Legal
Privacy Policy
Effective date: 22 May 2026 ย ยทย Last updated: 22 May 2026
Jetdunes DMC Marketplace ("Jetdunes", "we", "us") is operated by Sanyaa Technologies, Dubai, UAE. This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable law โ including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection.
1. Who this policy applies to
This policy applies to all users of portal.jetdunes.com and the Jetdunes mobile app (iOS and Android), including:
- Individual travelers who plan trips using our AI trip builder
- Travel agents who source quotes through our platform
- Destination management companies (DMCs) who receive and respond to quote requests
- Visitors to our marketing pages
2. Data we collect
Account data: Name, email address, and password (hashed) when you register. Phone number if provided.
Trip data: Destination, travel dates, traveller count, travel style, budget, special requests, and the AI-generated itinerary you create.
Quote and transaction data: Quote requests you submit, quotes DMCs submit, and any booking confirmation records.
Communications: Messages exchanged between travelers, agents, and destination experts within our in-platform chat.
Usage data: Pages visited, features used, device type, browser, IP address, and approximate location (country level). Collected via server logs and analytics.
Device data (mobile app): Device identifier, operating system version, and push notification token if you grant permission.
3. How we use your data
- To generate AI-powered trip itineraries based on your inputs
- To route your quote request to the most relevant verified travel partners
- To enable real-time messaging between you and your assigned travel expert
- To send transactional emails: quote confirmations, chat notifications, account updates
- To improve our AI models, platform features, and user experience
- To comply with legal obligations and prevent fraud
- To send product updates and offers (only with your consent; opt-out any time)
4. Legal basis for processing
We process your data on the following legal bases:
- Contract performance: Processing necessary to deliver the services you requested (account creation, itinerary generation, quote routing)
- Legitimate interests: Platform security, fraud prevention, service improvement
- Consent: Marketing communications and optional data uses you have explicitly agreed to
- Legal obligation: Where required by UAE law or applicable international regulations
5. How we share your data
We do not sell your personal data. We share it only in these circumstances:
- With travel experts (DMCs): When you submit a quote request, your trip details and contact information are shared with the matched destination specialists so they can respond
- With service providers: Cloud hosting (Google Cloud, UAE/India regions), email delivery (Gmail SMTP via Sanyaa), AI inference (Google Gemini), analytics, and mobile push notifications (Firebase)
- For legal compliance: When required by law, court order, or to protect the rights and safety of users and third parties
- Business transfers: In the event of a merger, acquisition, or sale of assets, with prior notice to you
6. Data retention
We retain personal data for as long as your account is active and as needed to provide our services. Specifically:
- Account data: retained until you delete your account
- Trip and quote data: retained for 3 years after the last activity for dispute resolution
- Chat messages: retained for 2 years
- Usage logs: retained for 90 days
7. Cookies and tracking
We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies. You can control cookie settings in your browser at any time.
8. Your rights
Depending on your location, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate data
- Erasure: Request deletion of your account and associated data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdrawal of consent: Withdraw marketing consent at any time
To exercise any of these rights, email us at privacy@jetdunes.com or contact us via WhatsApp at +971 54 330 6162.
9. Data security
We implement industry-standard security measures including TLS encryption in transit, hashed passwords (bcrypt), access control and role-based permissions, and regular security reviews. Our infrastructure runs on Google Cloud Platform in the asia-south1 (Mumbai) region.
10. International transfers
Your data may be processed on servers outside the UAE (primarily India) as part of our Google Cloud infrastructure. We ensure appropriate safeguards are in place in accordance with UAE data protection law.
11. Children
Jetdunes is not directed to children under 18. We do not knowingly collect data from minors. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify registered users by email and update the effective date above. Your continued use of Jetdunes after changes take effect constitutes acceptance of the updated policy.
13. Contact us
For any privacy-related questions, requests, or complaints:
- ๐ง privacy@jetdunes.com
- ๐ฑ WhatsApp: +971 54 330 6162 (Dubai)
- ๐ข Sanyaa Technologies, Dubai, United Arab Emirates