Flight Money Finder — Privacy Policy

This Privacy Policy applies specifically to the Flight Money Finder browser extension ("the Extension"), a product of Yahoofa LLC ("Yahoofa," "we," "us"). It supplements the general Yahoofa Privacy Policy at yahoofa.com/privacy, which governs claims submitted through our website and claim processing generally.

1. What the Extension Accesses

With your explicit authorization via Google or Microsoft sign-in, the Extension requests read-only access to the connected Gmail or Outlook mailbox. This access is used for one purpose only: identifying emails related to flights — bookings, delays, cancellations, and other disruptions. The Extension does not access calendars, contacts, drafts, or files, and it cannot send, modify, or delete anything in the account.

2. How Scanning Works

Scanning is performed within your browser. The Extension searches the mailbox for flight-related messages and, from those messages only, extracts: passenger name, flight number, route (departure and arrival airports), flight date, and the portions of the email indicating a possible disruption. Emails that are not flight-related are not read beyond the automated filtering needed to exclude them, and nothing about them is extracted, logged, or retained.

3. Scan Results Are Yours Until You Submit

No email content or scan results leave your browser unless you select specific flights and click submit on the results screen. Scan results that you do not submit are discarded and never reach Yahoofa's servers. If you close the Extension without submitting, we receive nothing.

4. What Is Transmitted on Submission

When you submit selected flights, the Extension transmits to Yahoofa's servers: the extracted flight details for those flights, your name and contact email, your agency name if provided, and — as disclosed at the point of submission — a copy of the original airline email for each submitted flight. The original email is stored as an attachment to the claim record and used solely to verify and process the compensation claim.

5. Google API Services — Limited Use Disclosure

Flight Money Finder's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we only use Gmail data to provide and improve the Extension's user-facing flight-detection features; we do not use Gmail data for advertising; we do not sell Gmail data; we do not use Gmail data to train generalized artificial intelligence or machine learning models; and no human at Yahoofa reads Gmail data except (a) the original emails you explicitly chose to submit with a claim, (b) with your additional consent, (c) as necessary for security purposes, or (d) as required by law. Our use of Microsoft account data through the Microsoft Graph API follows the same restrictions.

6. Use by Travel Agents

If the connected mailbox belongs to a travel agency and contains flight emails concerning the agency's clients, the extracted passenger details belong to those clients. The agent submitting the data is responsible for having the client's consent (see the Extension's Terms & Conditions, Section 6). Once submitted, client data is handled exactly as described in Section 4 and in Yahoofa's general Privacy Policy.

7. What We Never Do

We never sell your data. We never use mailbox data for advertising or profiling. We never store scan results you did not submit. We never grant any third party access to your mailbox. Our service providers (listed in the general Privacy Policy) process submitted claim data only on our instructions.

8. Revoking Access

You can revoke the Extension's mailbox access at any time via your Google Account permissions or Microsoft account permissions, or by uninstalling the Extension. Revoking access stops all scanning immediately; it does not delete claims you already submitted, which you can address under Section 9.

9. Retention and Your Rights

Submitted flight data and original emails are retained only as long as needed to process the claim, and thereafter per the retention periods in our general Privacy Policy. You may request access, correction, or deletion of your data at any time by emailing support@yahoofa.com. If you are in the EU/EEA, the GDPR rights described in our general Privacy Policy apply in full.

10. Security

All transmission between the Extension and our servers is encrypted (HTTPS/TLS). Submitted original emails are stored with access controls through our file storage provider. OAuth tokens are held by your browser and are never transmitted to or stored on Yahoofa's servers.

11. Changes and Contact

We may update this policy as the Extension evolves; the current version is always at yahoofa.com/flightmoneyfinder-privacy. Questions and requests: Yahoofa LLC — support@yahoofa.com.