Privacy Policy

Version 1.1 · Effective May 2, 2026 · Last updated September 30, 2026

This Privacy Policy explains how Deal Wings LLC, a Utah limited liability company(“Deal Wings,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information of users of dealwings.co, our email and other notification services, and any related products or services (collectively, the “Service”).

U.S. residents only. The Service is offered solely to residents of the United States. We do not knowingly accept users located in the European Economic Area, the United Kingdom, Switzerland, or any other jurisdiction outside the United States. This Policy is not intended to satisfy the GDPR, UK GDPR, or any other non-U.S. data-protection regime.

1. Categories of Personal Information We Collect

We use the personal-information categories defined under the California Consumer Privacy Act, as amended (the “CCPA/CPRA”). We have collected the following categories within the past twelve (12) months:

  • Identifiers: including name, email address, account identifier, IP address, and device identifiers.
  • Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) : including name and contact information.
  • Commercial information: including subscription tier, transaction records, and tokenized references to payment instruments held by our payment processor (we do not collect or store full payment-card numbers).
  • Internet or other electronic network activity information: including pages viewed, deal cards clicked, email opens and clicks (where supported by your mail client), browser and device characteristics, and referring URLs.
  • Geolocation information: coarse country-level geolocation derived from IP address for security and eligibility verification, and the home airport(s) you select.
  • Inferences: including inferences drawn from the categories above to identify which destinations or deals are most likely to be relevant to you.

We do notknowingly collect “sensitive personal information” (as defined under the CCPA/CPRA) and we do not collect personal information from individuals under 18.

2. Sources of Personal Information

We collect personal information directly from you when you create an account, configure preferences, contact support, or otherwise interact with the Service. We also collect information automatically when you use the Service through cookies, pixels, and similar technologies (see our Cookie Policy), and we receive information from service providers acting on our behalf, such as our payment processor and email-delivery provider.

If you sign in with Google.When you choose “Continue with Google,” Google tells us your name, your email address, whether Google has verified that address, and the web address of your Google profile photo. We do not ask for, and do not receive, your contacts, calendar, email, or files. We use your first name and your email address to create and run your account. We do not use your profile photo and do not copy it into our account records, although our authentication provider keeps the full set of details Google sends with your sign-in record until your account is deleted. Google also learns that you signed in to Deal Wings, under Google’s own privacy policy. You can stop Deal Wings from using your Google sign-in at any time in the security settings of your Google Account. That does not delete your Deal Wings account, which you can delete from your account settings.

3. How We Use Personal Information

We use personal information for the following business purposes:

  • To provide, operate, maintain, and improve the Service, including delivering deal alerts and other communications you have subscribed to.
  • To process subscriptions, payments, refunds (if any), and other transactions through our payment processor.
  • To authenticate users, prevent and detect fraud or abuse, and enforce our Terms.
  • To respond to inquiries, requests, and support tickets you send us.
  • To send you transactional messages (e.g., password resets, email confirmations, billing notices) and, with your consent where required, marketing or promotional messages from which you can unsubscribe at any time.
  • To analyze usage patterns and improve the design, content, and performance of the Service.
  • To comply with applicable laws, regulations, court orders, and lawful requests from public authorities.

4. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, functionality, and analytics. For details about the types of cookies we set, see our Cookie Policy. You can control cookies through your browser settings; doing so may affect the availability or functionality of the Service.

5. How We Share Personal Information

We do not sell personal information for monetary consideration, and we do not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

We may share personal information in the following circumstances:

  • Service providers. We share personal information with third-party service providers acting on our behalf and bound by written contract to use the information only to perform the services we have engaged them for. Categories include hosting, database and authentication, email delivery, payment processing (currently Stripe, Inc.), analytics, error monitoring, and customer support.
  • Sign-in provider. If you choose to sign in with Google, we exchange information with Google LLC as described in Section 2. We send Google nothing about you beyond the sign-in request itself.
  • Legal compliance. We may disclose personal information when we believe in good faith that disclosure is required by law, by valid legal process, or to protect the rights, property, or safety of Deal Wings LLC, our users, or others.
  • Corporate transactions. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, personal information may be transferred or shared as part of that transaction.
  • With your direction. We may share personal information with your consent or at your direction (for example, when you use a referral feature).

6. Data Retention

We retain personal information for as long as is reasonably necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information and the purpose for which it was collected. When personal information is no longer needed, we will delete or de-identify it in accordance with our internal procedures. If you delete your account from your account settings, we remove your profile, your preferences, and your sign-in record, including any details Google sent us, and we cancel any subscription.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no system is impenetrable. We cannot guarantee the absolute security of any information you transmit to us or that we store on our systems, and you provide such information at your own risk.

8. Children

The Service is not directed to and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will delete it. Parents or guardians who believe a minor has provided personal information may contact us at hello@dealwings.co.

9. Your U.S. State Privacy Rights

Residents of certain U.S. states have specific rights regarding their personal information. Depending on your state of residence and subject to applicable exceptions, you may have the right to:

  • Know / access. Request to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
  • Delete. Request that we delete personal information we have collected from you, subject to applicable exceptions.
  • Correct. Request that we correct inaccurate personal information about you.
  • Portability. Receive a copy of personal information you have provided to us in a portable, readily usable format.
  • Opt-out. Opt out of the sale or sharing of personal information for cross-context behavioral advertising (as noted in Section 5, we do not engage in either).
  • Limit use of sensitive personal information. We do not knowingly collect sensitive personal information.
  • Non-discrimination. Not be discriminated against for exercising any of these rights.
  • Appeal. Where required by your state of residence, appeal a denial of a privacy-rights request.

These rights are made available to residents of any U.S. state whose law affords them, including but not limited to California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

To exercise any of these rights, email us at hello@dealwings.co with the subject line “Privacy Request” and a description of your request. We will verify your request by matching the information you provide against the information associated with your account; we may ask you to confirm your request by clicking a link sent to your account email. You may also use an authorized agent to submit a request on your behalf, provided we can verify the agent’s authority. We will respond within the time period required by your state of residence.

California residents may also request information about our compliance with California “Shine the Light” law (Cal. Civ. Code § 1798.83) regarding disclosure of personal information to third parties for direct marketing. We do not share personal information for third-party direct-marketing purposes.

10. “Do Not Sell or Share My Personal Information”

We do not sell your personal information for monetary consideration, and we do not share your personal information for cross-context behavioral advertising. If our practices change in the future, we will update this Policy and provide an opt-out mechanism at this section.

11. Other U.S. State-Specific Disclosures

Texas, Oregon, and other state-specific notices: Where required by your state of residence, this Policy and the rights described in Section 9 are intended to satisfy that state’s required disclosures, including the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and other comparable state statutes.

Notice of financial incentive (CCPA/CPRA § 1798.125). We do not offer any financial incentive in exchange for the collection, sale, or deletion of personal information.

The Service contains links to third-party websites and services that are not operated by us. This Policy does not apply to any third-party site or service. We encourage you to review the privacy policies of any third party before providing personal information to it.

13. Do-Not-Track Signals

Some browsers offer a “Do Not Track” setting. Because there is no industry consensus on how to interpret these signals, we do not currently respond to them. We may revisit this position as standards evolve.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice by email, in-product notification, or by posting the updated Policy with a new “Last Updated” date. Your continued use of the Service after the effective date of any change constitutes acceptance of the modified Policy.

15. Contact Us

Questions or concerns about this Policy or our privacy practices? Contact us at hello@dealwings.co.