Privacy Policy

01What we deliberately do not collect

Our services are built so that we never need identity documents or account access. We do not ask for, receive, or store traveler identity information — no passenger names, dates of birth, passport or identification numbers, known-traveler numbers, or frequent flyer account numbers for any traveler.

For award booking work, we ask only for the number of travelers in your party. You make every booking yourself, in your own accounts and in your own name, as Section 3 of our Terms describes.

Consistent with Section 4 of our Terms, do not send us passwords, online banking or loyalty account credentials, full credit card numbers, Social Security numbers, or government identification numbers. We do not need them and we do not want them. If you send us any of these, we will delete the material without using it and ask you to resend it redacted.

For card strategy engagements we do review your spending history, including individual transactions. Section 2.2 explains why, what we use it for, and how long we keep it.

02Information we collect

2.1  Information clients give us

• Contact details — your name, email address, and phone number, and a mailing address if you provide one.
• Trip parameters — your ideal travel dates, preferred origin and destination airports, and the number of travelers in your party.
• Points and loyalty information — the programs you belong to and your points and miles balances.
• Card portfolio — for card strategy engagements, which cards you currently hold.

2.2  Spending information

For a credit card strategy analysis, we ask for roughly twelve months of your spending history — typically your issuer’s year-end summary or your monthly statements.

Why we need transaction detail. Issuer category labels do not always map to credit card bonus categories. To tell you which card earns the most on a given purchase, we have to see the individual merchant lines and work out how each one is likely to code. A category summary alone cannot reliably support the analysis.

What we use it for. We use your spending history for one purpose: determining which cards and combinations would earn you the most on the way you actually spend. We build category totals from the merchant detail and base our recommendations on those totals.

What we do not do with it. Spending records can incidentally reveal sensitive things — health care providers, pharmacies, places of worship, political contributions, legal services. We do not catalog, comment on, draw inferences from, or discuss any of it beyond assigning a transaction to a spending category. We do not disclose it to anyone.

What we still do not want. Please do not send documents containing full account numbers, account credentials, or Social Security numbers. Masked account numbers as they normally appear on a statement are fine.

How to send it. You can provide your spending history in either of two ways. You can upload your statements or year-end summaries through the secure upload link we provide at the start of your engagement. Or you can connect your card accounts through Plaid, a third-party service that securely links financial accounts. With Plaid, you sign in on your bank’s own website; we never see or receive your login credentials. The connection is read-only and limited to account and transaction information. We disconnect it as soon as your transactions have been imported, or without importing if the import cannot be completed. If Plaid does not let us disconnect it, we will tell you so you can remove our access through your bank. Plaid’s handling of your information is governed by the Plaid End User Privacy Policy. If you prefer to email your documents, you may, but email is not a secure channel.

How long we keep it. We keep your spending history so we can answer follow-up questions and update your analysis. You can ask us to remove it at any time by emailing info@freequinntflyer.com. When you do, we delete the transaction-level data (every statement line, merchant name, purchase date and amount) from our software and from every copy on our computer, and we delete the statement files you sent us, including copies in Dropbox and email. We will confirm when it is done. Backup copies that hold that data are deleted within seven (7) days. Our backups are encrypted on our computer and stored in Apple iCloud. A deleted backup copy may remain in iCloud’s Recently Deleted area for up to thirty (30) more days before Apple removes it, and it stays encrypted the whole time. Dropbox and our email provider may likewise keep deleted files in their own recovery areas for a limited period.

What we keep. We keep the recommendations we delivered to you: the report itself, the cards we suggested, how we assigned each spending category to a card, the estimated value of each card, our tips, and the category-level totals those figures rest on, such as your total spend per category and per card and the rewards they earned. Those totals do not identify any purchase. If you would rather we keep nothing, you can ask for complete deletion, which also removes the report and your name from our client list, subject only to the records we are required to keep (Section 8).

2.3  Payment information

Payments are processed by Squarespace Payments, not by us. We do not receive or store your full card number or bank account number. We receive confirmation of payment and limited details such as the last four digits, the amount, and the date. Squarespace’s handling of payment data is governed by its own privacy policy.

2.4  Information collected automatically

Our website is hosted on Squarespace, which collects standard technical information when you visit: IP address, browser and device type, operating system, referring page, pages viewed, and timestamps. This is used for site security, performance, and aggregate traffic analysis.

