Privacy Policy

Who we are

Cabin Crawler is operated by Lycaon Media Pty Limited (ABN 22 671 975 983) of Level 1, 1.01, 222 Pitt Street, Sydney NSW 2000, Australia. For any privacy questions or requests, you can reach us at privacy@cabincrawler.ai.

What information we collect

We aim to collect only what we need to help you plan award redemptions.

• Account information. When you register, we collect your email address and authentication details (such as a hashed password or details from a third-party sign-in provider). You may optionally provide a display name.
• Loyalty programs and point balances. Cabin Crawler lets you record the frequent-flyer and transferable-points programs you belong to, along with your point or mile balances — entered manually, or retrieved on your behalf if you connect a program through the credential vault (below). We use this to estimate what redemptions you can afford and how best to fund a booking.
• Saved award alerts and preferences. We store the award searches, routes, cabins and alert criteria you save so we can monitor availability and notify you.
• Usage and device data. Like most web apps, we collect basic technical and analytics data — such as pages viewed, features used, approximate location derived from IP address, browser and device type, and timestamps — to operate, secure and improve the service.
• Communications. If you contact us for support, we keep a record of that correspondence.
• Loyalty-program credentials (optional credential vault). If you choose to connect a loyalty program, we store the login credentials you provide so Cabin Crawler can sync that program’s balance on your behalf. Stored credentials are encrypted at rest (AES-256-GCM), access-controlled, never shown back in the interface after you save them, and used solely to retrieve balances — never to make bookings or changes to your loyalty account. Disconnecting a program deletes the stored credentials. This feature is entirely opt-in: you can use Cabin Crawler fully with manually-entered balances instead.

We never collect or store your payment-card details. Paid subscriptions are processed by Stripe on Stripe-hosted payment pages (see Third parties and sub-processors below); we receive only limited billing information such as your subscription plan, status and renewal date.

How we use your information

We use your information to:

• create and manage your account and authenticate you;
• search award availability and estimate points cost, taxes and fees, cash value (cents-per-point) and the best way to fund a booking;
• save and run your award alerts and notify you when relevant availability appears;
• provide customer support and respond to your enquiries;
• operate, secure, debug and improve Cabin Crawler, including analytics on how features are used;
• send you service-related and (where you have opted in) alert and product emails; and
• comply with our legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not share your loyalty balances or alerts with airlines, banks or loyalty programs.

Storage and security

Your data is hosted on managed, reputable cloud infrastructure. We use technical and organisational measures appropriate to the sensitivity of the data, including:

• encryption of data in transit (HTTPS/TLS);
• encryption at rest for sensitive data — including strong encryption (AES-256-GCM) of any loyalty-program credentials stored in the credential vault, with strict access controls;
• hashed passwords and access controls limiting who can view your data; and
• regular review of our security practices.

No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.

Third parties and sub-processors

We rely on a small number of trusted service providers to run Cabin Crawler. Each is bound to handle data consistently with this policy and applicable law:

• Vercel (application hosting) and Supabase (database and authentication);
• Resend, our email delivery provider, to send service, alert and account emails;
• Stripe, our payment processor, to handle paid subscriptions — your card details go to Stripe directly and never touch our servers;
• Award-availability data providers (such as seats.aero) — your search criteria (routes, dates, cabins) are sent to retrieve availability, never your identity or loyalty credentials; and
• Error-monitoring and analytics providers, to detect faults and understand usage so we can improve the service.

Some of these providers may store or process data outside Australia. Where that happens, we take reasonable steps to ensure your information is handled consistently with the APPs. We may also disclose information where required by law, or to protect the rights, safety and security of Cabin Crawler and its users.

Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences and measure usage so we can improve the product. You can control cookies through your browser settings, though disabling some cookies may affect how Cabin Crawler works. We do not use cookies to build advertising profiles or to sell your data.

Data retention

We keep your personal information for as long as your account is active and as long as needed to provide the service. If you close your account or ask us to delete your data, we will delete or de-identify it within a reasonable period, except where we are required to retain certain records to meet legal, accounting or security obligations. Aggregated or de-identified data that cannot reasonably identify you may be retained.

Your rights under the Australian Privacy Act

Under the Privacy Act 1988 (Cth) and the APPs, you have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate, out of date or incomplete;
• Request deletion of your information, subject to our legal retention obligations; and
• Withdraw consent or opt out of marketing communications at any time.

To make a request, email privacy@cabincrawler.ai. We will respond within a reasonable time, normally within 30 days. If you are not satisfied with how we handle a privacy concern, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

Cabin Crawler is intended for adults. It is not directed at, and we do not knowingly collect personal information from, anyone under 18 years of age. If you believe a minor has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time as Cabin Crawler evolves. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or in-app. Your continued use of Cabin Crawler after changes take effect means you accept the updated policy.

Contact us

Questions, requests or complaints about privacy can be sent to privacy@cabincrawler.ai.