Privacy Policy
This policy covers two different things: the flypro.ae website, and the FlyPro platform that travel and visa agencies use to run their cases. Our responsibilities are not the same in both, so we have kept them apart rather than blurring them into one section.
1. Who we are
FLYPRO TECHNOLOGIES FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. In this policy, "we", "us" and "FlyPro" mean that company.
For anything about your personal data, write to [email protected] or message +971 56 135 2920.
2. The two roles we play
On this website, we are the controller. If you visit flypro.ae, we decide what is collected about that visit and why. That is section 3.
Inside the platform, we are the processor. When an agency runs a visa case, the traveller's personal data belongs to that agency. The agency decides what to collect, why, and how long to keep it. We hold and process it on their instructions and do not use it for our own purposes. That is section 5.
If you are a traveller and an agency is handling your visa on FlyPro, the agency is responsible for your data, and its own privacy notice governs how it is used. Contact the agency first. We will help them respond, and we will respond to you directly if they cannot.
3. What this website collects
flypro.ae is a single page of text and images. There is no account, no login and no form on it. We do not ask you for your name, your email or anything else in order to read it.
Without your consent, the only data involved is what any web server necessarily receives to deliver a page: your IP address, the page requested, your browser and operating system, and the time of the request. Our hosting provider keeps those in standard server logs for security and troubleshooting. We do not use them to build a profile of you.
Analytics, only if you agree
We would like to understand which parts of this page are useful, so we can write a better one. To do that we use PostHog. Nothing analytics related loads, runs or is stored on your device until you press Accept on the banner. If you decline, or if your browser sends a Do Not Track signal, no analytics script is ever fetched and no analytics cookie is ever set.
If you accept, we record which sections you read, how far you scroll, which questions you open and which buttons you press, along with a randomly generated identifier so repeat visits can be recognised. We do not collect your name or email through this page, because the page never asks for them.
You can change your mind at any time using Cookie choices in the footer of any page. Withdrawing consent stops collection immediately and clears the identifier. We keep your choice itself in your browser's local storage, because we cannot honour a decision we do not remember.
Links away from this site
The buttons on this site open WhatsApp or your email client. Once you send that message you are talking to us directly, and we hold what you tell us in order to answer it. WhatsApp is operated by Meta under its own privacy terms, which we do not control.
4. Why we may contact you
If you message us about the product, we use your contact details to reply, to run your free month, and to set up your account if you go ahead. That is processing necessary to take steps at your request before entering a contract. We do not add you to a marketing list because you asked a question, and we do not sell or rent contact details to anyone.
5. What the platform processes for agencies
When an agency runs its visa work on FlyPro, the following categories of traveller data may be held, entirely at that agency's direction:
- Identity and contact details: name, email address, phone number.
- Nationality, second nationality where held, and country of residence.
- Passport and travel document details, including residence permits and visas already held.
- Documents uploaded for a visa application, which commonly include bank statements, employment letters, photographs and itineraries.
- Case records: the stage a case has reached, notes, checklists and outcomes.
- Invoices and payment records for the agency's fee.
- Bookings made through the agency, such as flights and hotels.
Some of this is sensitive. We treat visa documents as confidential by default, restrict access to them, and never use them to market anything to anyone.
Automated checks, and what they are not
Two parts of the platform use AI. The readiness check assesses a traveller against a destination using nationality, residence and travel history. The document review reads uploaded files against that destination's stated requirements and reports what looks wrong.
Neither decides anything. They produce an assessment for the agency to read. No visa is granted or refused by FlyPro, and no application is submitted automatically. A human at the agency decides what to do with the result. FlyPro does not guarantee that any visa will be approved.
To perform these checks, document contents and case details are sent to OpenAI's API. OpenAI states that data submitted through its API is not used to train its models. We do not send more than the check requires.
6. Who else is involved
We use a small number of service providers. They act on our instructions, and are not permitted to use the data for their own purposes.
| Provider | What it does |
|---|---|
| Amazon Web Services | Hosting, and storage of uploaded documents |
| OpenAI | Readiness checks and document review |
| Stripe | Card payments |
| Ziina | Card payments in dirhams |
| Mailtrap | Delivery of transactional email |
| PostHog | Website analytics, only with your consent |
| Travel suppliers | Flight and hotel search and booking, when an agency books through the platform |
Card details are entered directly with the payment provider. FlyPro never receives or stores a full card number.
We also disclose personal data where the law requires it, or to establish or defend a legal claim. If FlyPro is ever sold or merged, data may transfer to the buyer, who would remain bound by this policy until you are told otherwise.
7. Where data goes
We are based in Dubai, and our providers operate in the United Arab Emirates, the European Union and the United States. That means personal data may be transferred outside the UAE. Where it is, we rely on the safeguards in the applicable law, including contractual protections with each provider.
8. How long we keep things
- Server logs: a short rolling period for security and troubleshooting.
- Analytics: retained by PostHog under our account settings, and deleted when you withdraw consent.
- Enquiries: kept while we are talking, and for a reasonable period afterwards in case you come back.
- Agency and traveller data in the platform: kept for as long as the agency's account is active. The agency controls deletion. When an account closes, data is deleted or returned on request, except where we must keep records to meet a legal or accounting obligation.
9. Security
Traffic is encrypted in transit. Uploaded documents are stored in access controlled storage and are served only to people entitled to see them. Access inside the platform is limited by role, so an agency decides which of its own staff can open a case or a document. No system is perfectly secure, and we do not claim otherwise, but we take this seriously because visa documents are among the most sensitive things a person will ever hand over.
10. Your rights
Under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and under the GDPR where it applies to you, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how it is used, or transfer it elsewhere. Where we rely on consent, you can withdraw it at any time without affecting what was done beforehand.
Write to [email protected]. We will respond within 30 days. If your data sits inside an agency's account, we will pass the request to that agency, because it is theirs to answer, and we will support them in answering it.
If you are not satisfied with our response, you can complain to the UAE Data Office, or to your local supervisory authority if you are in the EU or UK.
11. If you are an agency using FlyPro
You are the controller of your travellers' data. That means you need your own privacy notice, and a lawful basis for collecting what you collect. You should tell your travellers that their documents are checked by an automated system, and that a human at your agency reviews the result. Our contract with you sets out our obligations as your processor.
12. Children
This website is aimed at businesses, not children, and we do not knowingly collect data from anyone under 18 through it. Visa cases sometimes involve children travelling with family. Where they do, that data is provided by the agency's adult client and is handled on the same terms as everything else in section 5.
13. Changes to this policy
If we change how we handle personal data, we will update this page and move the date at the top. Where a change is significant and affects agencies using the platform, we will tell them directly rather than relying on you to check.
14. Contact
FLYPRO TECHNOLOGIES FZCO
Building A1, Dubai Digital Park
Dubai Silicon Oasis, Dubai
United Arab Emirates