JET DATA RECOVERY — PRIVACY POLICY
Version 1.2 — Effective August 5, 2026
1. About This Policy
This Privacy Policy explains how Jet Data Recovery (“Jet Data,” “we,” “us,” or “our”) handles personal information. It applies to jetdatarecovery.com, to our San Antonio facility, and to the services we provide.
Jet Data does not sell personal data. Jet Data does not sell sensitive personal data. We do not use personal data for targeted advertising or for profiling.
2. Two Different Kinds of Information
Business Information is what you give us to hire us: name, phone, email, address, payment details, and case notes. This policy governs it.
Customer Data is whatever is stored on the drive or device you send us. It is your property, not ours. We access it only as far as is technically required to recover it and confirm the recovery worked. We do not read, index, mine, or analyze it.
Think of a locksmith opening a safe. He needs your name and payment to do the job. What’s inside the safe is not his business — he opens the door and steps back.
2a. Where Your Media Is Handled
In our shop, we perform software-based (logical) recovery only. We do not operate a cleanroom and do not perform physical or component-level work on your media.
If your media needs physical or cleanroom work, we send it to an independent partner laboratory — with your authorization first, which may be given verbally, by phone, by text, or in writing. Media is ordinarily shipped by United States Postal Service or another common carrier. Jet Data is not responsible for loss, theft, delay, damage, or destruction of media or data while it is in the custody of any carrier. If your media is valuable to you, ask us in writing to add insurance before we ship.
Partner laboratories are separate businesses with their own privacy practices and their own terms. They are bound to us by written confidentiality agreements, but their handling of your data is governed by their policies, not this one.
3. Information We Collect
From you: name, business name, address, phone, email, payment details (processed by our payment processor; we do not store full card numbers), device details, case notes, and any passwords or credentials you voluntarily provide to enable a recovery.
Automatically on our website: IP address, browser and device type, pages viewed, referring URL, and cookie or analytics identifiers.
At our facility: video surveillance footage, for security purposes.
From others: referral information, carrier shipping and delivery data, and fraud signals from our payment processor.
Incidentally on your media: Customer Data as described in Section 2, which may include sensitive categories. We do not catalog or extract it.
4. How We Use It
We use Business Information to evaluate media, quote and perform recoveries, communicate with you about your case, process payments, verify identity before releasing data, maintain records, handle disputes and warranty claims, comply with legal and tax obligations, and improve our services. We may send service-related messages, and marketing messages where permitted, with an opt-out.
We use Customer Data only to perform the recovery you hired us for and to verify it succeeded.
5. Sensitive Data
We do not intentionally collect sensitive data during intake. Sensitive data may exist within Customer Data on your media; where it does, it is protected under Section 2 and under the confidentiality terms of our Terms of Service.
We do not sell sensitive personal data. We do not sell biometric personal data.
6. How We Share It
We share Business Information only as needed with payment processors, shipping carriers, specialty recovery labs and subcontractors under confidentiality agreement, our accountants and legal counsel, our IT and software vendors, and law enforcement or courts where compelled by legal process or required by mandatory reporting law.
Customer Data is shared only with a subcontracted recovery lab bound by confidentiality, and only where technically necessary to complete your recovery.
We have not sold personal data in the preceding twelve months and do not intend to.
7. Cookies and Analytics
Our website uses cookies and similar technologies for functionality, security, and aggregate traffic analytics. You can disable cookies in your browser, though some features may not work correctly. We honor the Global Privacy Control (GPC) and other recognized universal opt-out signals. We do not engage in cross-context behavioral advertising.
8. Retention and Destruction
All customer data is destroyed 30 days after delivery of your recovery. Destruction is performed using methods designed to render the data unreadable and indecipherable, consistent with Texas Business and Commerce Code § 521.052(b). You may request earlier destruction, or written confirmation of destruction, at any time.
Business records such as invoices, service history, and website analytics are retained for as long as reasonably necessary for our business purposes or as required by law.
