Privacy Policy

PrivateJet.com  ·  Effective Date: March 13, 2026  ·  Last Updated: May 18, 2026

This Privacy Policy describes how PrivateJet.com ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our services, including our website at https://privatejet.com/, our AI-powered chat assistant, and our integrations with third-party AI platforms (collectively, the "Services").

By using our Services you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you express interest in our Services or contact us. This includes:

  • Contact information — name, email address, phone number
  • Travel preferences — departure/arrival airports, travel dates and times, number of passengers, preferred aircraft category, trip type (one-way, round-trip, multi-leg)
  • Booking inquiry details — special requests, additional notes submitted through our website or redirect forms
  • Communications — messages you send through our chat assistant or third-party AI platform integrations

Sensitive information. We do not process sensitive personal information.

1.2 Information Collected Automatically

We automatically collect certain device and usage information when you access our Services:

  • Device & browser data — IP address, browser type and version, operating system, language preferences, device name, hardware model, Internet service provider and/or mobile carrier, screen resolution
  • Usage data — pages visited, referring URLs, click paths, time on page
  • Session identifiers — temporary session IDs used to maintain your conversation state across requests; these are randomly generated, not linked to your identity, and expire automatically
  • Platform identifiers — when you access our Services through a third-party AI platform (e.g., ChatGPT, Claude.ai), we may receive an opaque client identifier provided by that platform solely for session continuity
  • Internal search identifiers — when you perform a flight search, our system generates a temporary flight_search_id used internally to associate your search parameters with pricing results and to build redirect URLs to our website. This identifier is not linked to your personal identity and is not included in data returned to AI platforms
  • Log data — server request logs including timestamps, request methods, and response status codes

1.3 Information from Third-Party Platforms

When you interact with our Services through third-party AI platforms (see Section 4), those platforms may transmit your query text to us. We do not receive your platform account details, login credentials, or payment information from these platforms.

2. How We Use Your Information

We process your information for the following purposes:

  • Service delivery — to search for flights, provide pricing estimates, display aircraft information, and facilitate booking inquiries
  • Communication — to respond to your inquiries, send booking confirmations, and provide customer support
  • AI-assisted responses — to generate relevant, context-aware answers to your travel questions via our AI chat assistant
  • Order fulfillment — to manage your booking inquiries, payments, returns, and exchanges
  • Service improvement — to analyze usage patterns, diagnose technical issues, and improve our Services
  • Security & fraud prevention — to protect our Services, detect and prevent fraud, and safeguard vital interests
  • Legal compliance — to comply with applicable laws, regulations, and legal processes

3. Legal Basis for Processing

3.1 EEA, UK & Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data based on:

  • Contract performance — processing necessary to provide the Services you requested (e.g., flight search, booking inquiries)
  • Legitimate interests — improving our Services, preventing fraud, and ensuring security, where these interests are not overridden by your rights
  • Consent — where you have provided explicit consent (e.g., marketing communications); you may withdraw consent at any time
  • Legal obligation — where processing is required to comply with applicable law
  • Vital interests — where processing is necessary to protect someone's vital interest

3.2 Canada

If you are located in Canada, we may process your information with your express or implied consent. In limited circumstances, we may process information without consent where permitted by law — for example, fraud investigation, breach of agreement, compliance with a subpoena or court order, or collection of a debt owed to us.

4. Third-Party AI Platforms & Service Providers

Our Services are accessible through multiple channels. The following third parties may process data in connection with your use of our Services:

4.1 AI Platform Providers

ProviderServiceData SharedPurpose
OpenAI (OpenAI, L.L.C.) ChatGPT — AI chat platform Your query text is processed through OpenAI's platform before reaching our Services Enables you to interact with our flight search tools within ChatGPT
Anthropic (Anthropic, PBC) Claude — AI assistant Your query text is processed through Anthropic's platform; also powers our website chat assistant Provides AI-powered responses on our website and via Claude.ai integration
Google Cloud Speech-to-Text (Chirp 3), Text-to-Speech (Gemini 2.5 Flash TTS, Chirp3-HD) Voice audio data — website only, not used in third-party AI platform integrations (ChatGPT, Claude.ai) Enables voice-based interaction with our website chat assistant

Your input, output, and personal information will be shared with and processed by these AI service providers to provide the Services. All personal information processed using our AI-powered features is handled in line with this Privacy Policy and our agreements with these third parties.

4.2 Business Service Providers

ProviderServiceData SharedPurpose
Salesforce (Salesforce, Inc.) Customer Relationship Management (CRM) Contact information, travel preferences, inquiry details Managing booking inquiries, customer communications, and follow-up
Google Analytics Website analytics Anonymized usage data, device information Understanding website traffic and usage patterns

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. You can also opt out via Google Ads Settings.

