Privacy Policy
Comprehensive notice governing data protection, privacy rights, and compliance under Indian Data Protection Laws and DGCA Aviation Standards.
Entity Identification & Governance
Official corporate & legal fiduciary details
PREAMBLE AND SCOPE OF AGREEMENT
1.1 Introduction. This Privacy Policy (“Policy”) constitutes a legally binding notice. MyOnlineJet (operated by iAlpha Technologies Private Limited) (“Company,” “we,” “us,” or “our”) recognizes data privacy as a non-negotiable element of operational integrity, particularly within the high-trust domain of mobility and aviation infrastructure.
1.2 Acceptance. By accessing any platform, application, service, API, or physical touchpoint operated by MyOnlineJet (collectively, the “Services”), you, the Data Principal (“you,” “your,” or “User”), expressly acknowledge that you have read, understood, and agreed to be bound by the terms of this Policy. If you do not agree, you must immediately discontinue use of the Services.
1.3 Applicability. This Policy applies to all natural persons who are: (a) Visitors and registered users of our digital platforms; (b) Beneficiaries of our mobility or infrastructure services; (c) Representatives of business partners, vendors, and stakeholders; (d) Any individual whose personal data is collected in connection with our operations.
DEFINITIONS AND INTERPRETATION
Capitalized terms not defined herein shall have the meaning ascribed to them under applicable data protection laws. For the purpose of this Policy:
TYPES OF DATA COLLECTED AND PURPOSES OF PROCESSING
| Category | Specific Data Elements | Lawful Basis & Purpose |
|---|---|---|
| Identity & Contact Data | Full legal name, date of birth, email address, phone number, postal address | Contractual necessity (service delivery); Identity verification; Communication |
| Government & Verification Data | Government-issued ID numbers (PAN, Aadhaar, Passport), KYC status, biometric verification tokens | Legal obligation (anti-fraud, aviation security); Legitimate interest (safety) |
| Technical & Usage Data | IP address, MAC address, device fingerprints, browser type, operating system, session logs, clickstream data | Legitimate interest (security, fraud prevention, platform optimization) |
| Geolocation Data | Real-time precise location (GPS), altitude data, movement history, vertiport access timestamps | Consent (explicit opt-in); Contractual necessity (mobility service optimization) |
| Transactional & Financial Data | Payment instrument details (tokenized), billing address, transaction amount, invoice history, UPI reference IDs | Contractual necessity (payment processing); Legal obligation (tax reporting) |
| Operational Aviation Data | Booking manifests, flight preferences, weight and balance information, vertiport entry/exit logs | Legitimate interest (aviation safety, infrastructure planning) |
SENSITIVE PERSONAL DATA
- •(a) Explicit Consent: Affirmative consent obtained through a separate explicit opt-in mechanism; or
- •(b) Legal Mandate: Compliance with statutory legal obligations under aviation or anti-money laundering laws.
Such data is processed with enhanced security controls, including AES-256 encryption at rest, TLS 1.3 in transit, and strict multi-factor authentication access controls.
LEGAL BASES FOR PROCESSING
We process your personal data strictly under one or more of the following lawful grounds:
You have provided free, specific, informed, unconditional, and unambiguous consent for processing.
Processing is required to execute and fulfill our contractual obligations under the Terms of Service.
Processing is mandated by applicable Indian laws or regulatory authorities (e.g., DGCA directives, tax reporting).
Processing serves legitimate business interests (e.g., network security, fraud detection) without overriding your rights.
DATA SHARING, DISCLOSURE, AND THIRD-PARTY TRANSFERS
CROSS-BORDER DATA TRANSFER
Personal data collected from Indian Data Principals may be transferred to or processed on cloud servers located outside India strictly in compliance with Chapter III of the Digital Personal Data Protection Act, 2023. For any cross-border transfers, we mandate Standard Contractual Clauses (SCCs) and robust cryptographic protection.
DATA RETENTION AND DISPOSAL
We retain personal data only for the duration strictly necessary to fulfill declared operational purposes, plus mandatory statutory periods:
Upon expiry of retention thresholds, data is permanently erased or irreversibly anonymized using Department of Defense standard wiping protocols.
DATA SECURITY & BREACH PROTOCOLS
In the event of a confirmed personal data breach, MyOnlineJet will notify the relevant statutory authority (CERT-In / Data Protection Board) and affected Data Principals within 72 hours.
