Ferd · madhumagiclabs.com
Privacy Policy
Template for review with counsel before launch. Ferd is a travel metasearch — it never takes your card or completes bookings.
Who we are
Ferd is operated by Madhu Magic Labs. Contact: privacy@madhumagiclabs.com.
What we collect
- Searches — routes, dates, travellers (to return results and improve ranking).
- Account — email/sign-in id, home airport, preferences (if you sign in).
- Price alerts — the saved search, threshold, and the email or device token you give us for notifications.
- Click-outs — which offer/supplier you were referred to (for affiliate attribution).
We do not collect card data, passport details, or PII beyond the above.
Why (lawful basis)
To provide the service (contract), to run and secure it (legitimate interest), and to send price alerts (your consent). See our data inventory in the project's compliance checklist.
Retention
Search logs are kept short-term (30–90 days) then aggregated; account and alert data until you delete them or close your account.
Your rights
Access, rectification, erasure, portability, and objection. Email privacy@madhumagiclabs.com; deleting an alert or account removes its data.
Sub-processors & residency
Hosting and data are in the EU (AWS eu-north-1). Sub-processors (auth, database, error/analytics, notifications, travel suppliers) are bound by data-processing agreements.