Privacy Policy

Effective Date: [ ] [ ], 2025

Welcome to use PlaneStayz!

This Privacy Policy (“this Policy”) describes how we collect, use, share, store and respect your Personal Information in connection with the PlaneStayz hangar booking website, application (collectively, the Platform”), and relevant services (collectively, our Services”). Please read this Policy carefully so that you can make appropriate decisions on an informed and freely given basis.

PLEASE NOTE, IF YOU CONTINUE USING OR ACCESSING OUR SERVICE, YOU WILL BE DEEMED THAT YOU HAVE FULLY UNDERSTOOD AND ACCEPTED, AND IS WILLING TO COMPLY WITH ALL THE FOLLOWING CLAUSES, AND THIS TERMS SHALL BECOME EFFECTIVE BETWEEN YOU AND US. IF YOU DISAGREE WITH THIS TERMS IN WHOLE OR PART, YOU SHALL IMMEDIATELY STOP USING OUR SERVICES.

1.  Definitions

Unless otherwise provided in this Policy, the capitalized terms shall have the same meanings as those defined in the Terms & Conditions.

Data Protection Law means any applicable law, rule, regulation, directive, or decree issued or enacted by any local, state, provincial, national, or supra-national government, court, agency, or authority, relating to data security or privacy.

“Personal Information” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as: a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

2.  Who Controls Your Personal Information

JetSheds Limited (hereinafter referred to as “PlaneStayz”, “we” or “us”), registered at [Room 509, The Cloud, 111 Tung Chau Street, Tai Kok Tsui, Kowloon, Hong Kong], usually act as the data controller of your Personal Information when processing it in connection with the services we provide.

However, as described in the “How We Use the Information We Collect” section of this Policy, we may disclose your Personal Information to third parties, such as hangar suppliers or financial institutions, for the purpose of enabling them to comply with their own legal obligations, including but not limited to Know Your Customer (KYC), Anti-Money Laundering (AML), and sanctions screening requirements. In such cases, where the relevant third party requires information about you or other individuals provided by you, they will act as independent data controllers of the Personal Information they receive. They determine the purposes and means of processing such data for their own compliance obligations and will process that data in accordance with their own privacy policies and applicable laws.

3.  Personal Information We Collect

We will collect the following types of Personal Information in providing our Services. If you fails to provide certain types of information, you may not be able to use all or part of our Services.

3.1. Personal Information you provide to us

a. Account Registration Information. To use our Services, you are required to register an account using your email address. During the registration process, you may choose to provide additional information depending on your role. This may include, without limitation, your full name, billing address, identification number, company information (including company name, tax identification number/business registration number, if applicable), a nickname (as provided by you), and plane information (including type of the aircraft, registry, MTOW, if applicable).

If you fail to provide this additional information, you can browse products on the Platform; however, to access certain features (such as viewing detailed product pages or making reservations), you will be required to provide the aforementioned information.

We may collect data you provide or manage within your user account, such as personal setting, uploaded photos, your reviews, and other users you have added.

b. Lessor Application Information. If you apply to be a lessor to list your hangar resource on the Platform, you may provide your email address, phone number, company name, documentation verifying your lease authorization, the hanger location and other hangar-related details that do not identify you as an individual.

c. KYC and AML Information. To make or receive payment for our Services, you may be required to provide certain Personal Information to enable us to comply with applicable financial regulations, including KYC and AML requirements imposed by our payment service providers and banking partners. We will inform you in writing, as required by banks or service providers, of the information you need to provide, as well as the manner and purpose of our processing.

d. Financial Information. We collect data necessary for payment and invoicing purposes, which may include your full name or legal entity name, billing address, bank name, bank account number or IBAN, SWIFT/BIC code, tax identification number (such as VAT number or business registration number), and any other information required to issue compliant invoices or process cross-border payments.

e. Contact Details. We may collect your contact details (as voluntarily provided by you), such as email address and phone number if you make a reservation, participate in a promotional event or survey, or contact us for Customer support.

f. Review Information. If you submit a review about your reservation experience on the Platform, we will collect the content of your review, along with your nickname and avatar (if you choose to provide one).

