Who we are
hop is operated by hop Travel, Inc. For privacy questions, contact privacy@hop.flights.
What we collect
- Account & profile. When you sign in with Google we store your name, email, and profile photo.
- Home airport. The home airport you set, used to personalize search.
- Loyalty balances. Balances you enter manually; balances hop reads from text you paste or emails you forward to your personal sync address (we store only the extracted program name and balance — never the pasted text or the email); and — only if you choose to connect it — balances synced from AwardWallet.
- Loyalty-program logins (optional). If you choose credential auto-sync, hop stores the username and password for that loyalty program so it can sign in on your behalf and read your balance. Credentials are encrypted at rest (AES-256-GCM), are used only to sign in to that program, are never shown back to you (you see a masked username), and can be removed at any time from your account. hop never stores your bank passwords.
- Saved searches. Searches you save so you can return to them.
- Bookings. Records of cash bookings you make through hop (such as itinerary and provider references).
- Payment details.For cash bookings, your card is collected and processed by Duffel’s hosted payment component. hop does not receive or store your full card number.
How we use it
- To run the core service: compare cash vs. miles and show award sweet spots.
- To personalize results to your home airport and tracked balances.
- To facilitate cash bookings via Duffel and keep your booking records.
- To maintain your account, security, and sessions.
Third parties we share with
We rely on the following service providers to operate hop:
- Google — sign-in (OAuth).
- Neon — database storage for your home airport, balances, saved searches, and bookings.
- Duffel — flight search and cash-booking processing, including payment.
- AwardWallet — optional loyalty-balance sync that you connect and can revoke. When connected, hop receives the balances it returns.
- Google (Gmail) — optional, explicit-consent connection so hop can learn from your past trips. We request read-only access and read only your travel-confirmation emails (a tight search). We store only the normalized trip facts (destination, month, airline, cabin, whether points were used) — never the emails themselves — and you can disconnect and delete them at any time.
- AI processing (Vercel AI Gateway / Anthropic) — when you paste a statement or forward a balance email, its text is sent to an AI model once to read the program names and balances out of it. The text is used only for that extraction; hop keeps the extracted program + balance and discards the rest. Every extracted number is verified against the text you provided before it is saved.
- Cloudflare— receives mail sent to your personal sync address and relays its text to hop for the extraction above; and, if you use credential auto-sync, runs the automated browser session that signs in to your loyalty program to read the balance. The email and the login session are not stored by Cloudflare on hop’s behalf.
- seats.aero — award availability data.
- Unsplash — destination imagery (image requests are made to Unsplash).
We do not sell your personal data. Each provider processes data under its own terms and privacy policy.
Data retention
We keep your data while your account is active and as needed to provide the service. When you delete your account, we delete or anonymize the data we hold for you, except where we must retain records to meet legal, accounting, or fraud-prevention obligations. We delete most personal data within 30 days of account deletion; booking and transaction records are kept up to 7 years to meet accounting and legal obligations.
Your rights & controls
- Access and correction. View and edit your home airport, balances, and saved searches from your account. Balances read from a paste or a forwarded email are stored as ordinary program rows you can edit or remove the same way.
- Disconnect AwardWallet. You can revoke the AwardWallet connection at any time from your account; we stop syncing balances from it.
- Remove a saved login. You can delete any stored loyalty-program login at any time from your account; the encrypted credential is deleted and auto-sync for that program stops.
- Disconnect Gmail. You can revoke Gmail access at any time from your account; we revoke our token with Google and delete the stored trips.
- Delete your account. You can request account deletion from your account or by emailing privacy@hop.flights.
Depending on where you live, you may have additional rights over your personal data. We honor applicable requests. To exercise a right, email privacy@hop.flights and we will respond within 30 days.
Cookies
hop uses essential cookies needed to sign you in and keep your session active (set by our self-hosted sign-in system). We do not run a third-party advertising or cross-site tracking stack.
Children
hop is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children under that age.
Security
We use reasonable technical and organizational measures to protect your data, and rely on established providers (Google, Neon, Duffel) for sensitive operations. No method of storage or transmission is perfectly secure.
International transfers
Our providers may process and store data in countries other than yours. Where data is transferred internationally, we rely on the safeguards offered by those providers, such as the EU Standard Contractual Clauses.
Changes to this policy
We may update this policy; material changes will be reflected by updating the “Last updated” date above.
Contact
Email privacy@hop.flights with any privacy question or request.