Privacy Policy

Atlas operates a members network for private aviation, pairing travel platforms with private-jet operators. This Privacy Policy applies to our website at flyatlas.ai, our demo portal, and any related services, communications, and messaging programs we provide (together, the “Services”).

The Services include our charter platform, through which travel agencies and direct clients request, book, and manage private-jet trips.

By using the Services or providing your information to us, you agree to the practices described in this policy.

We collect the following categories of information:

• Contact information you provide — your name, email address, mobile phone number, company, and role — for example when you book a demo, request access, or opt in to SMS updates through the Atlas demo portal.
• Demo and trip information related to your use of the demo portal, such as demo trip requests, itinerary details, quote and availability preferences, and booking status.
• Passenger manifest data. When a trip is booked, the account holder (a travel agency or a direct client) provides passenger details for each passenger: full name, gender, nationality, and date of birth. On international flights, the account holder also uploads passport and visa or residency document images. We collect this information to fulfill the flight, including operator and border-control requirements.
• Client profile information. In connection with booked trips, we may process passenger identity details and trip facts such as aircraft flown, routes, estimated flight hours, departure-time patterns, catering and ground-transport preferences, and spend. These details help us maintain client records for the account holder’s own use, as described in Section 3.
• Linked mailbox data. If you choose to link an email mailbox to your Atlas dashboard (a Gmail or Outlook mailbox), we collect the mailbox identity — the linked email address. To provide the features described in Section 4, our systems also read message content and metadata such as sender, recipients, subject, and timestamps, but we retain only the charter-relevant details extracted from operator quotes and client flight requests. Other messages are discarded during processing and are not stored.
• Usage and device information — log data, IP address, browser type, pages visited, and similar diagnostics used to operate and secure the Services.
• Communications — records of your messages with us, including SMS opt-in and opt-out requests and customer-care correspondence.

We use the information we collect to:

• Provide, operate, and maintain the Services and your Atlas account;
• Fulfill booked flights, including sharing passenger manifest data with the operating carrier as needed for that flight;
• Build and maintain client profiles (CRM records) for the account holder's organization, as described below;
• Generate advisory preference summaries and assist with parsing (for example, mapping columns of uploaded contact files) using AI tools, as described in Section 7;
• Send account-related and trip-related notifications, including by SMS where you have opted in;
• Respond to your inquiries and provide customer support;
• Process demo trip requests and share relevant booking and availability updates;
• Improve, personalize, and secure the Services;
• Detect, prevent, and address fraud, abuse, or technical issues; and
• Comply with legal obligations and enforce our agreements.

Client profiles (CRM). Passenger identity details and trip facts may be used to build client records for the account holder’s own use. Those records are private to the account holder’s organization. They are never shared with aircraft operators, other customers, or third parties for their own purposes, and they are never sold. A direct client receives a single profile about themselves. Passport and visa images are never copied into client profiles.

Charter brokers and Atlas administrators may optionally link one email mailbox to their Atlas dashboard, using the mailbox provider’s OAuth authorization. We currently support Google Gmail and Microsoft Outlook. With both providers, our access to a linked mailbox is read-only. Linking is optional, and the rest of the Services work without it. When a mailbox is linked, Atlas:

• Reads incoming mail to extract aircraft-operator quotes and client flight-request emails, and turns those into structured quote cards and draft trip requests in that user’s own workspace.
• Never sends email from the linked mailbox. Requests for quote and other outreach are sent by Atlas from an Atlas-controlled address, never from your mailbox. Our access is read-only.

The following limits apply to every linked mailbox, whatever the provider:

• We extract only charter-relevant data: quote price, aircraft, availability, route, dates, and passenger count.
• Messages that are not an operator quote or a client flight request are discarded during processing and are never stored by Atlas.
• Extracted data appears only in the linking user’s Atlas workspace and that of their organization. It is never shared with other customers, with aircraft operators (except as already described in Section 6 for booked flights), or with third parties for their own purposes.
• We do not use mailbox data for advertising, and we do not sell it.
• Our staff do not read mailbox content except with the user's explicit permission for support, or as required for security or legal compliance.
• Users can unlink the mailbox at any time in Atlas settings. Unlinking immediately stops all mailbox access, and Atlas automatically revokes its authorization with the mailbox provider. See Section 11.

Google Gmail. For a linked Gmail mailbox we request two permissions: gmail.readonly, to read mail for the extraction described above, and userinfo.email, to identify which mailbox was linked. We do not request permission to send, modify, label or delete mail, and Atlas cannot do any of those things. We do not use Google user data for advertising, and we do not sell it.

