The Flight Living — Privacy Policy

1. Scope

This Privacy Policy explains how the Company collects, uses, shares, and protects information in connection with The Flight Living reservation and payment application and related services (the “Application”), including its integration with Intuit QuickBooks Online and QuickBooks Payments.

2. Information we collect

  • Reservation and guest information: name, email address, phone number, stay dates, unit selected, number of guests, and notes you provide.
  • Payment information: payment cards are collected and processed by Intuit through QuickBooks Payments. Intuit tokenizes the card and stores it on our behalf. We do not receive or store full card numbers; we retain only non-sensitive references such as the card brand and last four digits, and a payment token/identifier.
  • Account information: for staff, the sign-in identity (email and name) provided through our single sign-on provider.
  • Technical information: basic request and log data (such as IP address and timestamps) used to operate and secure the service.

3. QuickBooks / Intuit data

When an authorized user connects a QuickBooks company, we receive OAuth 2.0 access and refresh tokens and access accounting and payment functions only to create and read customers, record charges, deposits, holds, and refunds, store guest cards on file with Intuit, and record booking transactions. We store these tokens securely and use them solely to provide the Application’s functionality. We do not use QuickBooks data for advertising, and we do not sell it. Intuit’s handling of your data is governed by Intuit’s own privacy policy.

4. How we use information

We use the information to: create and manage reservations; process payments, deposits, holds, and refunds; communicate booking confirmations, receipts, reminders, and service messages; maintain accounting records in QuickBooks; provide customer support; prevent fraud and abuse; and comply with legal obligations.

5. How we share information

  • Intuit / QuickBooks Payments — to process card payments and maintain accounting records (payment processor and accounting platform).
  • Microsoft — to send transactional email and, for staff, to authenticate sign-in.
  • Cloudflare — hosting and delivery of the Application.
  • Legal and safety — when required by law, to enforce our terms, or to protect rights, property, or safety.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information.

6. Payment-card security

Card payments are handled by Intuit through QuickBooks Payments in a PCI-DSS-compliant environment. Card numbers are tokenized by Intuit and are never stored on our systems. We retain only tokenized references and non-sensitive metadata (brand, last four digits) needed to manage a booking.

7. Data retention

We retain reservation, payment reference, and accounting information for as long as needed to provide the service and to meet legal, tax, and accounting requirements, after which it is deleted or de-identified. QuickBooks records are retained in your QuickBooks company under Intuit’s terms.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, encryption at rest for sensitive fields, access controls, and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. To make a request, contact [email protected]. We will respond as required by applicable law.

10. California privacy (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion or correction, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined by California law. You will not be discriminated against for exercising these rights.

11. Cookies and tracking

The Application uses only the cookies and local storage necessary to operate (for example, to keep you signed in and to remember interface preferences). We do not use third-party advertising trackers.

12. Children

The Application is intended for adults and is not directed to children under 13 (or under 16 where applicable). We do not knowingly collect information from children.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted at this URL with a new effective date.

14. Contact

Questions or privacy requests: [email protected] · 2125 5th Avenue LLC (The Flight Living).