3.2. Personal Information you provide to us about others

To use our Services, you may provide us with Personal Information of other individuals (such as your employees, passengers, crew members, clients, or other parties) as set forth in this clause. By providing such Personal Information, you represent and warrant that, (i) you have informed these individuals about our use of their Personal Information in accordance with this Policy; and (ii) you have obtained all necessary consent as required by applicable Data Protection Law.

a. Co-manager Information. As an admin user, you may invite other users to jointly manage reservation orders, access premium services, or administer hangar resources. In such cases, you will be required to provide their email addresses.

b. Due Diligence Information. To make a hangar reservation, certain Suppliers may require specific Personal Information to ensure that accepting your reservation dose not violate any Applicable Laws or international sanctions. Depending on the applicable legal requirements, the following Personal Information (as applicable) may be requested by Suppliers and shared by us on your behalf: (i) crew member full names, roles, nationality, gender, passport or identification number, qualifications, license numbers, flight itinerary, travel route and intended purpose of travel (collectively, “Crew Information”); (ii) passenger full name, nationality, gender, passport or identification number travel route and intended propose of travel (collectively, “Passenger Information”); (iii) aircraft tail number, flight number, arrival and departure airports and times, seat allocation, crew and passenger manifest (collectively, “Flight-Related Information”); (v) visa information, customs declarations, travel history, health or vaccination records (collectively, “Travel Documentation”).

3.3. Personal Information we collected automatically

a. Technical Information. The technical information about the devices and/or browsers you use to access the Platform may be automatically collected. This may include your IP address, precise or approximate location (if you enable this through settings or device permissions), mobile model, device operating systems, language settings, device settings, device identifiers (e.g., AdID (Android), IDFA (iOS), MAC address), and other browse settings/preference, etc. (collectively, “Log Data”). The Log Data is stored by us and used to identify each unique visit to the Platform, establish and maintain the technical connection to the Platform, and to provide you with better browsing experience.

b. Cookies. We use cookies and other similar technologies (“Cookies”) to enhance your experience using the Platform. Cookies are small files which, when placed on your device, enable us to provide certain features and functionalities, such as to store user settings, record access figures as well as monitor usage patterns and statistics. You may choose to disable Cookies; however, please note that certain parts of our Services that require Cookies to function—such as features requiring user login—may become unavailable.

3.4. Personal Information we collected from other sources

a. Transaction Information. We integrate with third-party payment service providers, such as Stripe, to facilitate electronic payments between you and us. In order to process your reservation orders, premium subscriptions, or refund requests, we may receive transaction records from these third party service providers. Such records may include your user ID, country, currency, payment amount, purchased product, IP address, and transaction details linked to the aircraft.

b. Communication Information. The Platform includes communication services such as email and chat messaging, through which you can contact the Platform. We collect and process the content of these communications as part of our Services. We may block the delivery of communications that we, in our sole discretion, believe contains malicious or unlawful content, or poses a risk to you, to us, or to others.

c. Aggregated Marketing Data. We may also receive information (e.g., the additional cookie data provided to us on an aggregated basis by our marketing partners) to measure the effectiveness of our advertising and marketing campaigns. This data typically does not allow us to identify you personally.

d. Complaint Information. We collect information in the cases that we receive a complaint about you from a Supplier or a Customer, or where a dispute or other issue arises in connection with a hangar reservation.

4.  How We Use the Information We Collect

We use the Personal Information described above for the following purposes, in accordance with the legal basis under applicable Data Protection Law:

a. Providing you with access to and functionality of the Platform. This includes, but is not limited to, enabling you to register an account, make reservations, release hangar resources, make and receive payments, receive messages and notifications from us.

Legal basis: Performance of a contract.

b. Providing Customer service. This includes responding to your inquiries, addressing complaints, assisting with the exercise of your data protection rights, and providing general support related to your use of the Services.

Legal basis: Performance of a contract.

c. Facilitating and managing transactions between users. This includes processing booking information, generating invoices, tracking payment status, verifying hangar availability and condition, resolving reservation-related issues or disputes, and coordinating communication between hangar owners and renters.

