Privacy Policy

Last updated: 10 May 2026

JetDeclare is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR — EU 2016/679). This policy describes what data we collect, why and how we process it.

1. Data Controller

Identity: [TO FILL — Legal name / Company name]

Address: [TO FILL]

DPO / Contact:contact@jetdeclare.com

2. Data We Collect

Account data

Email address, password (hashed, never accessible in plain text), account creation date.

Declaration data

Flight information (dates, routes, aircraft, operators), crew and passenger details (names, date of birth, nationality, identity document/passport number). This data is required to generate ICAO forms.

Payment data

Payments are processed exclusively by Lemon Squeezy (Merchant of Record). JetDeclare does not store any banking data. We only retain: subscription status, Lemon Squeezy customer ID, renewal date.

Usage data (with consent)

Pages visited, session duration, browser type — collected via Google Analytics only after your explicit consent. IP address is anonymised.

Support data

Content of messages sent via the support or contact form.

3. Purposes and Legal Bases

Purpose	Legal basis
Account creation and management	Performance of contract
Generating ICAO forms	Performance of contract
Billing and subscription management	Performance of contract + legal obligation
Sending transactional emails (confirmations, invoices)	Performance of contract
Customer support	Legitimate interest
Statistical analysis (Google Analytics)	Consent

4. Sub-processors and Data Transfers

Supabase

Database, authentication, declaration storage

🟢 EU — Frankfurt, Germany

Lemon Squeezy

Payment processing and subscription management (Merchant of Record)

🟡 USA — DPA available

Resend

Transactional emails (confirmations, invoices)

🟡 USA — Covered by SCCs

Google Analytics

Anonymised audience analytics (only with consent)

🟡 USA — IP anonymisation enabled

🟢 EU/EEA = GDPR compliant | 🟡 Outside EU = covered by Standard Contractual Clauses (SCCs)

5. Retention Periods

Account data: until account deletion + 3 years (statute of limitations)
Declaration data: duration of active subscription + 1 year after cancellation
Billing data: 10 years (legal accounting obligation)
Analytics cookies: 13 months maximum
Support messages: 3 years from last interaction

6. Your Rights

Under the GDPR, you have the following rights:

✅ Right of access

Obtain a copy of your personal data.

✏️ Right of rectification

Correct inaccurate or incomplete data.

🗑️ Right to erasure

Request deletion of your data ("right to be forgotten").

📦 Right to portability

Receive your data in a structured, machine-readable format.

⛔ Right to object

Object to processing based on legitimate interest.

⏸️ Right to restriction

Restrict processing in certain circumstances.

To exercise your rights, contact us at contact@jetdeclare.com. We will respond within a maximum of 30 days. You may also lodge a complaint with your local data protection authority (e.g. ICO in the UK, CNIL in France).

7. Cookies

Essential cookies

Always active

Supabase authentication session. Required for the service to function and cannot be refused.

Analytics cookies (Google Analytics)

Consent required

Anonymised audience measurement. Loaded only after your explicit consent via our cookie banner. IP address is anonymised.

8. Updates

We reserve the right to update this policy at any time. Any material change will be notified by email or via an in-app notification at least 15 days before it takes effect.

Legal Notice Terms of Service Contact