Privacy Policy

1. Information We Collect

We collect several types of information in connection with our services:

Personal Information

When you book a consultation with FlyCalm, we collect information you provide directly, including your full name, email address, phone number, and any additional details you share about your fear of flying or travel plans. This information is collected through our booking system powered by Acuity Scheduling.

Payment Information

When you make a payment for a consultation, your payment card details are collected and processed directly by Stripe, our third-party payment processor. We do not receive, store, or have access to your full credit card number, CVV, or other sensitive payment card data. We receive only a confirmation of payment, the last four digits of your card, and the card brand for record-keeping purposes.

Scheduling Information

Through Acuity Scheduling, we collect your appointment preferences, selected session type (SkyEase Pre-Flight Brief, SkyCalm Session, or FlyCalm Experience), preferred dates and times, timezone, and any notes you include when booking.

Usage Data

We automatically collect certain information when you visit our website, including your IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and other diagnostic data. This information is collected through Google Analytics 4 and server logs provided by our hosting provider, Vercel.

Flight Briefing Data

If you use our flight briefing tool, we collect flight numbers and route information that you provide. This data is used solely to generate your personalized flight briefing and is not linked to your personal identity.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To schedule and conduct your consultation sessions via Zoom or in person
• To process payments securely through Stripe
• To send appointment confirmations, reminders, and follow-up communications
• To respond to your inquiries and provide customer support
• To generate personalized flight briefings using anonymized flight data
• To analyze website usage patterns and improve our services and user experience
• To comply with legal obligations and enforce our terms of service
• To detect, prevent, and address fraud or technical issues

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We will never share your information with third parties except as described in this Privacy Policy.

3. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data.

Google Analytics 4 Cookies

We use Google Analytics 4 (Measurement ID: G-JZGTMYQQN8) to understand how visitors interact with our website. Google Analytics sets cookies such as _ga and _ga_* to distinguish unique users and throttle request rates. These cookies collect information about your browsing behavior in an anonymized form, including pages visited, session duration, and traffic sources. Google Analytics data is processed by Google LLC in accordance with their privacy policy.

Functional Cookies

We may use functional cookies that are strictly necessary for the operation of our website, such as maintaining your booking session state and remembering your preferences as you navigate through the booking process. These cookies do not track you across other websites.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling cookies may affect the functionality of certain features on our website, including the booking process.

4. Third-Party Services

We rely on trusted third-party service providers to deliver our services. Each provider has access only to the information necessary to perform their specific function:

• Stripe -- Payment processing. Stripe collects and processes your payment card information, billing address, and transaction details. Stripe is PCI DSS Level 1 certified, the highest level of security certification in the payments industry. For more information, see Stripe's Privacy Policy.
• Acuity Scheduling -- Appointment booking and management. Acuity collects your name, email address, phone number, appointment preferences, and any custom intake form responses you provide during booking. See Squarespace's Privacy Policy (Acuity is a Squarespace company).
• Google Analytics 4 -- Website analytics and usage tracking. Google collects anonymized browsing data including page views, session duration, device information, and geographic region. See Google's Privacy Policy.
• Zoom -- Video consultations for our SkyEase and SkyCalm sessions. When you join a Zoom meeting, Zoom collects your display name, device information, and IP address. Audio and video from sessions are not recorded unless you are explicitly informed and consent is obtained. See Zoom's Privacy Policy.
• Vercel -- Website hosting and serverless function execution. Vercel processes server logs that may include IP addresses, request timestamps, and user agent strings. See Vercel's Privacy Policy.
• OpenAI -- AI-generated flight briefings. When you request a flight briefing, we send flight route data (such as departure and arrival airports and flight number) to OpenAI for processing. No personal information such as your name, email, or payment details is sent to OpenAI.

5. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it. All data transmitted between your browser and our servers is encrypted using HTTPS (TLS/SSL). Payment processing is handled entirely by Stripe, which maintains PCI DSS Level 1 compliance, ensuring your payment card information is handled to the highest security standards. We do not store full credit card numbers, CVV codes, or other sensitive payment card data on our servers at any time.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we continuously review and update our security practices to maintain strong protections for your data.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:

• Booking and appointment data is retained in Acuity Scheduling for up to 3 years after your last appointment to facilitate rebooking and maintain session history.
• Payment records are retained by Stripe in accordance with financial record-keeping requirements and applicable tax laws, typically for a minimum of 7 years.
• Website analytics data collected through Google Analytics is retained for 14 months from the date of collection, after which it is automatically deleted.
• Flight briefing data is processed in real time and is not stored after the briefing is generated.
• Email correspondence is retained for as long as necessary to resolve your inquiry or provide ongoing support.

You may request deletion of your data at any time by contacting us at hello@calm.flights. We will process your request within 30 days, subject to any legal obligations that require us to retain certain records.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Analytics: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser cookie settings.

To exercise any of these rights, please contact us at hello@calm.flights. We will respond to your request within 30 days.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions allowed by law.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• No Sale of Personal Information: We do not sell your personal information to third parties, and we have never sold personal information. We also do not share personal information for cross-context behavioral advertising purposes.

To submit a CCPA/CPRA request, please email us at hello@calm.flights. We will verify your identity before processing your request and respond within 45 days as required by law.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at hello@calm.flights and we will take steps to delete such information from our systems promptly.

10. International Data Transfers

FlyCalm is based in New York, United States. If you are accessing our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our third-party service providers operate. Data protection laws in these jurisdictions may differ from the laws in your country of residence. By using our services, you consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy. We take reasonable steps to ensure that your data is treated securely and in accordance with this policy regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this policy constitutes your acceptance of the updated terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

FlyCalm
Email: hello@calm.flights

We will do our best to respond to all inquiries within 30 days.