Privacy Policy

01About Airceleo

Airceleo operates a technology platform that enables independent users to coordinate the movement of personal items. Airceleo is not a courier, logistics, or transportation provider. We do not take possession, custody, or control of any item at any point in the coordination process.

02Information We Collect

2.1 Account and Profile Information

• Full name
• Email address
• Mobile phone number
• Date of birth
• Profile photograph
• Payment-related information, processed exclusively by our third-party payment providers

2.2 Identity Verification (KYC)

Airceleo uses Persona Identities, Inc. ("Persona") as our independent identity-verification processor. When you complete KYC, Persona collects a photo of your ID and a selfie on our behalf, and creates a face template to check that the selfie matches the ID. In detail, Persona processes:

• A photograph of a government-issued identity document (passport, driver's licence, or national ID).
• A live selfie. Persona uses it to create a face template (a measurement of your face geometry) to check that the selfie matches the photo on your ID. This is biometric data under the Digital Personal Data Protection Act, 2023 and US state privacy and biometric laws.
• Limited device-level signals Persona's SDK collects to detect document tampering and replay attacks (e.g. screen-recording, deep-fake liveness checks).

Where the data is processed. Persona processes and stores your ID image, selfie and face template on its own infrastructure in the United States. Before the Persona verification opens, the verification screen in the app tells you what Persona collects and why.

What Airceleo keeps. We never keep your ID image, your selfie or your face template, and our systems do not request or download them from Persona. From each verification we keep, on your account: the result (approved, rejected or needs review); the legal name printed on your ID (which becomes the name other members see); your date of birth; the country recorded on your verification; and the type of document you presented (for example passport, driver's licence or PAN card). To run the service we also keep the Persona reference for your verification, and a one-way coded fingerprint of your verified name and date of birth that we use only to detect duplicate accounts. Separately, we keep a copy of each notification Persona sends us about your verification for at most 90 days, and then delete it. These copies can include details read from your ID, such as its number, your date of birth and your address.

Retention. Persona retains your KYC submission for the period required to comply with anti-money-laundering, fraud-prevention, and tax laws applicable to Airceleo and to Persona, typically up to seven (7) years after your account is closed. You may request deletion before that statutory period expires, and Persona will delete data not subject to a legal retention obligation. To exercise this right, write to support@airceleo.com or use the in-app deletion control at Settings → Privacy Rights.

Airceleo does not conduct independent criminal background checks.

2.3 Platform Activity

We collect information generated through your use of the Platform, including:

• User role (Sender or Traveler)
• Item categories and declared values
• Status of coordination arrangements
• Payment transaction references
• Platform activity logs

2.4 In-App Messaging

Airceleo provides in-app messaging between Senders and Travelers to coordinate their arrangement.

• Messages are transmitted over TLS (HTTPS) between your device and our servers.
• Messages are stored on our infrastructure provider, which encrypts data at rest at the storage layer using industry-standard practices.
• Airceleo does not currently offer end-to-end encryption. Authorized Airceleo personnel and our infrastructure provider can technically access message content where strictly necessary for system maintenance, security, abuse investigation, or legal compliance.

Airceleo does not actively monitor or read user messages in the ordinary course of operating the Platform.

We retain message metadata, including timestamps, sender and recipient identifiers, and delivery status.

You acknowledge that:

• Recipients can copy, forward, screenshot, or share messages.
• Airceleo cannot guarantee confidentiality once information has been shared with another user.
• You should not transmit financial account numbers, government identification, or other highly sensitive information through in-app chat.

2.5 Device and Usage Information

We may automatically collect:

• Device type and operating system
• IP address
• App version
• Log and diagnostic data

2.6 Location Information

Airceleo does not track your location, and the app never reads your location in the background. Limited location information, such as a city or route endpoint, may be voluntarily provided by users to facilitate coordination. The app reads your device's location (GPS) only when you tap one of the three actions below, and only after you allow location access on your device:

• Sharing your current location in chat. In a chat, you can choose "Share current location". The app takes one reading of where you are at that moment and sends it as a single map pin in that chat. It is not live tracking and does not update. The pin is stored with the chat message and is visible only to the members of that chat (the sender and the traveler of that arrangement). It is kept as described for chat messages in Section 7, and removed when your account is erased.
• Detecting your country for payments. At checkout, you can let the app detect your country so it can choose the right payment provider (Stripe in the United States, Razorpay in India). The app takes one low-accuracy reading and converts it into a country using your phone's built-in location service (provided by Apple or Google). Airceleo does not receive or store the coordinates; we save only the resulting country to your profile. You can pick your country by hand instead.
• Safety alerts. If you use the safety card on the delivery screen to alert our team during a handoff, the app tries to attach your current coordinates to the alert. If you have not allowed location access, or no reading arrives within a few seconds, the alert is sent without them. The coordinates are stored with the alert and emailed to Airceleo's safety team so they can help you. They are not shown to the other member. Safety alerts are deleted when your account is erased.

