertising. We do not build or sell subscriber profiles. We do not use subscriber data to train artificial intelligence or machine learning models.
4. Legal basis for processing (where required)
For users in jurisdictions that require an identified legal basis for each processing activity:
- Consent. By submitting the signup form you consent to receiving JetSnag emails. You may withdraw this consent at any time by unsubscribing.
- Contract performance. Processing your email address and payment information is necessary to provide the paid subscription service you have purchased.
- Legitimate interests. We process server logs and email engagement signals on the basis of our legitimate interest in maintaining a secure, functional, and improving service, where those interests are not overridden by your privacy rights.
- Legal obligation. We retain billing records and may disclose information to comply with applicable tax, financial, and legal requirements.
5. How we share your information
We do not sell, rent, exchange, or otherwise transfer your personal information to any third party for their own marketing or commercial purposes. We share data only with the service providers listed below, strictly to the extent needed to operate JetSnag:
Formspree — receives and stores signup form submissions (email address, airport preferences, selected plan) on our behalf. Formspree Privacy Policy →
Twilio SendGrid — delivers all transactional and marketing emails on our behalf and records email engagement data. SendGrid / Twilio Privacy Policy →
Netlify — hosts the JetSnag website and processes anonymized access logs. Netlify Privacy Policy →
Payment processor (to be named at launch). Processes credit and debit card transactions for Pro and First Class subscriptions under PCI-DSS Level 1 compliance. This section will be updated with the processor's name and privacy policy link before paid tiers launch.
We may also disclose personal information: (a) when required by law, court order, regulatory authority, or valid legal process; (b) to protect the rights, property, or safety of JetSnag, our subscribers, or others; or (c) in connection with a corporate transaction such as a merger, acquisition, reorganization, or sale of assets — in which case we will notify affected subscribers at least 30 days before their data transfers to a new controller.
6. Email communications & CAN-SPAM compliance
All commercial email sent by JetSnag complies with the federal CAN-SPAM Act of 2003. Specifically:
- The "From" name and address in every email accurately identifies JetSnag as the sender.
- Subject lines accurately reflect the content of each email and are never deceptive.
- Every commercial email includes our physical mailing address or a registered P.O. Box.
- Every commercial email includes a clear, functional, one-click mechanism to opt out of future commercial emails.
- Unsubscribe requests are honored within 10 business days of receipt (typically within minutes via automated processing).
- We do not harvest email addresses, purchase mailing lists, or send to addresses obtained without consent.
Subscribers may opt out of marketing emails at any time by: (a) clicking the unsubscribe link in any JetSnag email; or (b) emailing deals@jetsnag.com with "Unsubscribe" in the subject line. Please note that transactional emails — including billing receipts, account notices, and responses to your direct inquiries — are not subject to marketing opt-out and will continue while your account remains active.
Where applicable, our email practices are also designed to comply with Canada's Anti-Spam Legislation (CASL).
7. Cookies and tracking technologies
JetSnag uses a minimal set of cookies and similar technologies on its website:
- Strictly necessary cookies. Security and session tokens required for the site to function correctly, set by our hosting infrastructure. These cannot be disabled without impairing site functionality.
- Server-side analytics. We analyze anonymized server access logs to measure aggregate page traffic. We do not use Google Analytics, Meta Pixel, or any third-party JavaScript-based behavioral tracking.
- Email open tracking. HTML emails sent by JetSnag may include a small transparent tracking pixel embedded by our email service provider to record whether and when an email was opened. You may prevent this by configuring your email client to block remote image loading.
We do not serve or participate in retargeted advertising. No advertising networks, data brokers, or social media platforms place tracking cookies on the JetSnag website.
8. Data retention
- Active subscribers. Email address, preferences, tier, and engagement data are retained for as long as you maintain an active free or paid subscription.
- Unsubscribed addresses. We retain a suppression record — the email address only, no other preferences — to prevent accidental re-subscription. You may request deletion of the suppression record, but we cannot then guarantee you will not receive emails again if the address is submitted via the signup form in the future.
- Paid subscription billing records. Transaction history, subscription dates, amounts, and tokenized payment references are retained for a minimum of seven (7) years to meet applicable tax and financial recordkeeping requirements, even after account cancellation.
- Support correspondence. Emails exchanged with deals@jetsnag.com are retained for two (2) years from the date of the last message in a thread.
- Server access logs. Retained for 90 days and then automatically purged.
9. Your rights
You may exercise any of the following rights at any time by contacting us at deals@jetsnag.com:
- Right of access. Request a copy of the personal data we hold about you.
- Right to rectification. Ask us to correct inaccurate or incomplete personal data.
- Right to erasure. Request deletion of your personal data, subject to the retention obligations described in Section 8.
- Right to data portability. Request your data in a structured, machine-readable format (CSV or JSON).
- Right to restriction of processing. Ask us to pause processing while a correction or deletion request is under review.
