Privacy Policy

• Booking details — your booking reference (PNR) and last name — only when you choose to check a specific booking's upgrade eligibility.
• Questions you ask about upgrades and travel programs.
• Non-identifying usage data — e.g. the operator you asked about, the eligibility status returned, and quality signals — used to improve the service. This never includes your PNR or last name.

Secure form (default). When the assistant shows the inline eligibility form, your booking reference and last name are entered in that form and sent directly to our eligibility service over HTTPS. They are not shared with the AI assistant, the model, or its provider (e.g. OpenAI or Anthropic), and they do not appear in your chat transcript. They are used only to perform the eligibility lookup and are then discarded — we do not store or log your PNR or last name. We retain only a one-way cryptographic hash (to rate-limit repeat attempts) and the non-identifying result, in a session that expires automatically after about 30 minutes.

If you type them into the chat instead. If you type your booking reference or last name directly into the conversation rather than the secure form, that text is part of your chat and is processed by the AI host (e.g. OpenAI/ChatGPT or Anthropic/Claude) under their privacy policies. Even then, we use those details only for the lookup and do not store or log them. We recommend using the secure form when it appears.

Booking details are used solely to check upgrade eligibility through Plusgrade's eligibility service and to show you the resulting options. We do not use your data for advertising, and we do not sell it. We do not use your data to train AI or machine-learning models.

• Plusgrade's eligibility service — the upgrade-technology provider that performs the booking lookup. Your booking details are sent there to return your eligibility.
• The operator's offer page — if you choose to continue to place or manage an offer, you are taken to the airline/operator's own secure page, where bidding and payment occur under their terms. We do not process payments.

We do not sell personal data or share it with third parties for their own marketing.

The Upgrade Agent app for AI assistants is designed to be privacy-protective by default:

• Booking credentials entered in the secure form are never exposed to the model, the chat transcript, or the assistant's provider.
• We do not use your data to train any AI model.
• Data sent to the app is limited to what is needed to answer your request (data minimization); we do not request or collect data we don't need.
• The app does not access your AI-assistant account, chat history, or other connected apps — only the specific request you make to it.
• We do not build advertising profiles and do not sell data.
• We operate in accordance with the applicable AI platform's developer policies and usage requirements.

Booking reference and last name are not retained — they are used transiently for the lookup and discarded. Eligibility sessions (which hold only a one-way hash and the non-identifying result) expire after about 30 minutes. Non-identifying usage data is retained to operate and improve the service. Data is transmitted over HTTPS; access is restricted.

Providing booking details is optional — you can ask general upgrade questions without them, and simply not enter a PNR if you prefer. For any privacy question or request regarding data handled by Upgrade Agent, contact us below.

Upgrade Agent is not directed to children and does not knowingly collect data from children.

We may update this policy; material changes will be reflected by the “last updated” date above. Questions or requests: ai@plusgrade.com.