Privacy Policy — Atlas Jet

1. Who We Are

Atlas Jet is a virtual airline operating simulated charter flights. We operate a custom website and dispatch system. We are based in Europe and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

For the purposes of this policy, the data controller is the Atlas Jet operations team. As a volunteer-run organization without a registered legal entity, you may contact us regarding data matters at: contact@atlas-jet.com

2. What Data We Collect

We collect and process the following personal data:

Account data

Full name or display name
Email address
Discord username

Activity data

Flight and booking activity logs (routes flown, aircraft used, dates, times)
Pilot logbook data (flight hours, ratings, performance records within our system)

We do not collect payment information, government-issued identification, or sensitive personal data as defined under Article 9 GDPR.

3. How We Use Your Data

We process your data for the following purposes:

Purpose	Legal Basis (GDPR Art. 6)
Creating and managing your pilot account	Contract (Art. 6(1)(b))
Recording flight activity and maintaining your logbook	Contract (Art. 6(1)(b))
Sending operational communications (e.g. account updates, dispatch notifications)	Contract (Art. 6(1)(b))
Community management via Discord	Legitimate interest (Art. 6(1)(f))
Maintaining security and integrity of our dispatch system	Legitimate interest (Art. 6(1)(f))

We do not use your data for advertising, profiling, or sale to third parties.

4. Third-Party Services

We use the following third-party services that may process your personal data:

Discord (Discord Inc. / Discord Netherlands BV) We use Discord as our community platform. When you join our Discord server, your Discord username and activity within that server are subject to Discord's Privacy Policy. Atlas Jet may store your Discord username in our own systems for account linking purposes.

Proton Mail (Proton AG, Switzerland) We use Proton Mail's SMTP service to send transactional emails to members (e.g. account confirmations, operational notifications). In doing so, Proton AG processes recipient email addresses solely for message delivery. Proton AG is headquartered in Switzerland, a country recognized by the European Commission as providing adequate data protection. Our use of Proton's services is governed by their Data Processing Agreement, which is compliant with GDPR Article 28. Their broader privacy practices are described in Proton's Privacy Policy.

5. Data Retention

We retain your personal data for as long as your account is active. Specifically:

Account data (name, email, Discord username): retained until you request deletion or your account is removed.
Flight logs and logbook data: retained for the lifetime of your account for continuity of records. Upon account deletion, this data is permanently removed within 30 days.
System/access logs: retained for up to 90 days for security purposes, then deleted.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access — You may request a copy of all personal data we hold about you.
Right to rectification — You may request correction of inaccurate or incomplete data.
Right to erasure — You may request deletion of your data ("right to be forgotten"), subject to any overriding legitimate interest.
Right to restriction of processing — You may request that we limit how we use your data in certain circumstances.
Right to data portability — You may request your data in a structured, machine-readable format.
Right to object — You may object to processing based on legitimate interest.
Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at: contact@atlas-jet.com

We will respond to requests within 30 days in accordance with GDPR Article 12.

7. Data Security

We take reasonable technical and organizational measures to protect your personal data, including:

Access controls on our dispatch system and databases
Secure (HTTPS) communication across our website
Limiting data access to active operations staff only
All member data is stored on infrastructure physically located within the European Economic Area

Please note that our infrastructure is self-hosted on privately operated hardware. While we apply security best practices, this does not carry formal third-party certification. No system is completely secure. In the event of a personal data breach likely to result in risk to your rights, we will notify affected users without undue delay.

8. International Transfers

All member data is stored and processed on infrastructure located within the European Economic Area. Our email communications are handled by Proton AG (Switzerland), which benefits from an EU adequacy decision. We do not transfer personal data to countries outside the EEA or Switzerland except as described above (e.g. Discord, whose servers may be located in the United States, with transfers covered by appropriate safeguards including Standard Contractual Clauses).

9. Children's Data

Atlas Jet's services are not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, where changes are significant, notify members via Discord or email.

11. Complaints

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with a supervisory authority. As we are based in Europe, the relevant authority will depend on your country of residence. A list of EU data protection authorities is available at edpb.europa.eu.