Privacy Policy

Last Updated: February 4, 2026

1 Introduction

Welcome to ExiTicket. We are committed to protecting your personal data and your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you use our service to book flight reservations.

By providing your information to us, you consent to the collection and use of your data as described in this policy.

2 Data We Collect

To facilitate flight reservations, we must collect specific personal information. This includes:

  • Passenger Identity: Full legal names, gender, and passenger type (Adult/Child/Infant).
  • Contact Information: Email addresses used for order delivery and customer support communications.
  • Transactional Data: Details of the services you purchased, transaction amounts, and payment status. We do NOT store full credit card details on our servers; these are handled by our secure payment processors.
  • Technical Data: IP addresses, browser types, and usage patterns to help us prevent fraud and improve our interface.

3 How We Use Your Data

Your data is processed based on the necessity to fulfill our contract with you. Primary uses include:

  • Generating valid Passenger Name Records (PNR) with airlines and GDS providers.
  • Delivering your reservation documents via email or our web viewer.
  • Providing customer support and handling flexibility requests.
  • Compliance with legal and regulatory requirements, including immigration and airline auditing standards.

4 Data Sharing and Third Parties

To provide our service, we must share your data with essential third-party partners. We do NOT sell your personal data to advertisers.

  • Global Distribution Systems (GDS): Our worldwide travel partners who facilitate live flight reservations.
  • Airlines: The specific carrier for your chosen route receives your name and gender to hold your seat.
  • Payment Processors: To verify and process your transaction securely.
  • Legal Authorities: If required by law or in good faith belief that such action is necessary to comply with legal obligations.

5 Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Typically, sensitive flight and passenger data is periodically purged from our "live" systems after 30 days of order completion to minimize data footprint.

6 Your Rights

Depending on your location (including rights under GDPR or CCPA where applicable), you may have the following rights regarding your data:

  • The right to access and receive a copy of your personal data.
  • The right to rectify inaccurate or incomplete information.
  • The right to request the erasure of your data once the service is complete.
  • The right to object to or restrict certain processing activities.

7 Security Measures

We implement industry-standard security measures, including SSL/TLS encryption for all data transmissions. Our internal systems are protected by robust firewalls and access controls to prevent unauthorized access, alteration, or disclosure of your information.

8 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on this page.

9 Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our data protection team at team@exi-ticket.com.