User Data Deletion

1. How to Request Deletion

To request deletion of your account and personal data, send an email to [email protected] from the email address associated with your Jumpseat account. Please include:

• The subject line: "Data Deletion Request"
• Your full name as it appears on your Jumpseat profile
• The mobile phone number associated with your account (for identity verification)

If you registered via WhatsApp/SMS only and do not have an email on file, you may instead message us from your registered WhatsApp number to request deletion.

2. What We Delete

Upon verified deletion request, we permanently remove the following from our systems within 30 days:

• Profile information: name, email, phone, photo, bio, social handles
• Address and address coordinates
• Home airport, preferred FBO, body weight
• Date of birth, passport number, country, and expiry
• Pet information and aircraft information (if applicable)
• Flight postings, seat requests, and survey responses you submitted
• Authentication records, session data, and one-time passcodes
• Membership token records and renewal history (after 2-year governance retention period if applicable)

3. What May Be Retained

Some data may be retained in limited form after deletion, as permitted or required by law:

• Anonymized analytics: Flight history and ratings may be retained in anonymized form (with all personal identifiers removed) for platform analytics and safety purposes.
• Compliance records: eAPIS submissions and flight manifests already filed with US Customs and Border Protection cannot be retracted, as required by 19 CFR 122.22.
• Governance records: If your membership was revoked due to a complaint or safety issue, the Membership Committee may retain a record of the revocation reason for up to 2 years to prevent re-admission.
• Legal obligations: Any data we are required to retain by law, court order, or regulatory authority.

4. Third-Party Data

Some of your data has been shared with service providers to operate the platform. Upon your deletion request, we will remove your data from our systems, but copies may persist in third-party systems according to their own retention policies:

• SendGrid (email delivery logs)
• Meta WhatsApp Cloud API (WhatsApp message delivery logs — governed by Meta's data policy)
• Google OAuth (authentication logs — managed by Google)
• Google Maps API (transient address lookups — not stored long-term)
• DigitalOcean (encrypted server backups, rotated within 30 days)

To request deletion from these providers, contact them directly using their published privacy policies.

5. Timeline

1. Day 0: You submit a deletion request via email.
2. Within 3 business days: We confirm receipt and verify your identity.
3. Within 30 days: All eligible personal data is permanently removed from our active systems.
4. Within 60 days: Encrypted backups containing your data are rotated out and overwritten.

6. Partial Deletion Requests

You may also request deletion of specific data without closing your account, including:

• Passport information and date of birth (you will no longer be eligible for international flights)
• Address and address coordinates (you will no longer receive drive-time-based departure alerts)
• Profile photo, bio, or social handles

Most profile fields can be edited or cleared directly from your profile settings page without contacting us.

7. Contact

Invitational Club LLC
554 Camino De Tortuguero, Dorado, PR 00646
[email protected]