9. Security
We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we handle, including access controls at our facility, restriction of access to personnel who need it, written confidentiality obligations for employees and subcontractors, and secure destruction of data and media.
Certification status. Jet Data Recovery does not hold and does not claim any third-party security certification or accreditation — including SOC 1, SOC 2, ISO/IEC 27001, PCI DSS, cleanroom certification, or any HIPAA compliance attestation. Certain partner laboratories maintain their own certifications; those certifications belong to that laboratory alone and are not extended to Jet Data. If your data is subject to a requirement that the handling party hold a specific certification, tell us in writing before shipping.
No system is perfectly secure, and we do not guarantee absolute security.
10. Data Breach Notification
If a breach of system security compromises sensitive personal information in our possession, we will notify affected individuals without unreasonable delay and no later than 60 days after determining a breach occurred, and will notify the Texas Attorney General within 30 days where the breach affects 250 or more Texas residents, as required by Texas Business and Commerce Code § 521.053.
11. Your Privacy Rights
Jet Data Recovery qualifies as a small business under U.S. Small Business Administration size standards and is therefore largely exempt from the Texas Data Privacy and Security Act (Texas Business and Commerce Code Chapter 541). We nonetheless offer the following rights voluntarily.
You may request to access, correct, delete, or receive a portable copy of the personal information we hold about you. Because we do not sell data, engage in targeted advertising, or profile customers, there is nothing to opt out of.
To make a request: email support@jetdatarecovery.com with the subject line “Privacy Request,” or call (830) 205-3255. We will verify your identity before acting, which may require confirming details of a past case.
We respond within 45 days and may extend once where reasonably necessary. The first two requests in any 12-month period are free; we may charge a reasonable fee for excessive, repetitive, or manifestly unfounded requests, or decline them.
We may decline requests where we are legally required to retain the records, where the request would compromise another person’s privacy or our security, or where the law otherwise permits. If we decline, we will explain why, and you may appeal by emailing support@jetdatarecovery.com with the subject line “Privacy Appeal.” We will respond in writing within 60 days.
Residents of other states with comprehensive privacy laws may have similar rights. Contact us using the same method.
12. Biometric Information
We do not collect, capture, or store biometric identifiers for any commercial purpose, as that term is used in Texas Business and Commerce Code Chapter 503. Biometric data may exist within Customer Data on your media; we do not extract, index, or use it.
13. Artificial Intelligence
We may use AI-assisted software for internal business tasks such as scheduling, drafting communications, and diagnostic analysis.
We do not upload or expose Customer Data to any third-party AI system, do not use your data to train any AI model, and do not use AI to make consequential decisions about you. Our use of AI complies with the Texas Responsible Artificial Intelligence Governance Act (Texas Business and Commerce Code Chapter 551 et seq.).
14. Children
Our services are directed to adults. We do not knowingly collect personal information from anyone under 18. Media belonging to a minor should be submitted by a parent or legal guardian. Contact us if you believe we have collected information from a child under 13.
15. Regulated Data
You must tell us in writing before shipping if your media contains protected health information, nonpublic personal financial information, student education records, or other regulated data. We have no way to know otherwise and no obligation to apply regulated-data procedures absent that notice.
Jet Data holds no HIPAA compliance certification, SOC report, or comparable third-party attestation. Where you are a HIPAA covered entity or business associate and disclose that in advance, we will consider executing a Business Associate Agreement case by case, or will route the work to a partner laboratory that maintains the certifications you require. We are not obligated to accept any engagement involving regulated data.
Where we do handle protected health information, that handling is governed by HIPAA, any executed Business Associate Agreement, and the Texas Medical Records Privacy Act (Texas Health and Safety Code Chapter 181). Nonpublic personal financial information is handled under the Gramm-Leach-Bliley Act and the FTC Safeguards Rule. Student education records are handled under FERPA.
16. Third-Party Links
Our website may link to third-party sites. We are not responsible for their privacy practices.
17. Changes
We may update this policy at any time. Material changes will be posted here with a new effective date. Continued use of our services after an update constitutes acceptance of the revised policy.
