Privacy Policy

How Airkarma collects, uses and protects your personal data when we pursue a flight compensation claim for you — and the rights you have over it under the GDPR.

Version
2026-07-15
In force from
15 July 2026

1. Who is responsible for your data

Airkarma, registered at [registered address to be confirmed] under company number [company registration number to be confirmed], is the data controller for the personal data described here.

For anything in this policy, contact contact@airkarma.fr.

2. What we collect

  • Who you arename, email address, phone number, date of birth, postal address and nationality.
  • Identity and travel documentspassport or ID number, and any booking confirmation, boarding pass or identity document you upload. We read text out of those documents automatically to fill in your claim, and store the extracted text.
  • Your flight and claimbooking reference, flight number, route, dates, what went wrong, and the progress of the claim.
  • Your signaturethe signature you draw when assigning the claim, stored as an image and embedded in the signed agreement.
  • Evidence of your consentthe date and time you consented, the version of the policy you agreed to, and the IP address and browser your consent came from. We keep this because the law requires us to be able to demonstrate that you consented.
  • Your messagescorrespondence between you and us about your claim.
  • Account datayour sign-in details, if you create an account to track your claim.

3. Why we use it, and our legal basis

  • To assess and pursue your claimincluding sharing what is needed with the airline. Legal basis: performance of our contract with you, and your consent (Art. 6(1)(a)) for processing your identity and travel-document data.
  • To keep you informedstatus updates, requests for documents, and the outcome. Legal basis: performance of our contract.
  • To establish, exercise or defend legal claimsincluding keeping a record of what was recovered and paid. Legal basis: our legitimate interests and legal obligation.
  • To meet accounting and tax obligationsLegal basis: legal obligation.

We do not sell your data, and we do not use it for advertising or automated decisions that produce legal effects for you. Our eligibility check is a rules-based estimate under Regulation (EC) No 261/2004 (EU261); a person reviews your claim before it is filed.

4. Who we share it with

  • The airlinethe details necessary to make the claim, including your name, flight details and the assignment of claim.
  • Courts, regulators and national enforcement bodieswhere escalation is needed to recover your compensation.
  • Service providers who work for usour hosting provider, our email delivery provider, and a flight-data provider we query to confirm what happened to your flight. They act on our instructions only.

5. How long we keep it

We keep claim records for approximately 6 years after a claim closes. That period reflects how long a dispute over a claim, or an accounting or tax obligation, can realistically arise.

If you ask us to erase your data before then, we anonymise your records rather than deleting them outright — see your rights below.

6. How we protect it

Your contact details, date of birth, address, passport or ID number, booking reference, signature and the text extracted from your documents are encrypted in our database, so they are unreadable to anyone who obtains a copy of it without our keys.

Access to claims is restricted by role: only staff working your claim can open it, and every change is recorded against the person who made it.

7. Your rights

  • Access and portabilityget a copy of everything we hold about you, in a machine-readable format. You can download this yourself at any time from your account, or ask us and we will send it.
  • Rectificationhave inaccurate data corrected. You can edit your profile directly; ask us for anything else.
  • Erasureask us to erase your data. We do this by anonymising your account: your name, contact details, date of birth, identity-document data, signature and uploaded document text are overwritten and cannot be recovered. The financial record of any claim is kept, without anything that identifies you, because we are required to retain a record of money recovered and paid.
  • Withdraw consentat any time, by contacting us. Withdrawing consent does not undo processing already carried out, and we may be unable to continue a claim without it.
  • Object and restrictobject to processing based on our legitimate interests, or ask us to restrict it while a concern is resolved.
  • Complainto us at contact@airkarma.fr, or to the data protection supervisory authority in the country where you live or work.

8. Cookies

We use a small number of strictly necessary cookies. A session cookie keeps you signed in to your account; without it we cannot tell one signed-in customer from another. We do not use advertising or third-party tracking cookies, so there is nothing here for you to opt out of.

9. Where your data is held

Your data is stored on servers in the European Union. Where a provider we use processes data outside the EU, we rely on the European Commission's standard contractual clauses or an adequacy decision to protect it.

10. Changes to this policy

We may update this policy. Each version carries the version identifier and date at the top of this page, and we record which version you consented to against your claim — so we can always show you the exact wording you agreed to.