Privacy Policy
How Airkarma collects, uses and protects your personal data when we pursue a flight compensation claim for you — and the rights you have over it under the GDPR.
- Version
- 2026-07-15
- In force from
- 15 July 2026
1. Who is responsible for your data
Airkarma, registered at [registered address to be confirmed] under company number [company registration number to be confirmed], is the data controller for the personal data described here.
For anything in this policy, contact contact@airkarma.fr.
2. What we collect
- Who you are — name, email address, phone number, date of birth, postal address and nationality.
- Identity and travel documents — passport or ID number, and any booking confirmation, boarding pass or identity document you upload. We read text out of those documents automatically to fill in your claim, and store the extracted text.
- Your flight and claim — booking reference, flight number, route, dates, what went wrong, and the progress of the claim.
- Your signature — the signature you draw when assigning the claim, stored as an image and embedded in the signed agreement.
- Evidence of your consent — the date and time you consented, the version of the policy you agreed to, and the IP address and browser your consent came from. We keep this because the law requires us to be able to demonstrate that you consented.
- Your messages — correspondence between you and us about your claim.
- Account data — your sign-in details, if you create an account to track your claim.
3. Why we use it, and our legal basis
- To assess and pursue your claim — including sharing what is needed with the airline. Legal basis: performance of our contract with you, and your consent (Art. 6(1)(a)) for processing your identity and travel-document data.
- To keep you informed — status updates, requests for documents, and the outcome. Legal basis: performance of our contract.
- To establish, exercise or defend legal claims — including keeping a record of what was recovered and paid. Legal basis: our legitimate interests and legal obligation.
- To meet accounting and tax obligations — Legal basis: legal obligation.
We do not sell your data, and we do not use it for advertising or automated decisions that produce legal effects for you. Our eligibility check is a rules-based estimate under Regulation (EC) No 261/2004 (EU261); a person reviews your claim before it is filed.
5. How long we keep it
We keep claim records for approximately 6 years after a claim closes. That period reflects how long a dispute over a claim, or an accounting or tax obligation, can realistically arise.
If you ask us to erase your data before then, we anonymise your records rather than deleting them outright — see your rights below.
6. How we protect it
Your contact details, date of birth, address, passport or ID number, booking reference, signature and the text extracted from your documents are encrypted in our database, so they are unreadable to anyone who obtains a copy of it without our keys.
Access to claims is restricted by role: only staff working your claim can open it, and every change is recorded against the person who made it.
7. Your rights
- Access and portability — get a copy of everything we hold about you, in a machine-readable format. You can download this yourself at any time from your account, or ask us and we will send it.
- Rectification — have inaccurate data corrected. You can edit your profile directly; ask us for anything else.
- Erasure — ask us to erase your data. We do this by anonymising your account: your name, contact details, date of birth, identity-document data, signature and uploaded document text are overwritten and cannot be recovered. The financial record of any claim is kept, without anything that identifies you, because we are required to retain a record of money recovered and paid.
- Withdraw consent — at any time, by contacting us. Withdrawing consent does not undo processing already carried out, and we may be unable to continue a claim without it.
- Object and restrict — object to processing based on our legitimate interests, or ask us to restrict it while a concern is resolved.
- Complain — to us at contact@airkarma.fr, or to the data protection supervisory authority in the country where you live or work.
9. Where your data is held
Your data is stored on servers in the European Union. Where a provider we use processes data outside the EU, we rely on the European Commission's standard contractual clauses or an adequacy decision to protect it.
10. Changes to this policy
We may update this policy. Each version carries the version identifier and date at the top of this page, and we record which version you consented to against your claim — so we can always show you the exact wording you agreed to.