Privacy Policy

Introduction
Bacarai, Inc., a Delaware corporation doing business as AllFly ("AllFly," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our corporate travel management platform, Quest, and related services (collectively, the "Services"). This policy applies to information we collect through our website, mobile applications, and other online services.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our Services.

Information We Collect
We collect information you provide directly to us when you:
Create an account or user profile
Book travel arrangements
Submit travel preferences and requirements
Contact our customer support team
Subscribe to our newsletter or marketing communications
Participate in surveys or promotional activities

This information may include:
‍Personal Identifiers: Name, email address, phone number, date of birth
‍Professional Information: Company name, job title, employee ID, department
‍Travel Information: Passport details, TSA PreCheck/Global Entry numbers, frequent flyer numbers, seat preferences, dietary restrictions
‍Payment Information: Credit card details, billing address, corporate payment account information
‍Travel History: Past bookings, destinations, travel patterns, preferencesInformation We Collect AutomaticallyWhen you use our Services, we automatically collect certain information about your device and usage, including:
‍Device Information: IP address, browser type, operating system, device identifiers
‍Usage Data: Pages viewed, features used, click patterns, search queries, booking patterns
‍Location Information: Approximate location based on IP address, GPS data (with your permission)
‍Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities

Information From Third Parties
We may receive information about you from third parties, including:Your employer or travel arrangers booking on your behalf
Travel suppliers (airlines, hotels, car rental companies)
Payment processors and financial institutionsBackground check providers (where permitted by law)
Social media platforms (if you connect your accounts)Our referral partners and meeting planners

How We Use Your Information
We use the information we collect to:
Provide and Improve Our Services
Process travel bookings and reservations
Manage your travel itineraries
Provide customer support
Personalize your experience and travel recommendations
Improve our platform functionality and user experience

Communication
Send booking confirmations and travel updates
Provide important notices about changes to your travel plansRespond to your inquiries and requests
Send marketing communications (with your consent)
Business Operations Process payments and prevent fraud
Comply with legal obligations and travel regulations
Analyze usage trends and platform performance
Enforce our terms of service and protect our rights
Safety and SecurityVerify identity and prevent unauthorized access
Monitor for security threats and fraudulent activity
Assist with travel emergencies and duty of care obligations

How We Share Your Information
We share your information only in the following circumstances:
With Travel Suppliers
We share necessary information with airlines, hotels, car rental companies, and other travel suppliers to complete your bookings.
With Your Employer
We share travel data and reports with your employer as required for corporate travel management, expense reporting, and duty of care purposes.
With Service Providers
We work with trusted third-party service providers who assist us in operating our platform, including: Payment processors
Cloud hosting providers
Analytics services
Customer support tools
Email service providers

For Legal and Safety Reasons
We may disclose your information if required to:
Comply with applicable laws, regulations, or legal processesRespond to government requests or court ordersProtect the rights, property, or safety of AllFly, our users, or others
Investigate potential violations of our terms of service
‍
With Your Consent We may share your information with other parties when you provide explicit consent. Business TransfersIf AllFly is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Retention
We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. Retention periods may vary based on:
Legal and regulatory requirements
Your employer's data retention policies
The nature of the information
Whether there are outstanding transactions or disputes

Generally, we retain travel booking information for seven years after the completion of travel, unless a longer retention period is required by law or your employer's policies.

Your Rights and Choices
‍
‍Access and Portability: You have the right to request access to the personal information we hold about you and receive a copy in a portable format.
‍Correction: You can update or correct your personal information through your account settings or by contacting us.
‍Deletion: You may request that we delete your personal information, subject to certain exceptions such as legal obligations or ongoing services.
‍Opt-Out of Marketing: You can unsubscribe from marketing communications by clicking the "unsubscribe" link in our emails or updating your preferences in your account settings.
‍Cookie Preferences: You can manage cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of our Services.
‍Do Not Track: Our Services do not currently respond to "Do Not Track" browser signals.International Data TransfersAllFly is based in the United States. If you use our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries. We implement appropriate safeguards for international data transfers as required by applicable law.

Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. AllFly is SOC-2 certified, demonstrating our commitment to maintaining the highest standards of security and data protection. Our security measures include:
Encryption of sensitive data in transit and at rest
Regular security assessments and audits
Access controls and authentication requirements
Employee training on data protection
Continuous monitoring and incident response procedures
Regular third-party security assessments as part of our SOC-2 compliance
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information.Third-Party LinksOur Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including:The right to know what personal information we collect, use, disclose, and sellThe right to request deletion of personal informationThe right to opt-out of the sale of personal information (we do not sell personal information)

The right to non-discrimination for exercising privacy rights
To exercise these rights, California residents may contact us using the information below.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date.

Your continued use of our Services after such changes constitutes acceptance of the updated policy.
Contact Us If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

‍Bacarai, Inc. d/b/a AllFly
‍100 E Pine St., Suite #110
Orlando, Florida 32801
‍Email: privacy@allfly.com
‍Phone: (855) 205-4905
‍Privacy Officer:Ameer Bacchus, Chief Product Officer
‍Email: Ameer@AllFly.io