You can turn off location access for Airceleo in your device settings at any time. Everything else in the app works without it.

2.7 Flight Documents (Boarding Passes)

When you list a flight as a traveler, we require you to upload your boarding pass or e-ticket. This is collected solely for our security and compliance check (to confirm the flight is genuine and that you are actually travelling the route you have listed) and to auto-fill your itinerary (route, dates, airline, and flight number) so you do not have to re-type it.

Your boarding pass is transmitted over an encrypted connection and stored in a private, access-controlled bucket. It is never shown to other users, never sold, and never shared with third parties except where strictly required to verify your trip or comply with the law. A boarding pass on its own cannot be used to travel or impersonate you. Airlines match the pass against government-issued photo ID and your passport at the gate, so a copy held by us carries no boarding privilege.

We extract only the structured itinerary fields needed for your listing. You may replace the document at any time before submitting, and it is deleted in accordance with our retention schedule (Section 7) once it is no longer needed for the security check or any related dispute window.

2.8 Login Security Alerts and Approximate Location

To protect your account against unauthorised access, our systems monitor failed sign-in attempts. Where a number of failed attempts are made against your account within a short period, we temporarily lock the account and send a security-alert email to the address on file, informing you of the attempts and providing a link to reset your password.

So that you can assess whether the activity was your own, that email states the time of the attempts and an approximate location (typically a city, region, and country) derived from the Internet Protocol (IP) address from which the attempts originated. To obtain this approximate location, we transmit only the IP address to an independent IP-geolocation service (ipwho.is); we do not transmit your name, email address, account identifier, or any other personal information, and the lookup is performed solely in connection with such a security event. The location returned is approximate and is provided to you for informational purposes only.

We carry out this processing in reliance on our legitimate interest in safeguarding the security of your account and the Platform (Article 6(1)(f) of the General Data Protection Regulation and equivalent provisions of other applicable data-protection laws, including Section 7 of the Digital Personal Data Protection Act, 2023). Because the geolocation service receives a single, transient technical data point and no account identifiers, it is not provided with information that would enable it to identify you.

2.9 Information About Delivery Recipients

When a Sender arranges a delivery, the Sender provides the full name, email address, and mobile telephone number of the person who is to receive the item (the "Recipient"). This information is obtained from the Sender and not from the Recipient. Where the Recipient already holds an Airceleo account, the Sender may instead select that account, in which case no separate contact details are collected.

Purpose. Recipient information is used solely to complete the delivery addressed to that Recipient: to inform the Recipient that an item is being carried to them, to enable the matched Traveler to arrange the handover, to deliver the one-time code that confirms receipt, and to resolve any dispute concerning that delivery. It is disclosed only to the Traveler carrying that particular item, and only once the arrangement has been confirmed. Recipient information is never sold, never used for marketing or profiling, never disclosed to any other user, and is not used to create an account for the Recipient.

Lawful basis. Airceleo processes Recipient information in reliance on the legitimate interests of the Sender, the Recipient, and Airceleo in completing a delivery that the Recipient is expecting to receive (Article 6(1)(f) of the General Data Protection Regulation). In respect of Indian Data Principals, Airceleo additionally relies on the permission that the Sender is required to obtain from the Recipient before providing these details; the Sender warrants that it holds that permission under Section 7.1 of our Terms and Conditions. Airceleo does not process Recipient information for any purpose beyond the delivery to which it relates.

Retention. Recipient information forms part of the coordination record for the delivery and is kept as described in Section 7. When the Sender's account is erased, the Recipient's name is replaced with "[deleted]" and the Recipient's email address and telephone number are removed.

Rights of the Recipient. A Recipient need not hold an Airceleo account in order to exercise their rights in respect of this information. Those rights, and the manner in which they are exercised, are set out in Section 8.5.

