Effective September 28, 2026
Window>Seats ("we," "our," "the app") helps you find flights — using cash or award points — during the times your calendar shows you're free. This page explains what information we collect, why, and how it's handled.
Account information. When you create an account, we collect your email address and a password. Your password is never stored in plain text — only a one-way cryptographic hash of it.
Calendar availability. If you connect Apple Calendar or Google Calendar, the app reads your events on your device to compute which dates you're free. Only the resulting free/busy date ranges are sent to our servers to run your search — we never see or store your event titles, locations, attendees, or notes.
Search activity. We store the flight searches and alerts you create (airports, dates, cabin class) so you can view past results and manage saved alerts.
Third-party service connections. If you connect a seats.aero account (via seats.aero's own login) or paste a personal API key, we store the resulting access token or key so the app can search on your behalf. We never see your seats.aero password — authentication happens directly on seats.aero's own page.
We use the information above solely to operate the app: authenticating your account, running the flight searches you request, constraining results to your free dates, sending you account-related emails (verification, password reset, and price alerts you've configured), and letting you review your own search and alert history.
To provide search results and deliver email, we send the minimum data necessary to: seats.aero (award flight availability), Amadeus and SerpAPI (cash fare pricing), and Postmark (transactional email delivery). These providers act on our behalf to operate the app and don't receive your calendar data or password. We do not sell your information, and we do not use it for advertising or cross-app tracking.
We retain your account information for as long as your account is active. To request deletion of your account and associated data, email us at the address below — we'll process the request promptly.
Window>Seats is not directed at children under 13, and we do not knowingly collect information from children under 13.
We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and hashed password storage. No method of transmission or storage is 100% secure, but we work to protect your data appropriately.
If this policy changes, we'll update the effective date above. Continued use of the app after changes means you accept the updated policy.
Questions or requests about your data: admin@window-seats.travel