Privacy Policy

MATonics Global Ventures GmbH (operating the FlyAgent™ brand, advised by The Bureau™)
Windhag 8, 63263 Neu-Isenburg, Germany
Amtsgericht Offenbach am Main, HRB 56838
Email: hello@matonics.com

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Postfach 3163, 65021 Wiesbaden, Germany.

• Chat content: messages you exchange with the FlyAgent concierge ("Jack"), including travel preferences, dates, origins, and destinations.
• Traveller details for bookings: name, date of birth, contact email and phone, billing address, as required by the airline.
• Payment card: you enter your card in a separate secure form, never in the chat. It is passed once to our ticketing partner and the airline to pay for the ticket and is never stored by us; we keep only the card type and the last 4 digits. It is never shown to the AI assistant.
• Traveller memory: to continue a trip across visits, Jack keeps short notes about your travel preferences (for example home airport, seat or meal wishes), linked to a random id stored in your browser.
• Home location (optional): if you give a home address for a watched trip, we reduce it to a location accurate to about 100 metres to work out when you should leave. We do not use your device GPS.
• Account data (admins only): email address and authentication identifiers via Google OAuth.
• Technical logs: minimal request logs (IP, user-agent, timestamp) for security and abuse prevention; your country is derived from our hosting provider's network data, no third-party IP lookup.
• Usage statistics and advertising measurement: only if you accept cookies (see below).

• Art. 6(1)(b) — performance of a contract: processing your trip request, issuing tickets, post-booking support.
• Art. 6(1)(c) — legal obligation: retention of booking records under § 147 AO (10 years).
• Art. 6(1)(f) — legitimate interests: service security, abuse prevention, product improvement on aggregated data.
• Art. 6(1)(a) — consent: any optional marketing communication.

MATonics Global Ventures GmbH uses the following categories of processors under Art. 28 GDPR agreements, and shares booking data with the parties needed to issue your ticket:

• Hosting and database (application hosting, database, authentication); EU region where available, global edge network for delivery.
• AI model providers and an AI routing service (the language model behind "Jack"): chat content is sent to generate replies; providers may process data in the USA; no training on your data under our terms.
• Mapping and routing services: your home address when we locate it, and that location and the airport when we work out your journey.
• Email delivery (booking confirmations), error monitoring (technical errors, with card data removed) and internal team messaging (an automated copy of chats for quality and abuse monitoring, with card data removed).
• Ticketing partner and airlines (a German IATA-accredited ticketing provider and the operating airline): traveller details and payment for the booking. They act as independent controllers for the ticket.
• Advertising partners (Google Ads, Google Tag Manager, Meta Pixel): only after you accept cookies.

A list of the named providers is available on request by email (see Imprint).

• Chat conversations: 12 months, then deleted.
• Traveller memory: 24 months after your last visit, then deleted.
• Watched trips, including home location: deleted no later than 60 days after the flight.
• Booking confirmation steps: 30 days.
• Booking records: 10 years (§ 147 AO, § 257 HGB).
• Technical logs and metrics: 30 days.

You can ask us to delete your data at any time: Delete my data.

Strictly necessary storage (no consent needed): a random visitor id and your chat session in your browser, so the conversation continues, plus your cookie choice. We do not fingerprint your device.

With your consent only ("Accept all" in the cookie banner): usage statistics on this site and advertising measurement (Google Ads, Google Tag Manager, Meta Pixel), which may transfer data to the USA. You can change your choice at any time via "Cookie settings" in the footer.

The FlyAgent concierge ("Jack") is an AI assistant that proposes flight options based on live inventory. It does not make legally significant automated decisions about you within the meaning of Art. 22 GDPR. The service is fully automated; no human operator takes part in the chat. You can reach us by email at any time (see Imprint).

Where sub-processors process data outside the EEA, transfers are protected by Standard Contractual Clauses and, where applicable, supplementary measures.

You have the right to access, rectification, erasure, restriction, portability, and objection regarding your personal data, as well as the right to lodge a complaint with a supervisory authority. To exercise these rights, contact hello@matonics.com.