Last updated 29 October 2026

Privacy

Draft. This page has not been reviewed by a lawyer yet and will be finalised before billing opens.

The short version: we collect what we need to send you good deals, we never sell it, and you can see, download or delete it whenever you like. The controller is Exit Row, 1000 Rue De la Gauchetière O, Montréal, QC H3B 4W5, Canada. Contact: hello@flyexitrow.com.

What we collect

  • Account: your email, name if you give it, the cities you fly from, and the date and wording of the consents you gave.
  • Your preferences: regions, dream destinations, budget, trip length, how often we email you, your time zone, currency and passport country.
  • Fare Watch: the booking confirmations you forward or type in: airline, flights, dates, what you paid and the booking reference. We don't need and don't keep passport or payment details from them.
  • Billing: your plan, prices paid, renewal date and payment status. Card details are held by Paddle, our payment provider; we never see them.
  • Emails and the site: which emails you open and which deals you click, the page you joined from and any campaign tags in the link (utm codes).
  • Referrals: your referral code, and who joined through it.
  • Messages: what you send our help desk, and our replies.

What we use it for

  • Sending you the deals that fit your cities and preferences, and the emails you asked for. (Our contract with you.)
  • Billing, reminders before charges, refunds and the savings promise. (Our contract, and the law.)
  • Fare Watch: checking the price of flights you've booked. (Our contract.)
  • Working out which deals and emails are useful, and which cities to add. (Our legitimate interest in improving Exit Row.)
  • Analytics and ad measurement cookies, only if you agree to them. (Your consent: see cookies.)

What we never do

We don't sell your personal information, and we don't give your email to airlines, booking sites or advertisers. When you click an affiliate link, the provider learns that the visit came from Exit Row, not who you are.

Who processes it for us

  • Supabase: our database, hosted in Sydney, Australia.
  • Vercel: hosts the website.
  • Paddle: payments, receipts, tax and refunds, as our merchant of record.
  • Resend: sends our emails.
  • PostHog: site analytics, only with your consent where it's needed.

Some of these process data outside your country. Where the law requires it, we rely on standard contractual clauses or an equivalent safeguard.

How long we keep it

  • Your account and preferences: while you're a member or on the free list, then deleted within 30 days.
  • Fare Watch bookings: until 30 days after the flight.
  • Billing records: for as long as tax law requires.
  • Help desk messages: 2 years.

Your rights

You can see, download, correct or delete your data at any time: download and delete are in your account settings, or email us and we reply within 30 days. You can unsubscribe from any email in one click. In the EU, EEA and UK you also have the rights the GDPR gives you, including to object and to restrict processing.

Complaints

Tell us first and we'll put it right. You can also complain to the Office of the Australian Information Commissioner, the UK Information Commissioner's Office, or the data protection authority where you live in the EU.

Age

Exit Row is for people aged 16 and over.