Statements

Sub-processors

Last updated 27 September 2026. Agencies are told by email at least 30 days before a change.

Providers

ProviderPurposeDataLocation
CloudflareDNS, TLS, firewall, hosting of the web applications, object storage for logos and documentsIP addresses and request metadata; uploaded assetsGlobal network; United States
NeonManaged PostgreSQL databaseAll application dataUnited States or European Union region, per environment
OpenRouterRouting of requests to large language models for the assistant, classification and extractionConversation text, tool results, email content being classified or draftedUnited States; the model providers it routes to
AnthropicThe large language model behind the “Ask JetNova” sales assistant on this websiteWhat a visitor writes to the assistant, the page they are on, and the details they choose to leave for a call backUnited States
SonioxSpeech-to-text for voice messages, Driving Mode and the Live TranslatorVoice recordings while you use voiceUnited States
OpenAIText-to-speech for spoken answersThe text being read aloudUnited States
ResendSending and receiving email for the desks, one-time codes, receipts, e-tickets sent to passengers and alertsEmail addresses, message content, delivery eventsUnited States
Meta Platforms (WhatsApp Business Platform)Delivering WhatsApp messages between customers and an agency's bot; one-time codes for two-factor sign-in, password resets and sensitive actions in Buraq B2BPhone numbers, message content, delivery eventsMeta's infrastructure; see Meta's terms
Open-MeteoWeather and geocoding for trips and Destination NowPlace names or coordinatesEuropean Union
Frankfurter (European Central Bank rates)Exchange rates for the currency converter and cost toolsCurrency codes onlyEuropean Union
OpenStreetMap / OverpassNearby places for the halal food and mosque finder and place previewsCoordinates or place namesEuropean Union
Kiwi.com imagesAirline logos shown on fare cardsAirline codes onlyEuropean Union
Google Analytics (Google)Counting visits to this website; in the EEA, UK and Switzerland only for visitors who press AllowPages viewed, approximate location, device and browser details, under Google's policyUnited States
YouTube (Google)Hosting the demo video on this website; loads only when a visitor presses playIP address and player interaction, under Google's policyUnited States
Google, Microsoft, LinkedInOptional sign-inName and email address of the signing-in userUnited States

Not sub-processors

Global distribution systems (Sabre, Amadeus, Travelport), airlines and their NDC gateways, aggregators, hotel and visa suppliers, and payment providers are connected by each agency under its own contracts. They receive booking and payment data as independent recipients chosen by the agency.

Changes

We add or replace a provider only after telling agencies by email at least 30 days ahead, as the data processing addendum sets out. Questions: privacy@jetnova-ai.com.