Privacy Policy

1. Introduction

Revenant Collective (“we,” “us,” or “our”) operates Jettison Air, an invite-only charter aviation broker toolkit. This Privacy Policy describes how we collect, use, disclose, and protect information when you access or use the Jettison Air platform, including any associated websites, applications, and services (collectively, the “Platform”). By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password. Your password is stored in a securely hashed form and is never stored or accessible in plaintext. We also store your user role and display preferences (such as time format).

2.2 Waitlist Information

If you request early access, we collect your name, email address, and company name through our waitlist form. This information is used to evaluate your application and communicate access decisions.

2.3 Client and CRM Data

You may enter information about your clients, including name, email address, phone number, company, mailing address, notes, and preferred contact method. This data is entered by you and stored on your behalf to facilitate your charter brokerage operations.

2.4 Passenger Information

For trip planning and manifest purposes, you may enter passenger details including full legal name, date of birth, gender, weight, and passport number. This is sensitive personal information that we treat with the highest level of care. It is stored securely and accessible only to you within the Platform.

2.5 Trip and Booking Data

When you create trips, we store itinerary details, FBO selections, passenger assignments, pet information, catering preferences, ground transportation arrangements, lodging details, and pricing information including line items and payment tracking.

2.6 Generated Documents

The Platform generates documents such as quotes, itineraries, and invoices based on the trip data you provide. Document metadata (type, number, status) is stored in our database. Documents are generated on demand and are not separately uploaded or stored as files.

2.7 Feedback Data

If you submit feedback through the Platform, we collect the feedback type, title, and description. This information is used to improve the Platform and may be reviewed by our team.

2.8 Automatically Collected Data

When you use the Platform, we automatically collect certain technical information, including your IP address, browser user-agent string, session tokens, and timestamps. This data is used for authentication, security, and session management purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing, operating, and maintaining the Platform
• Authenticating your identity and managing your sessions
• Sending transactional emails, including account verification codes, password reset codes, and waitlist status notifications
• Generating documents (quotes, itineraries, invoices) on your behalf based on trip data you provide
• Responding to your feedback and improving Platform functionality
• Analyzing aggregate usage patterns to improve the Platform (if analytics are enabled)
• Protecting against unauthorized access, fraud, and abuse

4. Data You Enter About Third Parties

The Platform allows you to enter personal information about your clients and their passengers. You are solely responsible for ensuring that you have the appropriate authorization, consent, or legal basis to enter this information into the Platform.

Revenant Collective processes this third-party data on your behalf as a service provider and tool. We do not independently use, sell, or share client or passenger data for any purpose other than providing the Platform to you. You remain the controller of any third-party personal data you enter and are responsible for compliance with all applicable laws governing that data.

5. Cookies and Local Storage

Essential Cookies

We use a session cookie managed by our authentication system to keep you signed in. This cookie is essential for the Platform to function and cannot be disabled.

Local Storage

We use your browser’s local storage to save your display preferences, such as your preferred time format. This data remains on your device and is not transmitted to our servers.

Analytics Cookies

We may use Google Analytics to collect anonymous usage data to help us understand how the Platform is used and to improve it. If enabled, Google Analytics may set its own cookies. We do not use advertising cookies or third-party tracking cookies.

6. Third-Party Services

We use the following third-party services to operate the Platform:

• SendGrid - for delivering transactional emails (your name and email address are shared with SendGrid for email delivery)
• Neon - for hosted PostgreSQL database services (all Platform data is stored using Neon's infrastructure)
• Google Analytics - for anonymous usage analytics, if enabled

We also retrieve aircraft photos from public APIs (PlaneSpotters and Wikimedia Commons) for display within the Platform. No user data is transmitted to these services.

7. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures, including:

• Invite-only access - new accounts require a valid invitation code
• Password security - all passwords are hashed using industry-standard cryptographic algorithms (scrypt)
• Session-based authentication - secure, time-limited session management
• Data isolation - each user can only access their own data; there is no cross-user data visibility
• Encrypted connections - all data in transit is protected via HTTPS/TLS

While we strive to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

8. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide the Platform to you. If your account is deleted, all associated data - including clients, passengers, trips, documents, and feedback - is permanently removed from our systems through cascading deletion.

Waitlist entries are retained until your application is processed or until you request removal. To request deletion of your account or any data, please contact us using the information in Section 11 below.

9. Your Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA), including:

• The right to know what personal information we collect, use, and disclose about you
• The right to request deletion of your personal information
• The right to non-discrimination for exercising your privacy rights

We do not sell your personal information to third parties. To exercise any of these rights, please contact us using the information provided in Section 11.

10. Children’s Privacy

The Platform is not directed at individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to promptly delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, through the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.