Privacy Policy

1. Who controls your data

Vendaxis, operating the Jetvor platform, is the data controller. Contact privacy@jetvor.com with any question about this policy or to exercise the rights described below.

2. What we collect

Information you give us

• Account details: name, email address, phone number, country code.
• Company details (suppliers): legal name, trading name, registration number, tax identifier, address, website.
• Verification documents (suppliers): trade licences and quality approvals such as AS9120, FAA Part 145 or EASA Part 145 certificates.
• Commercial content: listings, requests for quotes, quotes, orders, messages, and attachments you upload.
• Payment details: bank account information for supplier payouts. Card details, where applicable, are handled by our payment provider and are not stored on our systems.

Information we collect automatically

• IP address and browser user-agent, recorded against sign-in sessions.
• Application logs of actions taken, for security and troubleshooting.
• A strictly necessary session cookie. See our cookie policy.

Passwords are never stored. We keep only a salted scrypt hash, from which the original password cannot be recovered.

3. Why we use it

• To provide the service, routing RFQs to suppliers, creating orders, issuing invoices. Legal basis: performance of a contract.
• To verify suppliers, reviewing certifications so buyers can trust who they are dealing with. Legal basis: legitimate interest in marketplace integrity, and safety.
• To secure the platform, rate limiting, session records, and fraud detection. Legal basis: legitimate interest.
• To communicate, transactional notifications about your requests, quotes and orders. Legal basis: performance of a contract. Marketing email, if any, is sent only with consent and can be withdrawn at any time.
• To meet legal obligations, tax and accounting records. Legal basis: legal obligation.

We do not sell personal data, and we do not use it for advertising profiling.

4. Who we share it with

• The counterparty to a transaction. When you submit a quote, the buyer sees your company identity and quote details. When you accept a quote, the supplier receives the information needed to fulfil the order.
• Infrastructure providers that host the platform and deliver our email, acting on our instructions under contract.
• Payment providers, where a transaction is settled on-platform.
• Authorities, where we are legally required to disclose.

5. How long we keep it

• Account and company records: while your account is open, then 12 months.
• Orders, invoices and transaction records: 7 years, to meet accounting and tax obligations.
• Sign-in session records: 30 days after expiry.
• Read notifications: 90 days.
• Verification documents: while your account is open, then 24 months.

6. Your rights

Subject to applicable law, you may request access to your data, correction of inaccurate data, deletion, restriction of processing, a portable copy, or object to processing based on legitimate interest.

Write to privacy@jetvor.com. We respond within 30 days. Note that we cannot delete records we are legally required to keep, such as issued invoices.

7. Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Passwords are hashed with a deliberately slow key-derivation function. Sessions are recorded server-side and can be revoked individually. Sensitive values are redacted from application logs.

No system is perfectly secure. If a breach affecting your data occurs, we will notify you and the relevant authority as required by law.

8. International transfers

The platform serves an international market, so your data may be processed outside your country of residence. Where that happens, we rely on appropriate safeguards such as standard contractual clauses.

9. Children

Jetvor is a business platform and is not directed at anyone under 18. We do not knowingly collect data from children.

10. Changes

We will post any update here and, where the change is material, notify you directly.