Privacy policy

Tallrock Ventures Private Limited ("Altivo", "we") runs this website and arranges private jet and helicopter charters as a broker in the 12 countries it serves, each with its own country site. Flights are operated by charter operators licensed by their own country's regulator, for example DGCA Non-Scheduled Operator Permit holders in India, FAA Part 135 or Part 121 air carriers in the United States and Air Operator Certificate holders in the UK and Europe. We do not own or operate aircraft.

This policy covers personal data we collect through this website, our chat, call-back and WhatsApp forms, your account, and when we arrange a trip for you. We decide how your data is used: for Indian law we are the Data Fiduciary, for US state privacy laws the business, and for the GDPR, UK GDPR and the other laws below the controller. Questions about this policy go to hello@altivojets.com.

We only collect what we need to answer your request and arrange your trip.

Identity document numbers are encrypted when stored and only the last four characters are shown on screen. We do not ask for health information; if you tell us about a medical need for a flight (for example an air ambulance), we use it only to arrange that flight.

We do not sell personal data. We use Google advertising cookies only to show our own ads to past visitors, as described in our cookie notice, and you can turn them off with Cookie settings at the bottom of any page.

When you send a form, start a chat, create an account or ask for a quote, you give us your data for that purpose and agree to this policy. Marketing messages need a separate opt-in, which is never pre-ticked.

You can withdraw consent at any time, as easily as you gave it: switch off alerts in Profile and privacy in your account, reply STOP to a text, use the unsubscribe link in an email, or write to hello@altivojets.com. Withdrawing consent does not affect what was done before, and we may still need to keep some records for legal reasons, as explained below.

• The aircraft operator for your trip, which is named on your quote and charter agreement, and the airports, ground handlers and caterers they use.
• Government authorities where the law requires it, for example customs, immigration and aviation security, or to respond to a valid legal request.
• Service providers who run parts of our service for us under contract and only on our instructions:

If our business is sold or reorganised, personal data may pass to the new owner under this policy.

The chat on this site is an automated assistant, not a person. It answers from the information published on this website and can pass you to a specialist. When the AI assistant is switched on, your messages and the page you are on are sent to Google's Gemini service to produce an answer. Under Google's terms for paid use of the Gemini API, this content is not used to improve Google's products.

Please do not type identity document numbers or payment details into the chat. Chat history is kept only in your browser tab. We keep short-lived counters (a random browser ID kept in a cookie, and your IP address, for up to two days) to stop abuse. If you ask for a specialist, the chat so far is sent to our desk with your request.

When you ask for a call back or a WhatsApp reply, we contact you about that request only. We send marketing messages by text, WhatsApp or email only with your prior consent. Message frequency varies, message and data rates may apply, and you can reply STOP to stop texts or HELP for help.

Mobile numbers and text message opt-in data and consent are not shared with any third parties or affiliates for their marketing or promotional purposes.

Our database is hosted in India (Mumbai), whichever country site you use. Some service providers, such as website hosting, email delivery and the chat model, process data in other countries, including the United States. To arrange a trip we also send the details it needs to the operator, which may be in another country. When we transfer data out of India we do so only to countries not restricted by the Government of India, and we require providers to protect it. When data from the UK, the European Union, Switzerland or another country with transfer rules leaves that country, we protect it with the safeguards that country's law requires.

We use encryption in transit (HTTPS) and at rest, encrypt identity document numbers separately, restrict access by role so each member sees only their own records and staff see only what their job needs, and keep access logs. If a personal data breach happens, we will tell affected users and the authorities as the law requires, including the Data Protection Board of India and CERT-In.

• Access: a summary of the personal data we hold about you and how we use it, and who we have shared it with.
• Correction: correct, complete or update inaccurate or incomplete data. You can edit most of it yourself in your account.
• Erasure: ask us to delete data we no longer need, subject to records the law requires us to keep.
• Withdraw consent at any time, as described above.
• Grievance redressal: complain to our Grievance Officer and get a response.
• Nominate a person to exercise your rights if you die or become unable to.

