Privacy Policy
Last updated: August 14, 2026
Summary
At Attention Keeper, we are committed to protecting your privacy and handling your personal information with care and transparency. We collect personal information necessary to provide our CRM and booking services, including your contact details, travel preferences, payment information, and booking history. This data is used to process your reservations, communicate with you about your bookings, improve our services, and comply with legal obligations. We may share your information with airlines, travel partners, and service providers who help us deliver our services, but we never sell your personal data to third parties. You have important rights under data protection laws, including the right to access, correct, delete, or restrict the processing of your personal information. We implement robust security measures to protect your data and will notify you promptly in the event of a data breach. This comprehensive policy explains our data practices in detail, including how we handle cookies, international data transfers, and children's privacy.
Table of Contents
- Introduction
- Data Controller Information
- Collection of Your Information
- Use of Your Information
- Disclosure of Your Information
- International Data Transfers
- Data Retention
- Your Rights
- Children's Privacy
- Security of Your Information
- Data Breach Notification
- Cookie Policy and Tracking Technologies
- User Content and Third-Party Information
- Changes to this Privacy Policy
- Contact Us
1. Introduction
At Attention Keeper ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and flight booking services.
We are committed to protecting your personal data and complying with data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
2. Data Controller Information
Attention Keeper is the data controller responsible for your personal data. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us at:
Email: privacy@attentionkeeper.com
Address: 9 East Lookerman St, Dover, DE 19901, United States
3. Collection of Your Information
We may collect information about you in a variety of ways. The information we may collect includes:
Personal Data
Personally identifiable information that you voluntarily give to us when you register with the website or when you choose to participate in various activities related to the website, such as:
- Basic identifiers and contact information (name, email address, phone number, postal address)
- Account information (username, password)
- Travel details (flight preferences, booking history, travel itineraries)
- Payment information (credit card details, billing address)
Sensitive Personal Information
To facilitate flight bookings, we may collect sensitive personal information, including:
- Passport numbers or other government-issued ID details
- Date of birth
- Nationality
This sensitive information is collected only for legitimate travel purposes, such as transmitting to airlines or verifying traveler identity. We handle this data with extra security measures and only use it for the specific purpose for which it was collected.
Derivative Data
Information our servers automatically collect when you access the website, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the website.
Financial Data
Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the website.
4. Use of Your Information
We process your personal data for the following purposes, based on these legal grounds:
- Contractual Necessity: To fulfill our contractual obligations to you, including processing your bookings, managing your account, and providing customer support.
- Legitimate Interests: To improve our services, analyze usage patterns, and ensure the security of our platform.
- Legal Obligation: To comply with legal requirements, such as maintaining business records for tax purposes or responding to court orders.
- Consent: To send marketing communications or process certain types of sensitive data, where we have obtained your explicit consent.
Specifically, we may use information collected about you via the website to:
- Create and manage your account.
- Process your payments and refunds.
- Complete and manage your flight bookings.
- Send you email newsletters (with your consent).
- Generate a personal profile about you to make future visits to the website more personalized.
- Monitor and analyze usage and trends to improve your experience with the website.
- Notify you of updates to the website and our mobile applications.
- Resolve disputes and troubleshoot problems.
- Prevent fraudulent transactions or activities.
5. Disclosure of Your Information
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
Third-Party Service Providers
We may share your information with third parties that perform services for us or on our behalf, including:
- Airlines and travel providers to complete your bookings
- Payment processing services
- Data analysis and hosting services
- Customer service providers
- Email delivery services
- Marketing assistance
These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
By Law or to Protect Rights
If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
Business Transfers
If we or our subsidiaries are involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.
6. International Data Transfers
Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.
Specifically, our servers are located in the United States (US East, N. Virginia), and our third-party service providers and partners operate globally. This means that when we collect your personal data, we may process it in any of these countries.
However, we have taken appropriate safeguards to ensure that your personal data will remain protected in accordance with this Privacy Policy. For transfers from the EEA to countries not deemed adequate by the European Commission, we use specific contractual clauses approved by the European Commission which provide adequate protection for personal data.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Specific retention periods:
- Account information and booking history: As long as your account is active, plus 30 days after account closure (to allow for backup recovery)
- Passport and ID details: Only for the duration needed to complete bookings and as required for compliance (such as airline regulations or fraud prevention), and deleted or anonymized after 30 days of account closure unless longer retention is legally required
- Payment information: 30 days after account closure. Note: Attention Keeper does not directly process payments; payment processing is handled by Stripe. Users who connect their own Stripe or PayPal accounts to charge their clients retain full control of that data through those third-party platforms.
8. Your Rights
Depending on your location, you may have the following rights:
- Right to access: You have the right to request copies of your personal data.
- Right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- Right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- Right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
California residents have additional rights:
- The right to know what personal information is collected
- The right to delete personal information
- The right to opt-out of the sale or sharing of personal information
- The right to non-discrimination when exercising CCPA rights
- The right to limit use and disclosure of sensitive personal information
To exercise any of these rights, please contact us at privacy@attentionkeeper.com. We may need to verify your identity before responding to your request.
9. Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.
For users in the European Union, where the age of consent may vary by country (13-16 years), we will only process personal data of minors with verifiable parental consent where required by law. If we become aware that we have collected personal data from a child without verification of parental consent, we take steps to remove that information from our servers.
If you are booking travel for a minor, you represent that you are the legal guardian or have obtained appropriate permission from the legal guardian.
10. Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
We implement specific measures to protect sensitive information, such as:
- Encryption in transit and at rest
- Access controls limiting who can view your data
- Regular security assessments
- Payment processing handled exclusively by PCI DSS-compliant third-party providers (Stripe). Attention Keeper does not store or directly process payment card data.
11. Data Breach Notification
In the event of a data breach that compromises your personal information, we will promptly notify you and the relevant authorities as required by law. This notification will include:
- The nature of the breach
- The types of data affected
- Steps we are taking to address the breach
- Recommendations for what you can do to protect yourself
- Contact information for questions
Under GDPR, we will notify the relevant supervisory authority within 72 hours of becoming aware of a breach where feasible. We will notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
13. User Content and Third-Party Information
If you provide personal information about others (such as when booking travel for someone else), you represent and warrant that you have their consent to provide this information to us. You agree to inform these individuals about the content of this Privacy Policy and how their personal data will be processed.
Any personal data you submit about a third party will be treated according to this Privacy Policy, with the same level of protection as your own data.
14. Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.
For significant changes that materially affect your rights or how we use your data, we will provide a more prominent notice (such as email notification). We encourage you to review this Privacy Policy periodically for any changes.
Your continued use of our Service after any modifications to the Privacy Policy constitutes your acknowledgment of the changes and your consent to abide and be bound by the modified Privacy Policy.
15. Contact Us
If you have questions or comments about this Privacy Policy, please contact us at:
Email: privacy@attentionkeeper.com