We also use Google Analytics to understand how visitors find and use the site. Google Analytics sets cookies and collects information including your IP address, device and browser details, and the pages you view. We have disabled Google’s advertising and signals features, so this data is not used to build advertising profiles. You can opt out of Google Analytics entirely using Google’s browser add-on at tools.google.com/dlpage/gaoptout.

2.5  Information from third parties

When you apply for a financial product through one of our referral or affiliate links, the partner or affiliate network may report the conversion back to us. What we receive is typically limited — the date, the product, and the compensation earned — and does not include your application, your credit report, or your approval decision.

03How we use information

We use the information described above to:

• provide the services described in your engagement letter;
• analyze your spending and recommend card and points strategies;
• search award availability and identify booking options for you to execute;
• communicate with you about your engagement, including sending deliverables and recommendations;
• issue invoices and collect payment;
• maintain business, tax, and accounting records;
• enforce our Terms of Service and collect amounts owed;
• comply with legal obligations; and
• operate, secure, and improve our website.

We do not use your information to make automated decisions about you, and we do not use it to train machine learning models.

04We do not sell your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months.

Our referral compensation, described in Section 9 of our Terms, comes from a partner paying us when you choose to apply through our link. It does not involve us transferring your personal information to that partner — you provide your information to them directly, through their own application.

05When we share information

Service providers. We use vendors to run the business: Squarespace for our website and payment processing, Google Analytics for website traffic measurement, Dropbox for secure file transfer and storage, Apple iCloud for backups (encrypted on our own computer before upload, so Apple cannot read them), Plaid for optional bank account connections, and an email provider for correspondence. They may access information only as needed to provide their service to us.

Referral and affiliate partners. When you click a referral or affiliate link, you leave our site. The partner sets its own cookies and collects its own information under its own privacy policy, which we do not control.

Legal and enforcement. We may disclose information where required by law, or where reasonably necessary to enforce our Terms of Service, establish or defend a legal claim, or collect amounts owed to us.

Business transfer. If our business is sold or merges with another, client records may transfer as part of that transaction, subject to this Policy.

With your consent. We will not use your name, image, or testimonial publicly without asking you first. We may describe an engagement in anonymized, non-identifying terms — for example, “a client transferred points to book two business class seats to Tokyo” — and this contains nothing that identifies you.

06Cookies and tracking

Essential cookies are set by Squarespace to keep the site working — session management, security, and form submission. The site does not function properly without them.

Analytics cookies are set by Google Analytics to measure aggregate traffic and understand which pages are useful. We have turned off Google’s advertising features, so these are not used for ad targeting.

Affiliate cookies are set by our partners when you click a referral link, so the partner can attribute an application to us. These are set by the partner, on the partner’s domain, and governed by the partner’s privacy policy.

You can block or delete cookies in your browser settings. Blocking essential cookies may break parts of the site.

Global Privacy Control. We honor the Global Privacy Control (GPC) signal where our systems can detect it. Because we do not sell personal information or share it for targeted advertising, a GPC signal does not change what we do with your information.

07How long we keep information

We keep information for as long as it serves the purpose it was collected for:

• Active engagement records — for the duration of the engagement.
• Financial and tax records — invoices, payments, and engagement summaries for seven (7) years after the engagement ends, as our accounting and tax obligations require.
• Communications — email correspondence for three (3) years, unless it relates to an open matter or a dispute.
• Spending history — transaction-level data is deleted at your request, from our computer at once and from our backups within seven (7) days, as described in Section 2.2. The recommendations we delivered, and the category totals behind them, are kept unless you ask for complete deletion.
• Working files — spending analyses, spreadsheets, and award research for two (2) years after delivery, after which we delete them or strip identifying details.

Where we are required to retain records, we retain the minimum necessary and do not use them for any other purpose.

08Your choices and rights

You may ask us to:

• Access the personal information we hold about you and get a copy of it;
• Correct anything inaccurate;
• Delete your personal information;
• Stop sending you marketing email, at any time, by replying and asking or using the unsubscribe link.

To make a request, email info@freequinntflyer.com. We will confirm receipt and respond within one (1) business day, and we do not charge for this.

Two kinds of deletion. You can ask us to remove your spending data, which keeps the recommendations we delivered, or to delete your client record completely, including the report. We will tell you which one we did and when the backup copies were gone.

