Legal
Privacy Policy
How we collect, use and protect your personal information
Last updated: October 28, 2026
fareSPY is operated by Zerano Inc., a company incorporated in Ontario, Canada. This policy applies to all fareSPY products and services at farespy.zerano.one and any associated mobile applications.
1. Information We Collect
Information you provide directly
- Account registration: name, email address, password
- Fare alerts: email address or WhatsApp number, origin/destination airports, travel dates, target price
- Search queries: departure city, destination, travel dates, passenger count, cabin class
- Payment information: processed securely by our payment provider — we do not store card numbers
- Communications: messages you send us via email or contact forms
Information collected automatically
- Usage data: pages visited, features used, search history within your session
- Device information: browser type, operating system, screen resolution
- IP address: used to approximate region for currency display — not stored beyond your session
- Cookies and local storage: session preferences, saved searches (see Cookie Policy)
Information we do not collect
We do not collect government ID, passport numbers, biometric data, or precise GPS location. We do not sell your data to third parties.
2. How We Use Your Information
- To deliver fare search results and price alerts you requested
- To send WhatsApp or email notifications you explicitly opted into
- To maintain your saved searches and account preferences
- To improve search accuracy and Arsenal technique performance
- To comply with legal obligations under Canadian law
- To prevent fraud and abuse of our platform
We will not use your email or phone number for marketing purposes without your explicit consent under CASL (Canada's Anti-Spam Legislation).
3. How We Share Your Information
We share your information only in the following limited circumstances:
Affiliate and booking partners
When you click a flight link and book through one of our affiliate partners (such as Travelpayouts), your booking is processed by that partner under their own privacy policy. We receive a commission but do not receive your payment details from them.
Service providers
We use trusted third-party services to operate fareSPY, including:
- Resend — transactional email delivery
- Twilio / WhatsApp Business API — alert notifications
- Groq / OpenAI — AI assistant processing (queries are not stored by us beyond your session)
- Hetzner — server infrastructure (data hosted in EU)
These providers are bound by data processing agreements and may not use your data for their own purposes.
Legal requirements
We may disclose your information if required by Canadian law, court order, or to protect the rights and safety of our users.
4. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account closure
- Fare alert subscriptions: retained until you unsubscribe or the alert expires
- Search history: session data is not persisted; saved searches are tied to your account
- AI query logs: not stored beyond real-time processing
- Email/WhatsApp opt-in records: retained for 3 years as required by CASL
5. Your Rights Under PIPEDA
As a Canadian resident, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Withdraw consent for non-essential data processing at any time
- Request deletion of your account and associated data
- File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
To exercise any of these rights, contact us at privacy@zerano.one. We will respond within 30 days.
6. International Data Transfers
Our servers are located in Germany (Hetzner EU). Some AI processing services operate in the United States. By using fareSPY, you consent to your information being processed in these jurisdictions. We ensure appropriate safeguards are in place consistent with PIPEDA requirements for cross-border data transfers.
7. Security
We implement industry-standard security measures including TLS encryption for all data in transit, hashed passwords, and restricted access controls. No transmission over the internet is 100% secure; we cannot guarantee absolute security but are committed to protecting your information.
8. Children's Privacy
fareSPY is not directed at individuals under 16 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately at privacy@zerano.one.
9. Changes to This Policy
We may update this policy as our services evolve. Material changes will be communicated by email to registered users and by posting a notice on farespy.zerano.one at least 10 days before taking effect. Continued use after the effective date constitutes acceptance.
