Privacy Policy

1. Introduction

Welcome to MyAeroDeal ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how Glintero LLC-FZ collects, uses, shares, and protects your personal information when you use our business jet sales and acquisition CRM platform available at myaerodeal.com (the "Service").

This Privacy Policy applies to all users of MyAeroDeal, including free trial users, subscribers, and visitors to our website.

2. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Contract Performance: Processing is necessary for the performance of our contract with you (Article 6(1)(b) GDPR)
• Legitimate Interests: Processing is necessary for our legitimate business interests (Article 6(1)(f) GDPR)
• Legal Obligation: Processing is necessary to comply with legal obligations (Article 6(1)(c) GDPR)
• Consent: Where you have given explicit consent for specific processing activities (Article 6(1)(a) GDPR)

3. Information We Collect

3.1 Information You Provide Directly

Account Information:

• Full name
• Email address
• Phone number
• Company name and details
• Job title and role
• Billing information (processed by our payment provider)
• Profile photograph (optional)

CRM Data You Input:

• Lead information (names, companies, contact details, preferences)
• Aircraft details (specifications, pricing, locations)
• Deal information (values, closing dates, statuses)
• Task and calendar data
• Notes and communications
• File uploads (specifications, documents)

3.2 Information Collected Automatically

Technical Information:

• IP address
• Browser type and version
• Device information
• Operating system
• Time zone and locale settings

4. How We Use Your Information

We use your personal data for the following purposes:

• Service Provision: Creating and managing your account, providing access to CRM features, storing and syncing your data
• Communication: Sending transactional emails, responding to support requests, providing important service updates
• Service Improvement: Analyzing usage patterns to improve features, conducting research and development
• Legal and Security: Preventing fraud and abuse, enforcing our Terms and Conditions, complying with legal obligations

5. Data Sharing and Disclosure

We do not sell your personal data. We share your information only with trusted third-party service providers:

• Supabase: Database and authentication (USA)
• Vercel: Hosting (USA)
• Stripe: Payment processing (USA/EU, PCI DSS compliant)
• Anthropic: AI assistant features (USA)

All service providers are bound by data processing agreements and must comply with GDPR requirements.

6. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right to Access: You can request a copy of all personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Lodge a Complaint: You can lodge a complaint with your local data protection authority

7. Data Security

We implement industry-standard security measures:

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Regular security audits
• Multi-factor authentication (MFA)
• Role-based access control (RBAC)

8. Contact Us

9. Acceptance

By using MyAeroDeal, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.