Cabin Atlas
Pre-launch draft · Version 2026-08-20-draft

Privacy notice

A plain-language summary of what Cabin Atlas uses, what it deliberately avoids storing and who receives booking information.

Card details do not pass through Cabin Atlas servers. Any future payment must use the selected seller's approved hosted checkout or secure component, which sends card details directly to its payment providers.

Controller and contact

HARON OHANA INVESTMENTS SLU, NIF B67483602, CL Aribau 175 EN 1, Barcelona, Spain operates Cabin Atlas. Privacy enquiries may be sent to ori@cabinatlas.app.

Information we use

  • Signed-in account identifiers, verified email and optional name supplied by our authentication provider, Clerk. Google may also process the sign-in if you choose Google registration.
  • Account preferences you choose to save, including display name, home airport, preferred cabin, language, currency, partner-service interests and optional email-update preference.
  • Reminder preferences, including the reminder types, timing choices and whether email delivery is enabled. The verified email address is supplied when you sign in and is not copied into reminder settings.
  • Flight searches, selected offers and booking status.
  • Passenger information needed to request a ticket, sent to the selected booking provider and relevant airline.
  • Hashed security signals used to detect abnormal booking activity.
  • Consent records, support messages and booking references.

Information we do not keep

Cabin Atlas does not receive or store complete card numbers, card security codes or online-banking credentials. Initial booking records are designed to avoid retaining passenger contact details or dates of birth after they are transmitted for the booking.

Embedded travel-document services

When you open the eVisa Express journey inside Cabin Atlas, the application runs in a provider-hosted frame. Passport information, identity documents, application answers and payment details are entered directly into eVisa Express and are not received or stored by Cabin Atlas. Cabin Atlas may receive limited referral or conversion information needed to attribute the service.

Embedded airport services

When you open the ComfortPass booking journey inside Cabin Atlas, the service search, traveller details and payment form run in a provider-hosted frame. Payment details are sent directly to ComfortPass and its payment provider, not to Cabin Atlas. ComfortPass may provide Cabin Atlas with limited booking, service and commission information needed to attribute and support the purchase.

Why we use information

We use information to provide searches, secure bookings, prevent fraud and duplicate tickets, satisfy legal obligations, support travellers, reconcile uncertain bookings and defend legitimate disputes.

Who receives information

The selected booking provider, disclosed seller, airline, ComfortPass when its airport-service journey is opened, eVisa Express when its embedded journey is opened, authentication and infrastructure providers, and approved security/support providers receive only the information needed for their role. International transfers may occur where a supplier or processor operates outside the European Economic Area and must use an appropriate legal safeguard.

Retention and security

Saved account preferences remain available until you change them or request account deletion. Abandoned, failed and test checkout records are automatically removed after 30 days. Network and device security hashes and payment-authentication session references are removed from retained records after 30 days. Processed webhook records and delivered operational messages are removed after 30 days. Confirmed live-booking and consent evidence will follow the accounting, fraud and legal schedule published before live booking is enabled. Access is restricted, security identifiers are hashed and payment data remains isolated in the selected provider's approved checkout.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Signed-in users can download an account-data export from their Cabin Atlas account. Other requests may be sent to privacy support. You may also complain to the Spanish Data Protection Agency or another competent supervisory authority.