QC Aero is operated by Jetman Holdings Limited, incorporated in Kenya (PVT-PJUYEB9P), with offices at Wilson Airport, Nairobi, Kenya. We are the data controller for all personal data processed through the QC Aero platform.
For any privacy-related queries, contact us at legal@jetman.co.ke.
We collect two categories of data: account data that you provide directly, and operational data that you input as part of using the platform.
| Data Type | What We Collect | Why We Collect It |
|---|---|---|
| Account Data | Company name, email address, WhatsApp number, country, username | To create and manage your account, send you notifications and provide support |
| Billing Data | Payment method details (processed by our payment partners, not stored by us) | To process subscription payments |
| Operational Data | Aircraft configurations, rates, locations, quotes, invoices, client details you enter | To power the quoting and document management features of the platform |
| Technical Data | IP address at signup, browser type, login timestamps | To prevent abuse, secure your account and maintain platform integrity |
| Usage Data | Feature usage patterns, demo analytics (anonymous) | To improve the platform and understand how operators use it |
We use your data exclusively to provide and improve the QC Aero service. Specifically we use it to operate your account and deliver the platform features, process payments and send receipts, send you important service notifications, provide customer support, prevent fraud and abuse, and improve the platform based on usage patterns.
We do not use your data for advertising. We do not sell your data to third parties. We do not use your operational data (your clients, quotes, rates) for any purpose other than running your account.
Every operator on QC Aero runs in a completely isolated environment. Your data is stored under a unique tenant identifier in Google Firebase and is never accessible to other operators on the platform. No shared databases, no cross-tenant access, no exceptions.
Your data is protected by the following measures: tenant-level isolation in Google Firebase Firestore, daily automated backups with 14-day retention, point-in-time recovery with 7-day rollback capability, encrypted data in transit (HTTPS/TLS), and Google Firebase's enterprise security infrastructure.
We do not store payment card details. All payment processing is handled by our payment partners who maintain their own PCI-DSS compliance.
We share your data only with the following trusted service providers, and only to the extent necessary to operate QC Aero:
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase | Database, file storage, authentication | United States |
| Render | Application hosting | United States |
| Stripe | Payment processing | United States |
| JamboPay | Mobile payment processing (Kenya) | Kenya |
| Resend | Transactional email delivery | United States |
| Google Maps | Location search and coordinate resolution | United States |
We do not share your data with any other third parties. We never sell your data.
When you use QC Aero to manage client enquiries, you input your clients' names, contact details and booking information into the platform. You are the data controller for this client data. We process it only on your instructions as your data processor.
You are responsible for ensuring that you have the appropriate legal basis to store your clients' personal data in QC Aero and for informing your clients about how their data is handled.
We retain your account and operational data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days after the end of your last paid period, after which it is permanently deleted from our systems. Backups containing your data are retained for up to 14 days after deletion.
If you request deletion of your account before the 30-day period, we will permanently delete your data within 7 business days of your request.
Under the Kenya Data Protection Act 2019 and applicable data protection law, you have the following rights regarding your personal data: the right to access the personal data we hold about you, the right to correct inaccurate data, the right to request deletion of your data, the right to restrict how we process your data, and the right to data portability.
To exercise any of these rights, email legal@jetman.co.ke with the subject line "Data Rights Request". We will respond within 14 business days.
QC Aero uses session cookies to keep you logged in to your admin dashboard. We do not use advertising cookies or third-party tracking cookies. Our demo page tracks anonymous usage events (quote runs, PDF generations) to help us understand how the platform is being used. No personally identifiable information is captured in demo analytics.
QC Aero is a business tool intended for use by adults operating aviation businesses. We do not knowingly collect data from anyone under 18 years of age. If you believe a minor has created an account, please contact us at legal@jetman.co.ke and we will delete the account immediately.
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email to your registered address at least 14 days before the changes take effect. The current version of this policy is always available at qcaero.onrender.com/legal/privacy.
If you have a concern about how we handle your data, please contact us first at legal@jetman.co.ke. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.
Jetman Holdings Limited
Wilson Airport, Nairobi, Kenya
legal@jetman.co.ke