Privacy Policy

1. Who we are

Property Partner Group, LLC, trading as Airplaner ("we", "us"), of 3 Parklane Boulevard, 914W, Dearborn, MI, United States, is the controller of personal data processed through airplaner.com and agent.airplaner.com — our online travel booking and back-office platform used by travellers, travel agencies and their customers. This policy explains what data we process, why, and who it is shared with. Privacy contact: ask@airplaner.com.

2. Data we process

• Account data: name, email, phone, role, agency membership.
• Booking data: traveller names, dates of birth and nationality where required by a supplier, itinerary details, contact email and phone.
• Financial data: invoices, payments, refunds, credit notes, supplier costs and wallet transactions. Full card numbers are never stored by us; card processing is handled by the payment provider.
• Technical data: log-in history, audit logs, IP address and device information.

3. Why we process it

To create and manage bookings with suppliers, to take payment and issue refunds, to produce invoices, vouchers and accounting records, to secure the platform and prevent fraud, and to meet legal, tax and accounting obligations.

4. QuickBooks Online integration

If an administrator connects the platform to Intuit QuickBooks Online, we transfer accounting records to your QuickBooks company file so that your books stay up to date. Specifically we send:

• Invoices (booking reference, line items, amounts, currency, dates).
• Payments applied against those invoices.
• Refund receipts and credit memos.
• Supplier bills and vendor records.
• Customer records limited to the name and email address needed to match or create the customer in QuickBooks.

We do not send card data, passport data or traveller documents to QuickBooks. Data flows one way, from this platform to QuickBooks, apart from reading your chart of accounts and tax codes so an administrator can map them.

The OAuth access and refresh tokens issued by Intuit are stored encrypted at rest, are never exposed to browsers, and are used only to post the records described above. An administrator can revoke access at any time from Admin → Financial → QuickBooks, or via the disconnect page. Disconnecting revokes the token with Intuit and deletes it from our database; documents already posted to QuickBooks remain in your QuickBooks company file and are managed by you there.

4b. Card data

Card data is captured and processed by our PCI-DSS compliant payment provider and is never stored on our servers. Card details are entered on the provider's hosted payment form; we receive only a payment reference, the amount, currency, result, card brand and last four digits, which we keep to reconcile the booking and to process refunds and chargebacks.

5. Sharing

We share data only with parties needed to deliver the service: travel suppliers and global distribution partners for the bookings you make, payment providers, our cloud hosting and database provider, email delivery providers, and Intuit QuickBooks where you have connected it. We do not sell personal data.

6. Retention

Booking and financial records are retained for as long as required by applicable tax and accounting law. Account and log data is retained while the account is active and for a reasonable period afterwards.

7. Security

Data is stored in managed, access-controlled databases with row-level security, encrypted in transit, and access to production data is restricted to authorised personnel. Integration credentials and API secrets are held in a dedicated secret store.

8. Your rights

Subject to applicable law you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Contact ask@airplaner.com and we will respond within the statutory time frame.

8b. Cookies and analytics

We use strictly necessary cookies and local storage to keep you signed in, hold your search, basket and currency/language preferences, and protect against fraud. We use limited first-party usage and performance logging to keep search and checkout fast and to diagnose errors. We do not sell personal data and we do not use it for third-party advertising profiling. You can clear cookies in your browser, though sign-in and checkout will not work without the necessary ones.

8d. Search and usage data

When you search for a hotel, flight or holiday package we record the search itself: the date and time, the product, the origin and destination, the travel dates, the number of rooms, guests or passengers, the filters and sort order you applied, your currency and language, the device type, whether you were on our public site or an agency portal, how many results we returned and which suppliers answered. If you are signed in, the search is linked to your account and, where relevant, your agency; if you are not signed in it is linked only to a random identifier stored in your browser. We store your IP address only in truncated form (for example 203.0.113.0/24), and never card data, passport data or traveller documents.

We use this to keep the service working and fast, to understand which destinations and routes customers want so we can add missing supply and negotiate better rates, and to make offers and results more relevant. The legal basis is our legitimate interest in operating and improving the platform, and, where required, your consent.

Search records are kept for 12 months by default and then deleted automatically. If your account is deleted, your search records are anonymised — the link to you is removed and only aggregate statistics remain. You may ask us for a copy of your search records, or object to this processing, at ask@airplaner.com.

8c. International transfers

Travel is global: to fulfil a booking we must send the traveller and contact details required by the airline, hotel or consolidator serving your itinerary, which may be located outside your country, including outside the EEA/UK. Our hosting, payment and email providers may also process data in other countries. Where required we rely on appropriate safeguards such as standard contractual clauses, and we transfer only the data the supplier needs to deliver the service.

9. Changes

We may update this policy; the date above shows the latest version and material changes will be notified in the application.