Microsoft Outlook. For a linked Outlook mailbox we request Mail.Read to read mail for the extraction described above and User.Read to identify which mailbox was linked, plus offline access so the connection persists. As with Gmail, we do not request permission to send or modify mail.

Other providers. If we add support for a further mailbox provider, the permissions we request from that provider will be shown at the point of authorization, the limits above will apply unchanged, and we will update this policy.

If you provide your mobile phone number and opt in through the Atlas demo portal, you agree to receive account-related and trip-related text messages from Atlas. This includes updates about demo trip requests, itinerary changes, aircraft and quote availability, booking status, schedule reminders, and other operational notifications related to your Atlas account or demo flight experience.

Only users who have explicitly provided their phone number and consented will receive messages. Consent to receive SMS messages is not a condition of purchasing any goods or services. You can opt out at any time by replying STOP to any message; you may receive a single confirmation message after opting out. For help, reply HELP or contact us at info@flyatlas.ai. Carriers are not liable for delayed or undelivered messages.

We do not sell your personal information. We share information only in these limited circumstances:

• Operating carriers. When a flight is booked, we share passenger manifest data with the operating carrier of that flight solely for the operation of the flight and related legal compliance (for example, operator and border-control requirements). We do not share client CRM profiles with operators.
• Service providers. We use vetted vendors who process information on our behalf and under contract — for example, a messaging provider that delivers our SMS notifications, scheduling tools, hosting, analytics, and AI processors such as OpenAI (see Section 7). These providers may only use the information to perform services for Atlas and may not use it for their own marketing.
• Legal and safety. When required by law, regulation, legal process, or to protect the rights, property, or safety of Atlas, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

For the avoidance of doubt, and consistent with Section 5 above, mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes under any circumstances.

Linked mailbox data. Information we receive from a linked mailbox (Section 4), including Google user data received from Google APIs, is not shared with other customers, with aircraft operators, or with third parties for their own purposes. We share it only with subprocessors that process it on our behalf and under contract in order to provide the features described in Section 4 — the same posture described for AI processors in Section 7 — and we never use it for advertising.

Subprocessors. Our current AI subprocessor for the processing described in Section 7 is OpenAI, L.L.C. (and its affiliates), which processes data as our processor under contract. We may update this list as our vendors change; material changes will be reflected in updates to this policy.

We use OpenAI’s API as a data processor to generate preference summaries from client trip history and to assist with parsing — for example, mapping columns of uploaded contact files. OpenAI processes that information on our behalf and under contract; it is not permitted to use it for its own marketing.

AI outputs are advisory summaries only. They do not produce automated decisions that have legal or similarly significant effects on individuals.

We use a limited number of cookies and similar technologies to operate the website, remember preferences, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

We use appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we delete or de-identify it.

Travel document retention. Passport and visa (or residency) document images are retained only for as long as the trip requires them, and are deleted automatically once the trip’s final flight has landed. On a round trip or multi-leg itinerary this means after the last leg, not the first. Deletion runs on confirmation that the aircraft has landed, and where no landing confirmation is available, within approximately 24 hours of the final leg’s estimated arrival. If a trip is cancelled or expires before it flies, the documents are deleted at that point. They are never copied into client profiles. Other passenger manifest data (such as name, gender, nationality, and date of birth) is retained as part of the booking record.

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your personal information;
• Object to or restrict certain processing;
• Opt out of SMS messages at any time by replying STOP;
• Unlink a connected email mailbox at any time in your Atlas settings; and
• Withdraw consent where processing is based on consent.

Linked mailbox access. You can unlink a connected mailbox in your Atlas settings. Unlinking immediately stops all mailbox access and automatically revokes Atlas’s authorization with your mailbox provider, so no further action is required. You can confirm this, or revoke access independently, in your provider’s own settings: for a Google account, at myaccount.google.com/permissions under Security → Third-party access; other providers offer equivalent controls.

To exercise any of these rights, contact us at info@flyatlas.ai.

If you are a passenger whose details were submitted by a travel agency on your behalf, you may contact us at the same address. We act on such requests together with the agency. In that arrangement, the agency is the data controller for its clients’ records, and Atlas processes that information to provide the Services.

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the “Last updated” date above. Material changes will be communicated as required by law.

The Services are operated by Fly Atlas Limited, 236 W 30th Street, New York, NY 10001. If you have questions about this Privacy Policy or our data practices — including requests about passenger data submitted by a travel agency — contact us at info@flyatlas.ai. See also our Terms of Service.