Privacy Policy

1. Overview

This Privacy Policy explains what personal information Jetlane Networks, LLC ("Jetlane", "we") collects when you use our website at jetlane.io and our hosting services, how we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act (CCPA), and the People's Republic of China Personal Information Protection Law (PIPL).

Jetlane is the data controller for account and billing data. For data you process using our infrastructure (e.g. your end users' data on a Jetlane VPS), you are the controller and Jetlane is the processor; see our Data Processing Agreement.

2. Information We Collect

Information you provide

• Account: name, email address, country
• Billing: billing address, tax ID (where applicable). Payment card numbers are collected and stored by our payment processor (Stripe) and never reach Jetlane systems
• Communications: messages you send to support, sales, or abuse, and any attachments

Information collected automatically

• Service usage: connection IP addresses, bandwidth, CPU/memory metrics, API requests, login timestamps
• Network logs: source/destination IPs, ports, protocols, NetFlow-style summaries, retained for security and abuse investigation
• Website analytics: page views, referrer URL, browser type, approximate location (from IP). We do not use third-party advertising trackers

3. How We Use Information

• To provide, maintain, and improve the Services
• To process payments and prevent fraud
• To send transactional emails (receipts, security notices, service updates)
• To respond to support requests
• To detect, prevent, and investigate abuse, security incidents, or violations of our Acceptable Use Policy
• To comply with law, valid legal process, or governmental requests

4. Lawful Bases (GDPR/UK GDPR)

• Contract: providing the Services you ordered
• Legitimate interests: security, fraud prevention, product improvement, analytics on aggregated traffic
• Legal obligation: tax records, responding to lawful requests, sanctions compliance
• Consent: marketing emails (separately opted in; revocable any time)

5. Who We Share With

We share personal information only with the following categories of recipients, and only as necessary:

• Payment processing: Stripe, Inc. (US/EU)
• Email delivery: Resend, Inc. (US)
• Website hosting / CDN / DNS: Cloudflare, Inc. (US/global)
• Infrastructure: data center operators in Tokyo (Equinix and similar)
• Legal compliance: courts, regulators, law enforcement when required by valid legal process
• Corporate transactions: in the event of a merger, acquisition, or sale of substantially all assets, with prior notice and the same protections

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

6. International Transfers

Jetlane Networks, LLC is a US company. Our servers are in Japan. Our sub-processors operate globally. For transfers from the EEA, UK, or Switzerland to the US or other third countries, we rely on the European Commission's Standard Contractual Clauses (Decision 2021/914) or equivalent UK / Swiss addenda. Copies are available on request.

7. Data Retention

• Account data: while your account is active, plus 30 days after closure
• Billing records: 7 years (US tax law)
• Network and security logs: 30 days, longer where required for an active investigation or legal hold
• Support tickets: 3 years

8. Security

We use technical and organizational measures appropriate to the sensitivity of the data: TLS 1.2+ in transit; encryption at rest on data store volumes; MFA on administrative access; least-privilege access controls; regular vulnerability scanning; documented incident response. No system is perfectly secure; in the event of a personal-data breach, we will notify affected customers and applicable supervisory authorities within 72 hours of becoming aware, where required by law.

9. Your Rights

Subject to verification of identity, you have the following rights regarding your personal information:

• Access: obtain a copy of your data
• Rectification: correct inaccurate or incomplete data
• Erasure: deletion ("right to be forgotten"), subject to retention obligations
• Restriction: limit how we process it
• Portability: receive your data in a structured, machine-readable format
• Objection: to processing based on legitimate interests, including direct marketing
• Withdraw consent: where processing is based on consent
• Lodge a complaint: with a supervisory authority (EU/UK/Switzerland) or California Attorney General

To exercise any right, email privacy@jetlane.io. We respond within 30 days (extendable to 60 with notice for complex requests).

California-specific (CCPA/CPRA)

California residents have the right to know what categories of personal information we collect, sources, business purpose, and recipients; to request deletion; and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined. You will not be discriminated against for exercising your rights.

China-specific (PIPL)

Residents of the People's Republic of China have rights to access, copy, correct, and delete their personal information held by us, to withdraw consent, and to request transfer to another personal-information processor. Cross-border transfers to Jetlane are made under a personal-information protection impact assessment and the PIPL standard contract or equivalent mechanism.

10. Cookies and Similar Technologies

Our website uses only essential cookies for session state and language preference. We do not use third-party advertising cookies or cross-site trackers. The control panel uses a single first-party authentication cookie. You can block cookies in your browser; doing so may break authenticated areas.

11. Children

The Services are not directed to anyone under 18. We do not knowingly collect personal information from children. If we learn we have, we will delete it.

12. Changes to this Policy

We may update this Policy. For material changes, we will provide at least 30 days notice by email and on jetlane.io. The current version is always available at this URL.

13. Contact and Representative

Privacy questions, complaints, and rights requests:

• privacy@jetlane.io
• Jetlane Networks, LLC · A Delaware limited liability company

An EU/UK representative will be designated if and when activities require one under Article 27 GDPR. We will update this Policy with their contact details.