Legal basis: Performance of a contract.

d. Comply with legal and regulatory obligations. This includes compliance with Applicable Laws and regulations regarding KYC requirements, AML obligations, tax reporting and financial record-keeping, as well as responding to valid requests from law enforcement or regulatory authorities.

Legal basis: Compliance with a legal obligation.

e. Ensure Integrity and Security of the Platform. This includes fraud detection and prevention, account authentication, abuse monitoring, and safeguarding user accounts and our technical systems.

Legal basis: Our legitimate interests in maintaining platform security and preventing misuse.

f. Advertising and Marketing (if you permit). This includes analyzing your online activities for advertising purposes, sending you promotional, advertising, and marketing communications, and providing information that may be of interest to you.

Legal basis: Your consent.

g. Pursuing our legitimate interests (or those of a third party) as we deem fit and necessary, where your interests and fundamental rights do not override those interests. Such purposes includes:

Understanding, improving, and developing our Services, including analyzing usage patterns and user behavior, diagnosing technical issues, enhancing performance, launching new features, and tailoring the user experience.

Conducting internal research and quality assurance activities.

Responding to complaints, legal proceedings, arbitration, regulatory inquiries, or dispute resolution processes.

Legal basis: Pursuing our legitimate interests.

5.  How We Share Your Personal Information

We may share your information (which may include Personal Information) with third parties in accordance with Applicable Laws and only for the purposes described in this Policy. These third parties may include:

a.  Hangar providers and other users

When you make or receive a reservation, we may share relevant information with the other party to the transaction (e.g., your name, contact details, reservation details, payment status, and other information as described in the "Due Diligence Information" section above) as necessary to facilitate the booking, perform sanction compliance check, communication, and dispute resolution.

b. Payment service providers and financial institutions

We work with third-party payment processors (such as Stripe) to handle payment collection, disbursement, and currency conversion. We may share your Personal Information, such as your name, company information, transaction details, and payment method, with these service providers or financial institutions (e.g., acquiring banks, issuing banks, payment gateways) to complete payment processing and to prevent fraud.

c.  Identity verification and compliance partners

We may share your Personal Information with third-party service providers that assist us in verifying user identities, conducting background checks, performing KYC, AML, and sanction compliance checks, or complying with other legal or regulatory obligations.

d. Service providers and contractors

We engage third-party companies or individuals to provide services on our behalf, such as IT infrastructure, customer support, analytics, marketing services, or cloud hosting. and software development kit (SDK) providers that are integrated into our mobile or web applications. These SDK providers may collect certain technical or usage information (such as device identifiers, crash logs, or interaction data) directly through the Platform, for purposes such as analytics, error tracking, advertising attribution, or enhancing user experience.

Where applicable, we require such service providers to process your Personal Information in compliance with applicable Data Protection Law and only for the specified purposes on our behalf.

e.  Government authorities and legal compliance

We may disclose your Personal Information to courts, law enforcement agencies, regulatory authorities, or other public bodies when required to do so by applicable law, legal process, or enforceable governmental request, or when necessary to protect our rights or those of others.

f. Business transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your Personal Information may be shared with the acquiring or successor entity as part of the transaction, in accordance with Applicable Laws and subject to safeguards. In such event, we will notify you before your Personal Information is transferred and becomes subject to a different privacy policy.

g. With your consent

In some cases, we may share your Personal Information with third parties when you explicitly consent to such sharing. You may withdraw your consent at any time, subject to legal or contractual limitations.

PLEASE NOTE, we may also share information with third parties in an aggregate form, your identity will not able to be identified from such aggregate data.

6.  How We Protect Your Personal Information

We implement strict technical and organizational measures to protect your Personal Information against unauthorized access, disclosure, misuse, alteration, or destruction. These measures include data encryption, access controls aligned with industry standards, and internal procedures that restrict access to Personal Information to employees with a legitimate need-to-know, who are bound by confidentiality obligations.

Where we engage service providers that may access your Personal Information, we require them to meet privacy and security standards equivalent to ours. We use binding agreements and safeguards to ensure your information is handled securely and only for the purposes outlined in this Policy.