Use Profile and privacy in your account or write to hello@altivojets.com. We may need to confirm your identity. We reply within 30 days and in any case within the time Indian law allows. If you are not satisfied with our response, you may complain to the Data Protection Board of India after using our grievance process.

Depending on the state you live in, you may have the right to know what personal information we collect and how we use it, to access and get a copy of it, to correct it, to delete it, to opt out of its sale or sharing for targeted advertising, and to limit the use of sensitive personal information. We do not sell personal information. Website usage data may be shared with Google to show you Altivo ads (targeted advertising); you can opt out with Cookie settings at the bottom of any page, and we honour the Global Privacy Control signal. We use sensitive personal information (passport or identity numbers and nationality) only to arrange your trip and meet legal requirements.

To make a request, use Profile and privacy in your account or write to hello@altivojets.com. You may use an authorised agent. We will verify your request and respond within 45 days. If we decline, you may appeal by replying to our decision, and we will respond within the time your state's law sets. We honour Global Privacy Control signals as an opt-out request. We will not treat you differently for using these rights.

Under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection, we use your data because we need it to arrange the trip you ask for (contract), because the law requires it (passenger, tax and security records), for our legitimate interest in keeping the site and bookings safe, and with your consent for marketing.

• Access a copy of your data, and correct it if it is wrong.
• Ask us to delete it, or to restrict how we use it, subject to records the law requires us to keep.
• Object to use based on our legitimate interests, and to marketing at any time.
• Receive data you gave us in a portable format.
• Withdraw consent at any time, as described above.

Use Profile and privacy in your account or write to hello@altivojets.com. We reply within one month. You may also complain to your data protection authority: the Information Commissioner's Office in the UK, the authority of your country in the European Union (for example the CNIL in France, the Garante in Italy or the authority of your German state), or the Federal Data Protection and Information Commissioner in Switzerland.

Wherever you live, you can ask to see, correct or delete your data and withdraw consent by writing to hello@altivojets.com or using Profile and privacy in your account. These national laws also apply:

For operators that list aircraft or empty legs with us, we hold the company and its contacts, its licence or certificate number and documents, its fleet with registrations and bases, its rates and pricing rules, its office hours, and the schedule connection it gives us. Calendar links and API keys for scheduling systems are kept encrypted, are used only to read the operator's schedule, and are never shown again; we never write to an operator's system. Bank details, when given, are kept encrypted and only the last four digits are shown.

We use this data to verify the operator, list and price its flights, pass it booking requests and passenger manifests, and pay or invoice it. Data from a scheduling system is used only to list, price and manage that operator's flights on Altivo. Operator records are kept while the operator lists with us and then for as long as tax and contract law requires.

Our public MCP server at /mcp/ lets AI assistants such as Claude and ChatGPT search empty legs and estimates. A search sends us the route, dates, passengers and similar details, with the address of the service that connects; it needs no account. We do not keep what was searched; we log only which tool was called, when, and whether it worked. When you ask an assistant to send a quote request, we receive your name, email, optional phone and the trip details, and handle them like any other enquiry under this policy. We do not receive your conversation with the assistant; the assistant's provider handles it under its own policy.

This site is not directed at children and we do not knowingly collect personal data directly from anyone under 18. Details of a child travelling on a charter must be provided by a parent or guardian, who confirms they are entitled to give them and consent to their use for the trip.

We use the cookies and browser storage needed to sign you in, keep the chat working and protect the site, Google Analytics cookies to understand how the site is used, and Google advertising cookies to show our ads to past visitors. In the European Economic Area, the United Kingdom, Switzerland, Brazil and Canada these are set only after you accept them; elsewhere you can decline them. See our cookie notice for the full list and Cookie settings at the bottom of any page to change your choice.

Privacy questions and requests: hello@altivojets.com.

Grievance Officer: Grievance Officer, Tallrock Ventures Private Limited. Email: hello@altivojets.com. We acknowledge grievances within 24 hours and resolve them within 15 days. See grievance redressal.

We will update this page when our practices change and show the new date at the top. If a change is significant, we will tell account holders by email or in their account before it applies.