Privacy Policy

1. General Provisions

1.1. This Privacy Policy governs how personal data of JetJoin platform users is collected, stored, processed and shared.

1.2. By using the JetJoin platform, the website https://jetjoin.app and the JetJoin mobile app, the user confirms their acceptance of this Privacy Policy.

1.3. This Policy has been prepared in accordance with the laws of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.

2. About the Platform

JetJoin is a digital platform for organizing air deliveries between users.

Platform operator: Mirzagaly LLP, BIN 200340013995, 99E Kali Nadyrov St., Karagaily microdistrict, Nauryzbay district, Almaty, 050069, Republic of Kazakhstan.

Email: support@jetjoin.app

3. What Data We Collect

3.1 Personal data:

• full name;
• phone number;
• email;
• ID card or passport details;
• profile photo;
• selfie and biometric data for KYC verification;
• date of birth;
• country of residence.

3.2 Flight and order data:

• flight number;
• route;
• flight date;
• country of departure and destination;
• information about parcels and deliveries;
• parcel photos (the Sender’s photo and the acceptance photo) and the results of their automatic and manual review;
• information about order cancellations and late cancellation compensations;
• messages in the built-in chat and their automatic translation.

3.3 Payment data:

• bank card details (number, expiry date) are processed directly by the payment provider Freedom Pay and are not stored on JetJoin servers;
• instead of the card number, JetJoin receives and stores only a secure digital token;
• transaction history and status (date, amount, status, order number), including late cancellation compensations.

3.4 Technical data:

• IP address;
• cookies;
• device type;
• operating system;
• browser data;
• device language;
• push notification tokens;
• crash logs and analytics.

4. Purposes of Processing

JetJoin processes personal data for:

• user registration and authorization;
• identity verification (KYC/AML);
• ensuring user safety;
• fraud prevention;
• automatically checking that the parcel matches the stated description and photo (including with artificial intelligence) and manual review by a moderator;
• organizing interaction between users;
• processing orders, deliveries and payments;
• calculating and charging late order cancellation compensation;
• compliance with legal requirements;
• improving the service;
• technical support;
• sending notifications about order status, departure and other events (including push notifications);
• analytics and platform monitoring.

An automatic photo check is not a final decision: if the result is negative, the order is passed to a moderator for review, and the user can contact support at support@jetjoin.app.

5. Sharing Data with Third Parties

We do not sell users’ personal data.

Data may be shared with:

• government authorities upon lawful request;
• the payment provider Freedom Pay — to process payments, link cards and make settlements in line with the PCI DSS security standard;
• IT contractors;
• hosting providers;
• analytics services;
• the KYC/AML verification provider Sumsub;
• SMS and email notification services;
• automatic message translation services (when the built-in translator is used).

6. KYC and AML Checks

To keep the platform secure, JetJoin may carry out user identity verification procedures.

Verification may involve identity documents, biometric checks, selfie/liveness verification and AML checks.

Verification is performed by the third-party provider Sumsub.

7. International Data Transfers

Some JetJoin services and contractors, including the payment provider Freedom Pay and the verification service Sumsub, may process data outside the Republic of Kazakhstan.

JetJoin takes reasonable measures to ensure that cross-border data transfers are secure and lawful.

8. Data Retention

Data is stored in secure data centers using technical and organizational security measures for as long as the account exists and for the periods required by law.

Some data may be retained after account deletion where required by AML/KYC and other legal requirements.

9. User Rights

The user has the right to:

• receive information about their data;
• request correction of their data;
• request deletion of their account;
• withdraw consent to data processing;
• make inquiries about data processing.

Requests are accepted at: support@jetjoin.app

10. Account Deletion

The user can request account deletion in the JetJoin mobile app (Profile → Account details → Delete account) or by sending a request to support@jetjoin.app.

After the account is deleted, some data may be retained where required by the laws of the Republic of Kazakhstan and AML/KYC requirements.

11. Cookies

JetJoin uses cookies for: proper platform operation; authorization; analytics; security; interface personalization.

The user can restrict the use of cookies in their browser settings.

12. Security

JetJoin uses: SSL encryption; tokenization of bank card data through the certified provider Freedom Pay; restricted access to data; internal security policies; secure servers and infrastructure.

Despite these measures, absolute security of data transmission over the internet cannot be guaranteed.

13. Changes to the Policy

JetJoin may update this Privacy Policy.

The current version is always available at: https://jetjoin.app/privacy