Privacy PolicyLast updated: 2 July 2026
Scope of this Privacy PolicyThis Privacy Policy applies to your use of the Website staffairlines.com, the App Staff Airlines, and all related services provided by Agat Systems SL (Calle Marina 36, Galapagar, 28420, Madrid, Spain ), which acts as the Data Controller under the EU General Data Protection Regulation (GDPR).
By using our Website or App and creating a Staff Airlines account, you consent to the collection and processing of your personal data as described in this Privacy Policy.
Age restrictionStaff Airlines is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
Types of data we collectFor all users:- IP address: for security and abuse prevention.
- Account identifiers received from Apple ID or Google Sign-In (email, unique identifier).
- Airline name: your current employer airline, used to display relevant load requests from other users and to show authorised carriers in search results.
- Device and usage data (device type, OS version, country, app interactions) for analytics and service improvement.
- Subscription and transaction data processed via Apple, Google, and Adapty.
For users who apply to become an Agent:- Email address (corporate or personal)
- Verification documents: a photo of your employee ID, ZED card, MyIDTravel/ID90 screenshots or other proof of employment with an airline.
How we handle Agent verification documentsVerification documents are used solely to confirm your employment with an airline. The process is manual:
- You upload a document during Agent registration.
- The document is temporarily stored on Google Cloud infrastructure with restricted access.
- An Agat Systems employee reviews the document, typically within 24 hours.
- Immediately after review, the document is permanently deleted. No copy, backup, hash, or file metadata is retained.
- Only the outcome of the review (verified / not verified) is stored against your Agent profile.
Legal basis for processing- IP address, device data, analytics: legitimate interest in operating and securing the Service.
- Account and subscription data: performance of the contract with you.
- Agent verification documents: your explicit consent, granted at the moment of upload, combined with our legitimate interest in preventing fraud and protecting the community of airline employees.
You can withdraw consent for Agent verification at any time by contacting hello@staffairlines.com. Withdrawal does not affect processing that took place before withdrawal, and may result in the loss of Agent status.
Data retention- IP address: retained for the duration of the session plus up to 30 days in security logs.
- Account data: retained while your account is active, deleted within 90 days of account deletion.
- Airline: retained while your account is active.
- Agent verification documents: deleted immediately after manual review (typically within hours, no longer than a few days).
- Agent verification outcome: retained while your Agent status is active.
- Subscription data: retained as required by applicable tax and consumer protection law.
Sharing of dataWe share data only with processors or third parties essential for service delivery.