03How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Platform.
• Verify user identity through trusted third parties.
• Facilitate coordination between users and process payments.
• Detect, prevent, and investigate fraud, abuse, or unauthorized activity.
• Communicate service-related updates and security notices.
• Strengthen Platform functionality, reliability, and security.

04Cookies and Similar Technologies

We use cookies and similar technologies to:

• Authenticate user sessions.
• Maintain Platform security.
• Remember user preferences.
• Analyze usage trends.

You may manage cookies through your browser or device settings.

05How We Share Information

Airceleo does not sell or rent personal information. We share information only in the following circumstances:

• With trusted service providers, named below, each bound by a written data-processing agreement that limits the provider to the purposes stated.
• Between users, to the limited extent necessary to coordinate an arrangement (e.g. the sender's name and item description are shown to a matched traveler).
• With law enforcement, regulatory authorities, or courts, where required by applicable law or a binding legal request.
• In connection with a merger, acquisition, financing, or corporate restructuring, subject to customary safeguards and notification.

Named third-party processors. The following providers receive personal information from Airceleo for the limited purposes described, and operate from the indicated regions:

• Supabase, Inc.: backend database, authentication, file storage, and realtime messaging. Project hosted in the United States (us-west-2).
• Persona Identities, Inc.: identity verification (see Section 2.2). United States.
• Stripe, Inc.: card payment processing and traveler payouts for senders and travelers in the United States. United States.
• Razorpay Software Pvt. Ltd.: card and UPI payment processing and traveler payouts for senders and travelers in India. India.
• Resend, Inc.: transactional email (one-time codes, delivery confirmations, receipts, weekly digests). United States.
• Expo, Inc. and the Apple Push Notification service / Firebase Cloud Messaging: push-notification delivery only. United States.
• Functional Software, Inc. (Sentry): application crash and error reporting; see Section 11 for opt-out details. United States.
• PostHog, Inc.: product analytics, only after you consent (see Section 11). United States.

Limited security disclosure (IP geolocation). Separately from the processors listed above, and solely to generate the approximate-location information described in Section 2.8, we transmit the Internet Protocol (IP) address associated with anomalous login activity to an independent IP-geolocation service (ipwho.is). This disclosure is confined to the IP address: no name, email address, account identifier, or other personal information is shared, and the service is not given any information that would allow it to associate the IP address with you. Given that only a single, non-identifying technical data point is shared, for a security purpose, this disclosure is made in reliance on the data-minimisation and legitimate-interest principles described in this Policy rather than under a dedicated data-processing agreement.

Cross-border transfers. If you are in India, your personal data is stored and processed in the United States (by Supabase in its us-west-2 region, and by Persona, Stripe and Resend), and is transferred there as permitted under Indian law. Where personal data of EEA / UK / Swiss residents is transferred outside their region of residence, Airceleo and the relevant processor rely on Standard Contractual Clauses or other lawful transfer mechanisms permitted under the applicable law.

06Data Security

We implement reasonable technical, physical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

No system can be guaranteed fully secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorized access to your account.

Data breach notification. In the event of a personal data breach that is likely to result in risk to your rights, Airceleo will notify the Data Protection Board of India and affected Indian Data Principals without undue delay, as required under the Digital Personal Data Protection Act, 2023. Where US state law requires notification to affected residents, Airceleo will provide notice in accordance with the statutory timeline applicable to your state of residence.

07Data Retention

We retain personal information for as long as:

• Your account remains active, and
• Retention is necessary for legal compliance, dispute resolution, or fraud prevention.

Certain information may be retained after account closure where required by applicable law or regulation.

Approximate retention periods by data category:

