Legal

Privacy Policy

Last updated October 1, 2026

Introduction

JetManager AG ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal data when you use our platform ("Service"). We comply with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data Controller

The entity responsible for processing your personal data in connection with your account and subscription is:

  • –JetManager AG
  • –Weinbergstrasse 20A, CH-8802 Kilchberg, Switzerland
  • –mail@jetmanager.aero

Categories of Personal Data We Process

There are two distinct categories of personal data in our Service:

  • –Account Data: Personal data you provide directly when registering, creating, and managing an account (e.g., name, email address, phone number, company details, login credentials, billing information).
  • –Customer CRM Data: Personal data you upload into the CRM platform as part of your business operations (e.g., details of your clients, partners, employees, contacts, and aviation-related CRM records). Customer CRM Data may include passenger health information (e.g., allergies or mobility requirements) where you choose to record it. It is processed only to provide the Service and receives the same protections as all Customer CRM Data.

How We Use Personal Data

  • –Account Data: We process this data to provide access to the Service, manage your subscription, provide support, maintain security, and comply with legal obligations.
  • –Customer CRM Data: We process this only on your behalf and in accordance with your instructions, and never for our own purposes such as analytics or AI training. Personnel access conditions and safeguards are set out in full in our Data Processing Agreement.

Multi-Tenancy and Data Separation

Our CRM platform is built on a multi-tenant architecture. This means multiple customers use the same underlying infrastructure. However:

  • –Each customer's CRM Data is logically separated and protected.
  • –Security and access controls ensure that your CRM Data is never accessible to other customers.

Data Storage and Subprocessors

We use a limited number of subprocessors (e.g., hosting and infrastructure providers) to deliver the Service, each contractually bound to protect data and act only on our instructions. The current subprocessor list, storage location, and international transfer safeguards are set out in full in our Data Processing Agreement.

Legal Basis for Processing

We process personal data on the following bases:

  • –Performance of a contract (providing the Service)
  • –Compliance with legal obligations
  • –Legitimate interests (e.g., improving security, preventing abuse)
  • –Consent, where required (e.g., marketing communications)

Data Retention

  • –Account Data: Kept as long as your account is active and thereafter as required by law (e.g., billing records).
  • –Customer CRM Data: Kept only while your subscription is active. Export and deletion timelines after termination are set out in our Data Processing Agreement.

Your Rights

You have the following rights under FADP and GDPR:

  • –Right to access, rectify, or erase your personal data
  • –Right to restrict or object to processing
  • –Right to data portability
  • –Right to withdraw consent (where processing is based on consent)

For Account Data, you can exercise your rights directly with us. For Customer CRM Data, since you are the controller, individuals whose data you enter into the CRM must exercise their rights with you. We will support you, where technically possible, in fulfilling such requests.

Security Measures

We apply appropriate technical and organizational measures to protect personal data, including encryption, access controls, and monitoring. Full details are set out in our Data Processing Agreement.

Data Breach Notification

If a personal data breach occurs that may affect your rights or those of your clients, we will notify you without undue delay, in line with Swiss and EU requirements.

Third-Party Services

Our Service may contain integrations with third-party tools. Their privacy practices are governed by their own policies.

Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or in legal requirements. Material changes will be notified in advance.