4.3 Infrastructure & AI Processing Providers

The following providers support our AI-assisted search capabilities. They process query data (search terms, aircraft names) but do not receive your personal contact information:

  • Qdrant — vector database for aircraft specification search
  • Voyage AI — search result relevance ranking
  • OpenRouter — text embedding generation for search queries

4.4 Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. MCP Protocol (Model Context Protocol)

When you access our Services through AI platforms like ChatGPT or Claude.ai, communication occurs via the Model Context Protocol (MCP), an open standard for connecting AI assistants to external tools. Our Services operate across two domains:

  • https://mcp.privatejet.com/ — our MCP server endpoint that receives and processes tool calls from AI platforms (flight searches, airport lookups, aircraft information queries)
  • https://privatejet.com/ — our main website where booking inquiries are completed after being redirected from the AI platform

Under this protocol:

  • The AI platform sends your travel search queries to our MCP server at https://mcp.privatejet.com/mcp
  • Our server processes the query (e.g., searches flights, looks up aircraft) and returns results
  • Results may include interactive UI widgets displayed within the AI platform
  • When you click "Inquire" or similar call-to-action buttons, you are redirected from mcp.privatejet.com to privatejet.com to complete your booking inquiry — we do not collect payment or detailed personal information within the AI platform

Session identifiers used within MCP are temporary, randomly generated, and automatically expire. They are not linked to your personal identity and are used solely to maintain conversation context within a single session. Internal identifiers such as flight_search_id are used to associate search parameters with pricing results and to build redirect URLs — they are stripped from all data returned to AI platforms and are never exposed to end users.

6. Data Sharing & Sale Disclosure

We have not sold or shared personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We do not sell your personal information. We share data with the service providers listed in Section 4 solely to operate and improve our Services.

7. Data Retention

  • Session data (session IDs, conversation context) — automatically deleted when the session expires or within 24 hours, whichever comes first
  • Booking inquiry data (contact info, travel preferences submitted through our website) — retained for up to 3 years to fulfill our contractual and customer service obligations
  • Server logs — retained for up to 90 days for security and diagnostic purposes
  • Analytics data — retained in aggregated/anonymized form as permitted by our analytics providers

When data is no longer needed for its stated purpose, we delete or anonymize it. You may request earlier deletion by contacting us (see Section 12).

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons and pixels) to gather information when you interact with our Services. Third parties and service providers may use their own tracking technologies to provide analytics and advertising about products and services tailored to your interests.

When you access our Services through third-party AI platforms (ChatGPT, Claude.ai), those platforms' own cookie policies apply — we do not set cookies within AI platform interfaces.

If you choose to remove or reject cookies, this could affect certain features or services of our website.

9. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

  • TLS/HTTPS encryption for all data in transit
  • OAuth 2.1 with PKCE for authenticated API access
  • Rate limiting to prevent abuse
  • Content Security Policy (CSP) headers for UI widget sandboxing
  • Input validation and sanitization on all user-supplied data

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. International Data Transfers

Our Services are operated from the United States. If you are accessing from outside the U.S., your information may be transferred to and processed in the United States or other countries where our service providers operate. We take appropriate safeguards (such as standard contractual clauses) to ensure your data is protected in accordance with this policy and applicable law.

11. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect, solicit data from, or market to children under 18. If we learn that we have collected data from a child under 18, we will promptly delete it and deactivate any associated account. If you believe a child has provided us with personal information, please contact us.

12. Your Rights & Choices

12.1 General Rights (EEA/UK/Switzerland/Canada)

Depending on your location, you may have certain rights regarding your personal information:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Deletion — request deletion of your personal data
  • Portability — request your data in a structured, machine-readable format
  • Restriction — request that we limit processing of your data
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, withdraw it at any time

12.2 United States — State-Specific Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have additional rights under applicable state privacy laws:

  • Right to know — whether we are processing your personal data
  • Right to access — obtain a copy of your personal data
  • Right to correct — fix inaccuracies in your personal data
  • Right to delete — request deletion of your personal data
  • Right to portability — obtain a copy of data you previously shared with us
  • Right to non-discrimination — you will not be treated differently for exercising your rights
  • Right to opt out — of the processing of your personal data for targeted advertising (we do not use your data for targeted advertising)

12.3 Data Categories Collected (Past 12 Months)

CategoryCollectedExamples
IdentifiersYesName, email address, phone number, IP address
Customer recordsYesName, phone number, travel preferences
Commercial informationYesBooking inquiry details, flight search history
Internet/network activityYesBrowsing history, search queries, interaction data
Geolocation dataNo—
Audio/sensory informationYesVoice audio (only when using voice chat features)
Professional informationNo—
Education informationNo—
InferencesNo—
Sensitive personal informationNo—

12.4 Exercising Your Rights

To exercise any of your rights, contact us at charter@privatejet.com or submit a request through our contact form. We will need to verify your identity before processing your request. We will respond within the timeframe required by applicable law (typically 30–45 days).

13. Do Not Track & Global Privacy Control

Some browsers transmit "Do Not Track" (DNT) signals. There is currently no universal standard for how websites should respond to DNT signals. We do not currently respond to DNT signals, but we limit tracking to what is described in this policy.

We will honor your opt-out preferences if you enact the Global Privacy Control (GPC) opt-out signal on your browser.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. We may notify you of material changes by prominently posting a notice on our website or by sending you a notification directly. Continued use of our Services after changes constitutes acceptance of the updated policy.

15. How to Review, Update, or Delete Your Data

You may request to review, update, or delete the personal data we have collected from you by submitting a request through our contact form or by emailing us at charter@privatejet.com.

16. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise your rights, contact us:

  • Email: charter@privatejet.com
  • Phone: +1 (954) 869-7191
  • Website: https://privatejet.com/contact-us/
→ Terms of Service