• Account and profile information: for the duration of your account, plus a 30-day recovery window after you request deletion (described immediately below). If you never took part in a delivery, your account is then deleted. If you did, we keep the delivery and payment records described below, and your profile is anonymised: your email address is replaced with a placeholder, your date of birth is removed, your name is replaced with "Deleted member", and your phone number, username and profile photo are removed. We keep your verification status, your Persona reference, your country, the type of ID document you used, the duplicate-account fingerprint described in Section 2.2, and your payment-provider account references, for payment, tax and fraud-prevention purposes. These retained fields are not deleted on a fixed schedule.
• KYC and identity-verification data held by Persona: as required by Persona under applicable anti-money-laundering law, typically up to 7 years (see Section 2.2).
• Payment and transaction records: minimum 7 years from transaction date, as required by financial and tax regulations.
• Coordination records (requests, matches, deliveries and reviews): kept after your account is erased, without your contact details, for up to 7 years for payment and tax records. When a Sender's account is erased, item names and descriptions are replaced with "[deleted]".
• In-app messages and chat: kept until your account is erased. At erasure, the text and attachments of the messages you sent are replaced with "[deleted]". If the members of a chat turn on disappearing messages, new messages are deleted 24 hours or 7 days after they are sent (whichever was chosen), except while a dispute on that arrangement is open.
• In-app notifications: deleted 90 days after you read them, or 180 days after they were sent if never read.
• Security event log: kept to protect the Platform. When your account is erased, the link between these records and your account is removed. They are not deleted on a fixed schedule.
• Data-change audit trail (a technical record of changes to database records): 90 days on a rolling basis.
• Identity-verification notifications from Persona: 90 days. Records of failed incoming notifications from our providers: 90 days. Detailed payment-provider event messages: the details are removed after 120 days; the transaction record itself is kept as above.
• Device and usage data (such as push-notification tokens and sign-in location records): kept until your account is erased. Product analytics linked to your account are deleted when your account is erased. Crash reports: deleted automatically by our crash-reporting provider, Sentry, at the end of its retention period, which is no longer than 90 days.
• Boarding passes and flight documents: released 7 days after the flight date, once no delivery on that trip is still in progress and no dispute on it is open, and then deleted, usually within 5 to 6 weeks of the flight.

Account deletion and the 30-day recovery window. When you request deletion, we lock your account immediately, sign you out on every device, and stop showing your profile and listings to other members. For the following 30 days we keep your information intact so that you can change your mind: signing back in and choosing "Restore my account" cancels the deletion and returns your account exactly as it was, including your profile, verification status and history. This window exists to protect you against an accidental deletion, and against someone deleting your account without your permission. During those 30 days your email address and handle remain reserved for you, which means they cannot be used to open a new account until the window closes. If you take no action, your personal information is erased or anonymised as described above at the end of the 30 days, and that step cannot be reversed by you or by us.

Erasure sooner than 30 days. The recovery window is offered for your benefit, not as a condition of exercising your rights. If you want your personal information erased without waiting for it, write to support@airceleo.com and we will action the erasure directly, subject only to the categories we are legally required to retain (for example financial transaction records, and identity-verification data held by Persona under anti-money-laundering law).

Third-party processor retention. When you delete your account, we erase or anonymise the personal information under our control. However, certain third-party processors retain personal information under their own legal, regulatory, and anti-money-laundering obligations, independently of our deletion process: (i) Persona retains your identity-verification (KYC) data as described in Section 2; (ii) Stripe and Razorpay retain payment and payout transaction records as required by financial and AML regulations; and (iii) Resend may retain transactional-email delivery records. Deleting your Airceleo account does not force these providers to delete data they are legally required to keep. You may contact each provider directly to request deletion of their retained records, which they may decline where a legal-retention obligation applies.

08Your Rights

Subject to applicable law, you have the following rights with respect to your personal information. You can exercise most rights directly in the app at Settings → Privacy Rights, or by contacting us at the address in Section 14.

8.1 Rights Available to All Users

• Access: request a copy of the personal information we hold about you.
• Correction: update or correct inaccurate personal information. Your name and date of birth come from identity verification and cannot be changed in the app afterwards; write to support@airceleo.com to correct them.
• Deletion: request deletion of your account and associated personal information, subject to retention required by law (for example, financial transaction records). Deletion takes effect immediately in the sense that your account is locked and hidden, and your information is erased or anonymised (as set out in Section 7) after a 30-day recovery window during which you may restore the account by signing back in; you may ask us to erase it sooner by writing to support@airceleo.com (see Section 7). Data held by our payment processors (Stripe, Razorpay) and identity-verification provider (Persona) is retained under their own legal and anti-money-laundering obligations and is not force-deleted when you delete your Airceleo account (see Section 7).
• Deactivation: temporarily pause your account without permanent deletion. Deactivation never erases your information, and reactivating restores your account exactly as you left it.
• Withdraw consent: opt out of optional processing such as analytics and crash reporting at any time using the switches at Settings → Privacy Rights → Manage data collection in the app. Withdrawal takes effect immediately and is recorded in our consent log. You may also write to support@airceleo.com from the email associated with your account.
• Export: receive an electronic copy of your account data in a machine-readable format.