YOUR RIGHTS AS A DATA PRINCIPAL
| Right | Description | Limitations |
|---|---|---|
| Right to Access | Obtain confirmation and copy of your personal data | Cannot disclose trade secrets or data of other individuals |
| Right to Correction | Rectify inaccurate, incomplete, or outdated data | Must be accompanied by verifiable identity proof |
| Right to Erasure | Request permanent deletion of your data | Subject to statutory legal and regulatory retention obligations |
| Right to Withdraw Consent | Withdraw previously given processing consent | Withdrawal does not affect lawful processing conducted prior |
| Right to Grieve | File a complaint with the Company and Data Protection Board | Exhaustion of internal redressal mechanism is recommended |
contact@myonlinejet.com with subject “Data Principal Request – [Your Full Name]”COOKIES AND TRACKING TECHNOLOGIES
Our digital platforms utilize Strictly Necessary Cookies (essential for site operation and authentication), Functional Cookies, and Analytics Cookies (only with explicit consent). You may customize or revoke non-essential cookie preferences at any time via your browser settings.
CHILDREN’S PRIVACY
Our Services are strictly designed for individuals aged 18 and older. We do not knowingly collect personal data from minors. If we discover inadvertent collection of a minor's data, it will be deleted within 72 hours.
THIRD-PARTY LINKS AND SERVICES
The MyOnlineJet platform may contain hyperlinks to third-party partner sites or services. These entities operate as independent Data Fiduciaries. We encourage you to review their privacy notices as our Policy does not extend to third-party domains.
AMENDMENTS AND MODIFICATIONS
We reserve the right to amend this Policy as regulatory requirements evolve. Material revisions will be posted on our platform banner 30 days prior to taking effect and notified directly to registered accounts.
GRIEVANCE REDRESSAL MECHANISM
iAlpha Technologies Private Limited, Jaipur, Rajasthan, India - 302017
GOVERNING LAW AND JURISDICTION
This Policy shall be governed by and construed in accordance with the laws of the Republic of India. Any disputes arising hereunder shall be subject to the exclusive jurisdiction of the competent courts located in Jaipur, Rajasthan, India.
FINAL COMMITMENT AND CONTACT
MyOnlineJet operates at the convergence of mobility and technology. We treat your personal data with the same rigor, discipline, and safety standards we apply to aviation infrastructure operations. For any matter not explicitly addressed herein, please contact our legal team at contact@myonlinejet.com.
Legal Acknowledgement & Consent
BY CONTINUING TO USE MYONLINEJET'S SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE RECEIVED, READ, AND UNDERSTOOD THIS PRIVACY POLICY, AND YOU AGREE TO ITS TERMS. YOU PROVIDE YOUR FREE, SPECIFIC, INFORMED, AND UNCONDITIONAL CONSENT TO THE COLLECTION, PROCESSING, STORAGE, AND DISCLOSURE OF YOUR PERSONAL DATA AS DESCRIBED HEREIN.
Frequently Asked Questions
Clear answers regarding data protection and user privacy rights.
What information does MyOnlineJet collect?
MyOnlineJet collects identity & contact details, government verification documents (PAN, Aadhaar, Passport), technical usage logs, real-time geolocation, tokenized financial data, and operational aviation manifests strictly for service delivery and regulatory compliance.
How does MyOnlineJet use collected data?
Collected data is used to deliver mobility services, manage vertiport access, fulfill legal/aviation obligations (such as DGCA directives), enhance infrastructure security, and optimize our Advanced Air Mobility platform.
Is user data shared with third parties?
MyOnlineJet does not sell personal data. We only share data with regulatory & law enforcement authorities (e.g., DGCA), trusted ecosystem partners (eVTOL operators, vertiport landlords), and essential service providers (payment gateways, cloud hosting) under strict confidentiality agreements.
Does MyOnlineJet sell my personal information?
No. We do not, and will not, sell, rent, or trade your personal data to any third party for consideration or marketing purposes.
How long do you retain my data?
We retain personal data only for as long as necessary to fulfill operational purposes, plus statutory retention periods mandated under Indian law (e.g., financial records for 8 years under Income Tax Act; aviation passenger manifests for 5 years under DGCA regulations).
How can I request deletion or correction of my data?
Submit a request to contact@myonlinejet.com using the subject line "Data Principal Request – [Your Full Name]". We will acknowledge receipt within 24 hours and resolve your request within 30 calendar days.
Have Privacy or Legal Questions?
Our Data Protection Officer and Legal Team are available to assist with any inquiries regarding personal data processing or statutory rights.