7.  Where We Store Your Personal Information

In order to provide you with our Services pursuant to our contract with you, your Personal Information will be processed and stored on secure servers located in [Singapore]. These servers are operated by [Alibaba Cloud International Ltd.], a service provider that has implemented internationally recognized security safeguards and holds certifications from reputable security and compliance frameworks.

Regardless of where your Personal Information is processed or stored, we apply appropriate technical and organizational measures to ensure its confidentiality, integrity, and security in accordance with this Privacy Policy and applicable data protection laws.

8.  How Long We Store Your Personal Information

We retain your Personal Information only for as long as necessary to provide the Services and as permitted under Applicable laws. For example, Due Diligence Information will be deleted promptly upon completion of the relevant checks, unless retention is required by Applicable Laws.

If you request to delete your Account, we will follow applicable legal and regulatory requirements and our internal policies to erase your Personal Information after retaining it for a limited period for the following purposes:

to reply to your inquiries;

to resolve disputes in relation with our Services;

to detect and deter fraudulent use of, or abuse of, our Services; or

to comply with Applicable Laws.

When determining the appropriate retention period for different categories of data, we also consider:

Whether you have control over data deletion through privacy settings on our platform. Where no such controls exist, we generally apply shorter retention periods;

Whether you have consented to a longer retention period;

Whether the information is sensitive in nature, in which case a reduced retention period may apply.

PLEASE NOTE, after the prescribed retention period, we may continue to store data in an anonymized or de-identified form, where individuals can no longer be identified.

9.  Your Rights and Controls

We would like to make sure you are fully informed of your rights as a data subject under applicable Data Protection Law. You are entitled to exercise the following rights regarding your Personal Information:

9.1. Right of access

You have the right to request us for copies of your Personal Information we hold about you. You may also access and update certain your Personal Information directly through your Account settings. It is your responsibility to keep your Personal Information accurate and up to date.

9.2. Right to rectification

You have the right to request correction of any inaccurate Personal Information or completion of incomplete data we hold about you.

9.3. Right to erasure

You may request the deletion of your Personal Information under certain circumstances, such as when you request deletion of your account. However, we may retain certain information where we have lawful grounds to do so, for example, to defend legal claims or comply with other legal obligations. If we retain your information after your request, we will inform you of the reasons.

9.4. Right to object

You have the right to object to the processing of your Personal Information based on our legitimate interests or for direct marketing purposes. For marketing communications, you may opt out by clicking the “unsubscribe” link in our emails.

9.5. Right to withdraw consent

If our processing relies on your consent, you may withdraw that consent at any time by adjusting your device or account settings. Please note that withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

If you wish to exercise any of these rights or have questions, please contact us using the details provided in the “Contact Details” section of this Policy. To protect your privacy, we may require you to verify your identity before fulfilling your request.

We will respond to your request without undue delay and generally within 30 days. If necessary, we may extend this period by up to two months, in which case we will notify you promptly with reasons for the delay. Normally, we provide these services free of charge unless requests are manifestly unfounded or excessive.

10. Changes to this Policy

We may amend this Policy from time to time, and we will post the amended version on our websites or application. When we make any material changes to this Policy, we will notify you on our Services, or by other reasonable means. Please check back periodically to ensure that you are aware of any changes, and your continued use of our Services will be deemed your acceptance of these changes.

11. Contact Us

If you have any questions about this Policy or our privacy practices, or if you wish to exercise your rights in respect of your Personal Information, please contact us in the following ways:

Full name of legal entity: [ JetSheds Limited ]

Email address: [ support@planestayz.com ]

If you are in the European Economic Area (EEA) or the UK, you may lodge a complaint with an applicable data protection authority for your country or region where an alleged infringement of applicable data protection law occurs.

12. Supplemental jurisdiction-specific terms

From time to time, we may publish additional privacy terms on the Platform that are specifically tailored to comply with the applicable data protection laws of certain jurisdictions (such as California, Nevada, or the European Union). These jurisdiction-specific terms shall supplement and, where applicable, prevail over this Policy in the event of any conflict.