8.2 Additional Rights for Residents of the European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the EEA, the United Kingdom, or Switzerland, you also have the right to:

• Object to or restrict certain processing of your personal data.
• Data portability: receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
• Lodge a complaint with your national data protection supervisory authority.
• Avoid being subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Lawful bases on which we process your data include: performance of the contract between you and Airceleo (Article 6(1)(b)); compliance with legal obligations such as anti-money-laundering and identity verification laws (Article 6(1)(c)); your consent for optional processing such as analytics (Article 6(1)(a)); and our legitimate interests in operating, securing, and improving the Platform (Article 6(1)(f)). Where we process special-category data such as identity-document images during KYC, we rely on your explicit consent (Article 9(2)(a)).

Cross-border transfers: where personal data of EEA / UK / Swiss residents is transferred outside those regions, we rely on Standard Contractual Clauses or other lawful transfer mechanisms with our processors.

8.3 Additional Rights for US State Residents (CCPA / CPRA and State Privacy Laws)

California residents have the following rights under the CCPA/CPRA. Residents of other US states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, and Utah) have substantively equivalent rights under applicable state law, which Airceleo will honour upon request:

• Know: request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collection, and the categories of third parties with whom we share that information.
• Delete: request deletion of personal information we have collected from you, subject to legal exceptions.
• Correct: request correction of inaccurate personal information.
• Opt out of sale or sharing: Airceleo does not sell personal information for monetary consideration and does not share personal information for cross-context behavioral advertising. There is therefore no "Do Not Sell or Share My Personal Information" link required, but you may still confirm this election with us in writing.
• Limit use of sensitive personal information: request that we limit the use of sensitive personal information (such as identity documents collected for KYC) to the purposes necessary to provide the Platform and meet legal obligations.
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

You may designate an authorized agent to make a request on your behalf. We may verify the agent's authority before responding.

8.4 Additional Rights for Indian Residents (DPDP Act, 2023)

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Confirmation and access to the personal data we process about you.
• Correction, completion, updating, and erasure of your personal data.
• Grievance redressal through the Grievance Officer named in Section 14.
• Nominate another individual to exercise your rights in the event of your death or incapacity. To nominate someone, write to the Grievance Officer named in Section 14.
• Withdraw consent at any time. Withdrawal does not affect processing already performed on the basis of prior consent.

You may complain to the Data Protection Board of India if we do not resolve your grievance.

8.5 Rights of Delivery Recipients Who Do Not Hold an Account

A person whose name and contact details are provided by a Sender so that an item may be delivered to them (a "Recipient", as described in Section 2.9) is a data subject under the General Data Protection Regulation, a Data Principal under the Digital Personal Data Protection Act, 2023, and a consumer under the California Consumer Privacy Act, whether or not that person holds an Airceleo account.

A Recipient has the following rights in respect of the information described in Section 2.9:

• Access: to be told what information we hold about them, from whom we obtained it, and for what purpose.
• Correction: to have inaccurate information about them corrected.
• Objection: to object to our use of their information for a delivery.
• Erasure: to have their information deleted, subject to retention required by law or by an open dispute.

Because the in-app privacy controls require an account, a Recipient exercises these rights by writing to support@airceleo.com, or to the Grievance Officer named in Section 14. We may ask for information sufficient to satisfy us that the request is made by the Recipient named in the delivery before we act on it, and we respond within the timelines stated in Section 14.

Where objection or erasure would prevent a delivery already in progress from being completed, we will inform the Recipient of that consequence; if the Recipient confirms their request, we will cancel the arrangement rather than continue to process their information.

09Payment Processing and Financial Information

The Airceleo Platform facilitates real-money transactions between Senders and Travelers. Airceleo itself is not a bank, money transmitter, payment system operator, or escrow agent.

Payments and payouts are processed by licensed third-party payment service providers:

• In the United States, payments and payouts are processed by Stripe, Inc. and its affiliates, which are licensed money transmitters in applicable U.S. states and registered with FinCEN.
• In India, payments and payouts are processed by Razorpay Software Private Limited and RazorpayX, which operate under authorisations granted by the Reserve Bank of India.

Airceleo does not collect, store, or have access to your full payment-card number, CVV, or banking credentials. Card data is captured directly by the payment processor through their PCI-DSS compliant tokenization environment. Airceleo retains only a transaction reference and the last four digits of the instrument used.

Your payment is held by our payment processing arrangements until the delivery is confirmed, and then paid out to the traveler, as described in the Terms and Conditions and the Refund Policy.

