Privacy Policy

Effective Date: February 12, 2026 Last Updated: February 12, 2026

Meetricks, LLC (hereinafter "SkyEntry", "we") places great importance on the protection of your personal data. This Privacy Policy aims to inform you about how we collect, process, use, and protect your personal data when you use our website skyentry.co and our services.

This policy complies with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and applicable data protection laws.

1. Data Controller

The data controller for personal data processing is:

Meetricks, LLC 1013 Centre Rd Suite 403A, Wilmington, DE 19805, USA Email: contact@skyentry.co Website: meetricks.com

Data Protection Officer (DPO): Email: dpo@skyentry.co

2. Data Collected

We collect the following categories of personal data:

2.1 Identification Data

• First and last name

• Email address

• Phone number

• Date of birth

• Nationality

• Passport number (for certain services)

2.2 Payment Data

• Credit card information (processed and stored by Stripe, our PCI DSS-certified payment provider — SkyEntry never stores your full card numbers)

• Transaction history and invoices

2.3 Booking Data

• Booking details (airport, service, date, time, passengers)

• Flight numbers and airline

• Booking history and statuses

2.4 Browsing Data

• IP address

• Browser type and operating system

• Pages visited and browsing duration

• Cookie data (see our Cookie Policy)

2.5 Subscription Data

• Subscription plan

• Usage quotas

• Billing history

3. Processing Purposes and Legal Basis

| Purpose | Legal Basis | |---|---| | Management of your user account | Performance of contract | | Processing and managing bookings | Performance of contract | | Payment and invoicing management | Performance of contract | | Subscription management | Performance of contract | | Sending confirmations, reminders, and service notifications | Performance of contract | | Customer service and support | Legitimate interest | | Service improvement and statistical analysis | Legitimate interest | | Marketing and promotional communications | Consent | | Fraud detection and prevention | Legitimate interest / Legal obligation | | Compliance with legal and regulatory obligations | Legal obligation |

4. Data Retention

We retain your personal data only for the duration necessary for the purposes for which it was collected:

• Account data: for the duration of the contractual relationship, then 3 years after the last interaction

• Booking data: 5 years from the service date (accounting obligations)

• Payment data: 13 months from payment (banking obligations), then secure archiving for 5 years (accounting obligations)

• Browsing data: 13 months maximum

• Marketing data: 3 years from the last interaction or until consent is withdrawn

5. Data Recipients

Your personal data may be shared with the following categories of recipients:

5.1 Technical Subprocessors

• Stripe (Dublin, Ireland / San Francisco, USA) — Payment processing

• Railway (San Francisco, USA) — Website hosting

• Resend (San Francisco, USA) — Transactional email delivery

• Neon (San Francisco, USA) — Database

5.2 Operational Partners

• VIP lounge operators and Fast Track service providers at partner airports (only data necessary for the booked service)

5.3 Authorities

• Competent authorities in case of legal obligation

All our subprocessors are bound by Data Processing Agreements (DPAs) compliant with the GDPR.

6. Data Transfers Outside the EU

Some of our subprocessors are established in the United States. These transfers are governed by:

• Standard Contractual Clauses (SCCs) approved by the European Commission

• The EU-US Data Privacy Framework, where applicable

• Additional technical and organizational measures (encryption, pseudonymization)

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for all communications

• PCI DSS compliance for payment data via Stripe

• Restricted data access on a need-to-know basis

• Access logging and monitoring

• Regular backups and business continuity planning

• Data anonymization upon account deletion

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15): obtain a copy of your personal data

• Right to rectification (Art. 16): correct inaccurate or incomplete data

• Right to erasure (Art. 17): request deletion of your data

• Right to restriction (Art. 18): restrict processing in certain cases

• Right to data portability (Art. 20): receive your data in a structured, machine-readable format

• Right to object (Art. 21): object to processing on legitimate interest grounds

• Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise your rights:

• From your personal account (Settings > Personal Data)

• By email: dpo@skyentry.co

• By mail: Meetricks, LLC — DPO — 1013 Centre Rd Suite 403A, Wilmington, DE 19805, USA

We will respond to your request within one month of receipt. This period may be extended by two months in case of complex requests.

You may also file a complaint with the relevant data protection authority (e.g., CNIL in France: www.cnil.fr).

9. Cookies

For information about cookie usage on our website, please refer to our Cookie Policy.

10. Changes

We may update this Privacy Policy at any time. Any significant change will be notified by email or by a notice on the website. The current version is the one accessible on this page.

11. Contact

For any questions regarding this Privacy Policy or the protection of your data:

• DPO: dpo@skyentry.co

• Support: contact@skyentry.co

• Website: meetricks.com

• Address: Meetricks, LLC — 1013 Centre Rd Suite 403A, Wilmington, DE 19805, USA