One limit on deletion. We will delete what we can, but we cannot delete records we are legally required to keep — principally invoices, payment records, and tax documentation for the retention period in Section 7 — or records reasonably needed to establish or defend a legal claim. If we cannot delete something, we will tell you what we are keeping and why.

We will not discriminate against you, refuse service, or change your fees because you exercised a privacy right.

09State privacy rights

South Carolina does not currently have a comprehensive consumer privacy law. Some other states do, and if you live in one, you may have additional rights.

California residents may have rights under the CCPA/CPRA to know what personal information we collect, to request deletion or correction, to opt out of sale or sharing (we do neither), and to limit use of sensitive personal information. You may designate an authorized agent to make a request on your behalf.

Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws grant rights to access, correct, delete, and obtain a portable copy of your personal information.

Appeals. If we decline a privacy request, you may appeal by replying to our decision. We will respond to an appeal within forty-five (45) days with our reasoning. If we deny the appeal, you may contact your state Attorney General.

We honor these requests regardless of where you live, so you do not need to establish residency to make one.

10Security

We use reasonable administrative and technical measures to protect the information we hold, including access controls and encrypted storage and transmission where available. We also limit exposure by holding as little as possible: we do not hold identity documents, account credentials, or full account numbers, and our backups are encrypted before they leave our computer.

As Section 10 of our Terms states, no method of electronic transmission or storage is completely secure. Email and messaging carry ordinary risks, which is why we provide a secure upload method and recommend you use it.

11Children

Our website and services are directed to adults, not to children, and we do not knowingly collect personal information from anyone under 13.

Because we ask only for the number of travelers in a party and never for traveler names or dates of birth, we do not receive identifying information about children even when a client is planning family travel.

12Links to other sites

Our site links to airlines, hotels, loyalty programs, card issuers, and other third parties. We do not control those sites, and their privacy practices are their own. Review their policies before providing information to them.

13Where information is held

We operate in the United States, and the information we hold is stored and processed here. If you contact us from outside the United States, you understand your information will be handled under U.S. law.

14Changes to this Policy

We may update this Policy by posting a revised version at freequinntflyer.com/privacy-policy with a new effective date and version number. A revised version applies to website visitors and to new engagements from the date it is posted. For an engagement already under way, the version in effect when the engagement began continues to apply unless you agree in writing to the revised version, as Section 20 of our Terms of Service describes. If a change is material, we will tell active clients by email, and we keep prior versions on file and will provide the one that applies to your engagement on request.

15The FreeQuinnt Flyer iPhone app

This section covers the FreeQuinnt Flyer iPhone app, shown on your home screen as FQF Credits.

What the app stores. The cards you add, the credits you mark as used, autopay settings, hidden credits, anniversary dates and your reminder settings. This information is stored only on your device. We do not receive it, and the app has no accounts or logins.

No bank connections. The app does not connect to your bank or card accounts and never asks for card numbers, passwords or account details.

No tracking or analytics. The app does not contain analytics, advertising or tracking code, and we do not sell or share any information from it.

Updates to credit information. The app periodically downloads updated credit and card information from freequinntflyer.com, and current transfer bonus information from a Google Sheet that we publish. These downloads contain only information we publish. Nothing about you or your wallet is sent with them, although, as with any website, the servers that answer these requests (Squarespace and Google) can see your device's internet address, and the card information request also includes basic technical details such as the app version and your phone's language setting.

Reminders. Reminder notifications are scheduled on your device by the app. They are not sent from our servers.

Share links. If you use Share, the app creates a link that contains your first name (if entered), your cards, the credits you have marked as used, partly used amounts, hidden credits, autopay settings, anniversary months and opening years, when you last used credits that are given every few years (such as Global Entry or TSA PreCheck), and whether you were viewing Now or Full year. Anyone you send the link to can see that information. We do not store share links. If a share link is opened in a web browser on our website, the page address, which contains the link's information, may be recorded by our website analytics (Google Analytics). Links opened in the app are not.

Deleting your data. Deleting the app removes everything it stored. You can also use Start over in the app at any time.

Children. The app is not directed to children under 13.

16Contact

Questions, requests, or complaints about this Policy can be sent to info@freequinntflyer.com, or by mail to FreeQuinnt Flyer, PO Box 5, Charleston, SC 29404.