FlyAgent™ · Legal
Privacy Policy
How MATonics Global Ventures GmbH processes personal data when you use FlyAgent™. Drafted in accordance with the GDPR, BDSG, and TTDSG.
Last updated: 07 May 2026
Controller
MATonics Global Ventures GmbH (operating the FlyAgent™ brand, advised by The Bureau™)
Windhag 8, 63263 Neu-Isenburg, Germany
Amtsgericht Offenbach am Main, HRB 56838
Email: privacy@flyagent.app
Supervisory authority
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Postfach 3163, 65021 Wiesbaden, Germany.
Data we process
- Chat content: messages you exchange with the FlyAgent concierge ("Jack"), including travel preferences, dates, origins, and destinations.
- Traveller details for bookings: name(s), date of birth, contact email/phone, payment-related metadata as required by the carrier. Card details are handled by our payment processor and are not stored on our servers.
- Account data (admins only): email address and authentication identifiers via Google OAuth.
- Technical logs: minimal request logs (IP, user-agent, timestamp) for security and abuse prevention.
Legal bases (Art. 6 GDPR)
- Art. 6(1)(b) — performance of a contract: processing your trip request, issuing tickets, post-booking support.
- Art. 6(1)(c) — legal obligation: retention of booking records under § 147 AO (10 years).
- Art. 6(1)(f) — legitimate interests: service security, abuse prevention, product improvement on aggregated data.
- Art. 6(1)(a) — consent: any optional marketing communication.
Sub-processors
MATonics Global Ventures GmbH uses the following sub-processors under appropriate Art. 28 GDPR data processing agreements:
- Lovable Cloud / Supabase (database, authentication, hosting) — EU region.
- Anthropic (large language model for the FlyAgent concierge "Jack") — chat content is sent for inference; no training on customer data.
- Lovable AI Gateway (model routing).
- Meta Platforms Ireland Ltd. (WhatsApp Cloud API) — when you continue a conversation on WhatsApp, your phone number and message content transit Meta's infrastructure. See Data deletion for erasure requests.
- IATA-certified GDS provider (flight inventory and ticket issuance).
Retention
- Chat conversations without a booking: 90 days, then deleted or anonymised.
- Booking records: 10 years (§ 147 AO, § 257 HGB).
- Technical logs: 30 days.
Cookies & local storage (TTDSG)
We use only strictly necessary storage required to operate the chat interface and maintain your session. We do not set non-essential cookies and do not use third-party tracking or advertising cookies. No consent banner is displayed because no consent is legally required for this scope.
Automated decision-making & AI
The FlyAgent concierge ("Jack") is an AI assistant that proposes flight options based on live inventory. It does not make legally significant automated decisions about you within the meaning of Art. 22 GDPR. A human operator at MATonics Global Ventures GmbH can take over any conversation on request.
International transfers
Where sub-processors process data outside the EEA, transfers are protected by Standard Contractual Clauses and, where applicable, supplementary measures.
Your rights
You have the right to access, rectification, erasure, restriction, portability, and objection regarding your personal data, as well as the right to lodge a complaint with a supervisory authority. To exercise these rights, contact privacy@flyagent.app.