Privacy Policy | JetAxia

Jetaxia values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and share data from aircraft operators, vendors, and users of our Services, including how we handle billing and payment information.

1. Information We Collect

We collect information necessary to provide and improve our Services. This information falls into the following categories:

1.1 Account and Contact Information

When you create an account, we collect your name, email address, phone number, company name, and other contact details you provide. For vendors, we also collect business registration information, insurance details, and banking information necessary for payouts.

1.2 Operational and Transaction Data

We collect data related to service requests, including aircraft type, tail number, service location, requested services, scheduling preferences, and transaction history. This data is necessary to facilitate bookings and maintain records of completed services.

1.3 Payment and Billing Information

When you add a payment method or make a payment through Jetaxia, we collect:

Billing contact information: name, billing address, and contact details for invoicing purposes.
Limited card details: card brand (e.g., Visa, Mastercard), last four digits, and expiration date for display and identification purposes.
Payment identifiers: Stripe customer IDs and payment method IDs that allow us to process charges and refunds.
Invoice records: amounts, dates, services rendered, and payment status.

Important: Jetaxia does not collect or store full card numbers, CVV/CVC security codes, or full bank account numbers. All sensitive payment data is collected, encrypted, and stored directly by our payment processor, Stripe. Jetaxia uses only tokens and identifiers provided by Stripe to process payments.

1.4 Technical and Usage Data

We automatically collect technical data including browser type, device information, IP address, and usage logs. This data helps us maintain platform security, diagnose issues, and improve performance.

2. How We Use Data

Jetaxia uses collected data for the following purposes:

Account management: Creating and managing customer and vendor accounts, verifying identity, and maintaining account security.
Service facilitation: Connecting operators with vendors, scheduling services, and communicating booking confirmations and updates.
Billing and payments: Issuing invoices, processing payments, managing billing preferences (per-job vs. weekly invoicing), handling refunds, and reconciling accounts.
Vendor payouts: Calculating vendor compensation, processing payout transfers, and maintaining payout records.
Fraud prevention: Detecting and preventing fraudulent transactions, unauthorized access, and abuse of the platform.
Platform improvement: Analyzing usage patterns to improve features, fix bugs, and enhance user experience.
Communications: Sending transactional emails (confirmations, invoices, receipts), account notices, and, where permitted, promotional communications.
Legal compliance: Meeting tax, accounting, and regulatory requirements, and responding to legal requests.

3. Data Sharing

Jetaxia shares data only as necessary to provide our Services and as described below. We do not sell your personal data.

3.1 Stripe (Payment Processor)

We share necessary information with Stripe, Inc. to process payments, store payment methods, issue refunds, and manage vendor payouts. Stripe acts as a data processor and sub-processor under our instructions. Stripe's handling of your data is governed by their Privacy Policy. For more information about Stripe's security practices, see Stripe Security.

3.2 Vendors

We share limited information with vendors to fulfill service requests, including customer contact information, aircraft details, service location, and booking specifics. We do not share your full payment card or bank account information with vendors.

3.3 Service Providers

We may share data with other third-party service providers who assist with analytics, email delivery, customer support, and infrastructure hosting. These providers are contractually required to protect your data and use it only for the services they provide to us.

3.4 Legal and Regulatory

We may disclose information to professional advisors, regulators, law enforcement, or other parties when required by law, court order, or to protect our rights, safety, or property, or that of our users or the public.

4. Cookies and Tracking

Jetaxia uses minimal analytic cookies to improve platform performance and measure engagement. We also use essential cookies required for authentication and security. You can disable non-essential cookies in your browser settings without losing account access, though some features may be affected.

5. Data Retention

We retain different types of data for different periods:

Account data: Retained while your account is active and for a reasonable period after closure to handle any outstanding matters.
Billing and transaction records: Retained for at least 7 years to comply with tax and accounting requirements and to support dispute resolution.
Technical logs: Retained for 90 days for security and debugging purposes.

You may request deletion of your data by contacting privacy@jetaxia.com. Note that some data cannot be fully deleted if it must be retained for legal, tax, or legitimate business purposes, but we will minimize its active use and restrict access.

6. Security

We take data security seriously and implement multiple layers of protection:

Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
Access controls: We use secure authentication, role-based permissions, and restrict access to billing data to authorized personnel only.
PCI compliance: All card and bank account data is handled by Stripe, which maintains PCI-DSS Level 1 certification, the highest level of payment security compliance. Jetaxia uses only tokens and identifiers rather than raw card numbers.
Monitoring: We continuously monitor for security threats and promptly address any identified vulnerabilities.

While no system is perfectly secure, Jetaxia continuously improves its safeguards to meet or exceed industry standards.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your data, subject to legal retention requirements.
Portability: Request a machine-readable copy of your data.
Withdraw consent: Where processing is based on consent, withdraw that consent at any time.

To exercise these rights, contact us at privacy@jetaxia.com.

8. Updates to Policy

Jetaxia may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated through the platform or email notice. Your continued use of Jetaxia after such changes constitutes acceptance of the updated policy.

9. Contact Us

For questions about this policy, data handling, or to exercise your privacy rights, reach us at privacy@jetaxia.com