Privacy Policy
1. Who is responsible
Brava Labs LLC is the data controller for the personal data described here. Contact: info@taxbackair.com.
2. What we collect, and why
| Data | Purpose and legal basis |
|---|---|
| Airline, flight date, route, passenger count | To run the free eligibility check. Legal basis: steps taken at your request before entering a contract (Art. 6(1)(b)). |
| Name, email, phone, booking reference, ticket number | To identify your booking and prepare the claim. Legal basis: performance of the contract (Art. 6(1)(b)). |
| Booking confirmation or e-ticket you upload | To establish which taxes were paid. Legal basis: performance of the contract (Art. 6(1)(b)). |
| Payment records, consents, terms version | To evidence the transaction and handle disputes. Legal basis: legal obligation (Art. 6(1)(c)) and our legitimate interest in defending claims (Art. 6(1)(f)). |
| Technical logs (IP, user agent, document access) | Security and abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f)). |
3. Who we share it with
- The airline concerned, and only the data its claim process requires.
- Our payment processor, Stripe, which handles card details directly — we never see or store your card number.
- Our hosting provider, which stores the data on our behalf under a data processing agreement.
- Our email provider, which transmits the messages we send you and the internal alerts we send ourselves.
- Public authorities, where the law requires it.
We do not sell personal data and we do not use it for advertising.
4. Our internal notifications
When a claim needs attention we send ourselves an alert. Those alerts are deliberately limited to the claim reference, its status, the airline, the flight date and the route. They do not contain your name or your email address: your identity stays inside the case file, which is reachable only after signing in.
These alerts may be copied to more than one of our own mailboxes, including mailboxes hosted by third-party email providers. That is why they carry as little about you as they usefully can.
5. International transfers
Where a recipient is outside the European Economic Area, the transfer relies on an adequacy decision or on Standard Contractual Clauses. You can ask us for a copy of the safeguards that apply.
6. How long we keep it
- Eligibility checks that led nowhere: 90 days.
- Uploaded documents: 12 months from upload, then deleted automatically.
- Case and claim records: as long as the claim is open, then for the period we must keep commercial and accounting records.
- Payment records: the statutory retention period for accounting documents.
7. How we protect uploaded documents
Documents you upload are stored outside the public web root under an opaque identifier, encrypted at rest, and reachable only through a link that is signed and expires within minutes. No directory of uploads is published, filenames are never derived from what you uploaded, and every access is logged.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or provide it in a portable format. Write to info@taxbackair.com and we will respond within one month.
You may also complain to the data protection authority of the EU country where you live or work.
9. Automated decisions
Our eligibility check is automated, but it never produces a legal or similarly significant effect on you: at worst it declines to sell you a service and sends your case to a person for review. You can always ask for a human to look at it.
10. What we never do with your booking reference
A booking reference plus a surname is enough to modify a reservation on most airline websites. We use yours only to identify the booking and prepare the claim. We never cancel flights, change dates, change passengers, select seats or buy extras.
Contact
- Operator
- Brava Labs LLC
- Registration
- VAT
- Registered address
- 30 N Gould St Ste R, Sheridan, WY 82801
- info@taxbackair.com