10Third-Party Links and Services

The Platform may contain links to websites or services operated by third parties, including Persona Identities Inc. (identity verification), Stripe, Inc., Razorpay Software Private Limited, Supabase, Inc. (cloud infrastructure), PostHog Inc. (analytics, where consented), and Functional Software, Inc. d/b/a Sentry (crash reporting). Airceleo is not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing any personal information.

11Crash Reporting, Analytics, and Your Right to Object

Airceleo uses Sentry to capture application crashes and unhandled errors. This is a non-marketing, security-and-reliability use of personal data and Airceleo relies on its legitimate interest under the General Data Protection Regulation (GDPR) Article 6(1)(f), the Digital Personal Data Protection Act, 2023 (Section 7(b), for Indian Data Principals where applicable), and equivalent provisions of other regional data-protection laws. We do not sell, rent, or share crash data for advertising.

Right to object. You may object to crash and error reporting at any time by turning off "Crash reports" at Settings → Privacy Rights → Manage data collection in the app. The change takes effect immediately on that device and is recorded in our consent log. You may alternatively write to support@airceleo.com from the email associated with your account, in which case we will disable crash reporting for your installation within five (5) business days. California residents may make the same request under the CCPA right to limit the use of personal information.

Analytics. Product analytics (PostHog) run only after you consent: either by agreeing to this Policy on the consent screen shown when you first sign in with a verified account, or by turning on "Product analytics" at Settings → Privacy Rights → Manage data collection. Nothing is sent before that. Analytics events are linked to your account ID, together with your verification status, country and completed-delivery counts; they do not include your name or email address. You can turn analytics off at any time, as easily as you turned them on, with the same switch; the change takes effect immediately and is recorded in our consent log. Signing out stops analytics until the next account consents. You may also write to support@airceleo.com from the email associated with your account. Analytics are never used for cross-app tracking, and Airceleo does not request the iOS App Tracking Transparency permission.

12Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform. Your continued use of the Platform after the effective date of an update constitutes acceptance of the revised Policy.

13Children

The Platform is not intended for, and may not be used by, persons under the age of 18. We require date-of-birth at signup and a Government-issued ID at KYC. Accounts identified as belonging to a minor will be terminated and any associated personal information will be deleted, except where retention is required by law.

14Contact Us and Grievance Redressal

Airceleo is operated by AIRCELEO Private Limited (India, CIN U63120KA2026PTC227206) and AIRCELEO Inc. (United States). Postal address (India): Chotteyanda Mane, Kaikadu Village, Parane Post, Madikeri Taluk, Kodagu, Karnataka 571212, India. Contact: support@airceleo.com

General privacy inquiries: support@airceleo.com

To exercise the rights described in Section 8, write to support@airceleo.com or use Settings → Privacy Rights in the app. We acknowledge requests within 24 hours and resolve them within 7 days, or within such shorter period as applicable law requires.

Grievance Officer (in accordance with Rule 5(9) of the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and Sections 8(10) and 13 of the Digital Personal Data Protection Act, 2023, and the Consumer Protection (E-Commerce) Rules, 2020):

• Name: Kushal Kolla
• Designation: Founder
• Email: grievance@airceleo.com
• Phone: +91 91139 61728 (during the working hours below)
• Postal address: AIRCELEO Private Limited, Chotteyanda Mane, Kaikadu Village, Parane Post, Madikeri Taluk, Kodagu, Karnataka 571212, India
• Grievances can be sent by email, by post, or raised by phone.
• Working hours: 10:00 to 18:00 IST, Monday to Friday (excluding public holidays)
• Acknowledgement: within 24 hours of receipt.
• Resolution: within 7 days of receipt, per the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. A complaint asking us to remove content is acted on within 36 hours.

Nodal contact person (under the Consumer Protection (E-Commerce) Rules, 2020), resident in India:

• Name: Karan Karumbaiah
• Designation: Co-founder
• Email: kkck@airceleo.com
• Phone: +91 91139 61728
• Postal address: AIRCELEO Private Limited, Chotteyanda Mane, Kaikadu Village, Parane Post, Madikeri Taluk, Kodagu, Karnataka 571212, India

For users in the European Economic Area: until Airceleo appoints a representative under Article 27 GDPR, EEA users may direct GDPR-related inquiries to the email addresses above and we will respond within applicable statutory timelines.

End of Privacy Policy