Your privacy is fundamental to the trust you place in VOLO. This policy explains how we collect, use, protect, and share your personal information when you use our platform and services.
Last updated: February 15, 2026 · Effective: March 15, 2026
When you use VOLO's services, create an account, request a quote, or book a flight, we collect information you voluntarily provide. This includes your full name, email address, phone number, billing and mailing addresses, passport or government-issued identification details (for flight manifests and customs compliance), payment information, and travel preferences.
When you interact with our platform, we automatically collect certain technical information including your IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, time and date of access, and interaction patterns with our platform. We use cookies and similar tracking technologies to enhance your experience and analyze platform usage.
We may receive information from identity verification services, payment processors, aviation regulatory bodies, and business partners to verify your identity, process transactions, comply with aviation regulations, and improve our services.
We use your personal information to process flight bookings, generate quotes, coordinate ground transportation and concierge services, manage membership programs, and communicate with you about your flights and account. Your travel preferences and history enable our AI systems to provide increasingly personalized recommendations.
We analyze aggregated and anonymized usage data to improve our AI matching algorithms, optimize aircraft recommendations, enhance pricing accuracy, and develop new features. This analysis helps us deliver faster quotes, better aircraft suggestions, and a more intuitive booking experience.
We use your information to comply with aviation safety regulations, international customs and immigration requirements, anti-money laundering laws, and other applicable legal obligations. Flight manifest data is shared with relevant aviation authorities as required by law.
To fulfill your flight bookings, we share necessary information with aircraft operators, fixed-base operators (FBOs), ground transportation providers, catering services, and other partners directly involved in delivering your travel experience. These partners are contractually obligated to protect your information and use it solely for service delivery.
Payment information is processed through PCI DSS-compliant payment processors. VOLO does not store complete credit card numbers or CVV codes on our servers.
We may disclose your information when required by law, court order, or governmental regulation. This includes sharing passenger manifest data with customs and immigration authorities, responding to legal process, and cooperating with aviation safety investigations.
VOLO does not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share your data with advertisers or data brokers.
We implement industry-leading security measures to protect your data, including AES-256 encryption for data at rest, TLS 1.3 encryption for data in transit, multi-factor authentication for account access, regular penetration testing and security audits, and intrusion detection and prevention systems. Our infrastructure is hosted on SOC 2 Type II certified cloud platforms with geographic redundancy.
Access to personal data is restricted to authorized personnel on a need-to-know basis. All employees and contractors undergo background checks and sign confidentiality agreements. We conduct regular privacy and security training programs.
We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Flight records and booking data are retained for a minimum of 7 years as required by aviation regulations. Account information is retained for the duration of your account plus 3 years after closure. Marketing preferences and consent records are retained for 5 years.
You may request deletion of your personal data at any time, subject to our legal retention obligations. We will process deletion requests within 30 days and confirm completion. Certain data may be retained in anonymized form for analytical purposes after your identifiable information is deleted.
You have the right to access the personal data we hold about you and to receive a copy in a structured, commonly used, machine-readable format. You can request a complete data export through your account dashboard or by contacting our privacy team.
You may request correction of inaccurate personal data, object to processing based on legitimate interests, withdraw consent for optional data processing, and opt out of marketing communications at any time.
Depending on your location, you may have additional rights under GDPR (European Economic Area), CCPA/CPRA (California), LGPD (Brazil), PIPL (China), or other applicable privacy laws. We honor all applicable regional privacy rights regardless of where you access our services.
As a global aviation service provider, your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for all international transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission, binding corporate rules, and adequacy decisions where applicable.
VOLO's platform is designed for use by individuals aged 18 and older. We do not knowingly collect personal information from children under 18. Minor passengers' information is collected solely as required for flight manifest compliance and is provided by their parent or legal guardian.
We may update this privacy policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes via email or platform notification at least 30 days before they take effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.
Our privacy team is available to answer your questions, process data requests, and address any concerns about how we handle your information.