- Right to object. Object to processing carried out on the basis of legitimate interests.
- Right to withdraw consent. Withdraw consent to marketing emails at any time without affecting the lawfulness of prior processing.
We will respond to all verifiable requests within 30 days. We may ask you to confirm your identity — typically by verifying access to the email address associated with your account — before acting on a request.
10. California residents — CCPA / CPRA
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following additional rights:
- Right to know. You may request disclosure of: (a) the categories of personal information we have collected about you in the past 12 months; (b) the categories of sources; (c) the business or commercial purpose for collection; and (d) the categories of third parties with whom we share it.
- Right to delete. You may request deletion of personal information we have collected about you, subject to certain legal exceptions.
- Right to correct. You may request correction of inaccurate personal information we maintain about you.
- Right to opt out of sale or sharing. JetSnag does not sell personal information and does not share personal information for cross-context behavioral advertising purposes. No opt-out action is required, but you may contact us to confirm.
- Right to limit use of sensitive personal information. We do not collect or process sensitive personal information as defined under the CPRA.
- Right to non-discrimination. We will not discriminate against you — including by denying services, charging different prices, or providing a lower quality of service — for exercising any rights under the CCPA/CPRA.
To exercise your California privacy rights, email deals@jetsnag.com with the subject line "California Privacy Request." We will respond within 45 calendar days, with one possible 45-day extension where reasonably necessary.
11. EEA and UK residents — GDPR / UK GDPR
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the rights described in Section 9 under the General Data Protection Regulation (GDPR) or the UK GDPR, as applicable. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence or the country where an alleged infringement occurred.
JetSnag is primarily intended for subscribers in the United States. If you access or use the service from the EEA or UK, your personal data will be transferred to and processed in the United States, which may not provide the same level of legal protection as your home jurisdiction. We will implement appropriate safeguards for international transfers to the extent required, including Standard Contractual Clauses where applicable under GDPR Article 46.
We do not currently maintain a formal EU or UK representative. If applicable law requires appointment of a representative, we will designate one and update this policy accordingly.
12. Children's privacy
JetSnag is directed exclusively to adults and is not intended for individuals under the age of 13, or under the applicable minimum age in their jurisdiction. We do not knowingly collect personal information from children. If you have reason to believe a child has provided personal information to us, please contact us immediately at deals@jetsnag.com and we will promptly investigate and delete the information.
13. Third-party links
Deal alert emails and the JetSnag website contain links to third-party airline websites, online travel agencies, and other booking platforms. When you click a link and leave the JetSnag environment, your activity is governed by that third party's own privacy policy — not this one. JetSnag has no control over and bears no responsibility for the privacy practices of any third-party site. We encourage you to review the applicable privacy policy before submitting personal information on any external site.
14. Data security
We implement commercially reasonable technical and organizational security measures to protect your personal information against unauthorized access, use, disclosure, alteration, and destruction. Our security measures include:
- HTTPS/TLS encryption for all data in transit between your browser and our website.
- Access controls and role-based permissions restricting who can access subscriber data.
- Use of reputable, security-audited third-party vendors (Formspree, SendGrid, Netlify, and our payment processor) who maintain their own security programs.
- PCI-DSS compliant handling of all payment card data through our payment processor.
No security program is completely impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected subscribers and applicable regulatory authorities as required by applicable law.
15. International data transfers
JetSnag is operated from the United States, and our service providers process data in the United States and potentially other jurisdictions. If you are accessing JetSnag from outside the United States, your personal information will be transferred to, stored, and processed in the United States. By signing up for JetSnag you acknowledge this international transfer. Where legally required, we will implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
16. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or other operational factors. When we make a material change, we will update the "Last updated" date at the top of this page. For significant changes — including changes that expand our use of personal information — we will provide active subscribers with at least 14 days' advance notice by email before the change takes effect. Your continued use of JetSnag after the effective date constitutes acceptance of the revised policy.
We encourage you to revisit this page periodically. Prior versions are available upon request.
17. Contact
All privacy questions, requests, and complaints should be directed to:
JetSnag — Privacy
Email: deals@jetsnag.com
Subject line: "Privacy Request"
Response time: 30 days from receipt of a verifiable request
If you are in the EEA or UK and are not satisfied with our response, you have the right to escalate your complaint to your national data protection supervisory authority.
Note for JetSnag legal review: This policy addresses current operations (Scout free tier + waitlist for Pro/First Class). Before paid tiers launch, update Section 5 with the specific payment processor name and privacy policy link, and ensure a Data Processing Agreement (DPA) is in place with that processor. If subscriber base grows to include meaningful EU/UK users, consider appointing an EU representative under GDPR Article 27 and executing DPAs with Formspree, SendGrid, and Netlify. Physical mailing address must be added to Section 6 before the first commercial email send to comply with CAN-SPAM. Review by attorney recommended before publishing. Last reviewed: [attorney name, date].