Contact
How to reach us
Channels
Send it to the right place
Pick the mailbox that fits.
Support
Account questions, billing, plan limits and anything that is not behaving the way this site says it should.
support@[domain](not yet configured)
Privacy requests
Access, correction, deletion, portability and objection requests. Include the email address on the account so we can find it without asking for anything else.
privacy@[domain](not yet configured)
Legal notices
Formal notices, complaints and rights-holder correspondence. Postal notices go to the registered address below.
legal@[domain](not yet configured)
Report an inaccuracy
A points total, seat count, timestamp or coverage claim that looks wrong. Tell us the route, date, cabin and what you saw, and we will trace it back to the observation that produced it.
support@[domain](not yet configured)
Report a security issue
A vulnerability in this site or its API. This mailbox is the one published in our security.txt; the disclosure policy is below.
security@[domain](not yet configured)
A response-time target has not yet been published. When one is, it will appear here and in the terms.
Security disclosure policy
If you believe you have found a vulnerability in this website, its API or the way it handles data, email security@[domain](not yet configured) with enough detail to reproduce it. The same address is published in machine-readable form at /.well-known/security.txt.
- Give us a reasonable opportunity to fix the issue before you disclose it publicly; we will tell you when it is fixed.
- Do not access, modify or retain another customer’s data, and stop as soon as you have enough to demonstrate the issue.
- Do not test loyalty programs’ systems through this service: that traffic reaches a third party, not us.
- We will not pursue a good-faith researcher who follows these rules. There is no bounty programme at present.
Postal address
[Company legal name](not yet configured)
[Registered address](not yet configured)
What to include
- The email address on your account, if you have one.
- For a data or billing question, what you were doing and roughly when.
- For an inaccuracy, the route, date, cabin and program, plus what the figure said and what you believe it should have said.
- Never include a password, a loyalty-account login or full card details. We do not need them and we will delete them if you send them.
How we handle what you send is set out in the privacy notice, and what we expect from you is in the acceptable use policy.
Facts the operator must supply before this document takes effect
6 of 6 bracketed values in this document are not yet configured. Each one is a fact, not a missing clause — the wording around it is complete. Each is supplied as the build argument named beside it.
- [Company legal name](not yet configured)
- The registered entity that contracts with customers, exactly as it appears on the certificate of incorporation.
NEXT_PUBLIC_COMPANY_LEGAL_NAME - [Registered address](not yet configured)
- Registered office address for service of notices. A PO box is usually not sufficient.
NEXT_PUBLIC_COMPANY_REGISTERED_ADDRESS - support@[domain](not yet configured)
- Monitored mailbox for customer support. Must be answerable within whatever response time the document promises.
NEXT_PUBLIC_COMPANY_SUPPORT_EMAIL - privacy@[domain](not yet configured)
- Mailbox for data-subject requests: access, correction, deletion, portability and objection.
NEXT_PUBLIC_COMPANY_PRIVACY_EMAIL - legal@[domain](not yet configured)
- Mailbox for notices, complaints and rights-holder correspondence.
NEXT_PUBLIC_COMPANY_LEGAL_EMAIL - security@[domain](not yet configured)
- Mailbox for vulnerability reports. Published in /.well-known/security.txt, so it must be read by someone who can act on it.
NEXT_PUBLIC_COMPANY_SECURITY_EMAIL