1. Notice at collection
We collect contact identifiers (such as name, email and optional phone), trip requirements (such as route, dates, passenger count, budget and preferences), communications, account information and technical usage information. We use them to provide planning tools, handle your inquiry, make the introduction you request, maintain records and protect the service. A requested referral discloses relevant contact and trip information to an independent provider, including Jet Access when involved in your inquiry. You can browse without requesting a referral and can submit an inquiry without an account. Do not supply sensitive documents in free-text fields. Privacy requests and Do Not Sell or Share requests are available without signing in.
2. Controller and contact
Roth Advisory Group LLC is the controller for information it uses to operate the InstaJets lead-generation platform. Principal address: 1309 Coffeen Avenue STE 16954, Sheridan, Wyoming 82801, United States. Privacy correspondence: Roth Advisory Group LLC, Attention: Privacy, 255 NE Sixth Ave, Unit B, Delray Beach, FL 33483, United States. Use our online request form for an electronic request. An independent provider may become a separate controller for its own quoting, contracting and aviation services; ask it for its own privacy notice.
3. Sources and categories
Information comes from you, authorized people acting for you, providers responding to your inquiry and technical operation of the platform. If you use an account, we process account identifiers and authentication-related information through the platform provider. Planning and advisor features process your inputs, conversation content and generated estimates. Provider workspaces may record proposal, request-status, payment-preference and transaction-reference information. Hosting and security services may process IP addresses, browser/device information, timestamps and request logs. App-owned usage analytics and campaign attribution require optional consent; browser privacy preferences are recorded with new trip inquiries. Local browser storage can hold unfinished or saved trip information and your dated privacy preference record. See Cookies & Browser Storage for controls and the limits of platform-managed tracking.
4. Purposes and legal bases
Where the GDPR, UK GDPR or comparable law applies, processing needed to respond to your request or provide a requested account or referral is based on taking requested pre-contractual steps or performing the relevant platform service. Security, fraud prevention, troubleshooting and proportionate administration are based on legitimate interests, subject to a balancing of your rights. Recordkeeping and valid legal requests may be based on legal obligations. Optional marketing, nonessential tracking and any sensitive-data processing requiring permission need the applicable consent; an inquiry is not blanket consent. You may withdraw consent without affecting prior lawful processing and object to processing based on legitimate interests.
5. Recipients and AI services
Relevant information is available to authorized personnel and service providers for hosting, authentication, storage, support and AI-assisted planning, including Base44 and the AI services used by the selected feature. AI inputs may be sent to those services to produce a response. Do not enter confidential third-party information or sensitive data unless necessary and lawfully authorized. When you ask for follow-up, relevant information is shared with the aviation provider handling the inquiry, rather than made publicly available. Provider-approved quote links are accessible to people who possess them, so do not forward them indiscriminately. We may also disclose information when legally required or necessary to protect rights or in a business transfer subject to applicable safeguards.
6. Referral disclosures, sale and sharing
Roth Advisory Group LLC receives no money or other commercial benefit for referring your inquiry. The app does not install advertising trackers or configure cross-context advertising disclosures. We share relevant information to fulfill the provider introduction you request, not to enroll you in unrelated marketing. The Privacy settings control and Privacy & Legal Requests provide an immediate browser opt-out and a separate route for prior inquiries or other devices. Global Privacy Control activates the browser opt-out and disables optional app-owned analytics. Neither declining analytics nor opting out cancels a requested provider introduction; platform-managed processing and separate providers require their own review and controls.
7. International processing
We are a United States business serving inquiries from multiple countries. Information may be processed in the United States and other countries where relevant providers operate, whose protections may differ from those of your home country. When a restricted transfer requires a legal safeguard, an applicable adequacy decision, contractual safeguards such as standard contractual clauses and any required UK addendum, or another lawful mechanism must be in place. Contact us for information about the recipients, countries and safeguards applicable to your request. Merely using this website is not consent to a restricted international transfer.
8. Retention and security
Retention is based on the purpose and sensitivity of the information, the progress of your inquiry, account activity, applicable recordkeeping requirements, disputes and legal holds. We do not promise a single fixed period for every record. Information no longer needed should be deleted or de-identified, subject to lawful retention and backup lifecycles. Browser-saved drafts may remain until used, removed or cleared in your browser. We use access controls and platform safeguards, but no online service can guarantee absolute security. A deletion request is reviewed, not automatically executed upon submission.
9. Your privacy rights
Depending on location and applicable law, you may request access, a copy, correction, deletion, portability, restriction or an explanation of processing; object to legitimate-interest processing or direct marketing; withdraw consent; and opt out of qualifying sale, sharing or targeted advertising. You may also have rights concerning sensitive information and significant automated decisions. We may request proportionate verification for account access or deletion, but will not require an account solely to make a request. Authorized agents may contact us and establish authority where required. We do not deny legally protected services simply because you exercise a privacy right.
10. Regional requests, timelines and appeals
EU/EEA and UK residents may complain to their supervisory authority, including the authority in their place of residence or the UK Information Commissioner. GDPR requests ordinarily require a response within one month, with a permitted extension explained when applicable. Covered US state laws may generally require a response within 45 days, subject to their specific rules and extensions; opt-out deadlines can be shorter. If a request is refused, you may request an appeal and contact your regulator or attorney general. These timelines describe legal duties where applicable, not an assertion that every jurisdiction has the same rights.
11. Children and automated decisions
The service is intended for adults aged 18 or over and is not directed to children. Adults should submit only the passenger information needed for an inquiry and should not submit children’s names or sensitive details in general planning fields. Notify us if a child has supplied personal data. Estimates and recommendations assist planning; they do not themselves approve credit, make a flight reservation or make a legally binding eligibility decision. A human provider must confirm actual travel arrangements.
12. How to submit a request
Use Privacy & Legal Requests, including for account deletion, marketing withdrawal, accessibility help, an appeal or an opt-out, or write to our mailing address above. The page’s immediate browser controls apply an analytics withdrawal or sale/sharing opt-out without requiring identity details. The separate request form records requests about prior records, other devices and broader rights for administrator review; it does not itself erase data, stop a provider’s separate communications or cancel travel. Contact a separate provider directly about its records as well. We will use request details to handle and document the request, not as a new sales inquiry. Updates to this notice will carry a revised date and additional notification when required.