Airgate Arabian Logistics Company — AirGate Platform
Effective date: 27-05-2026
Last updated: May 2026
1. Introduction
Airgate Arabian Logistics Company (“we”, “us”, “AirGate”) operates the AirGate platform, including web dashboards, mobile applications, and related APIs used for Hajj and Umrah logistics—flight scheduling, passenger manifests, baggage tracking, warehouse operations, and stakeholder reporting.
This Privacy Policy explains how we collect, use, store, and protect information when you use AirGate as staff, administrator, or authorized stakeholder. It applies to all services that display or link to this policy.
By using AirGate, you agree to the practices described here. If you do not agree, please do not use the platform.
2. Information We Collect
2.1 Staff and administrator accounts
When your organization provisions an account or you sign in, we may collect:
- Full name and email address
- Hashed password (we do not store plain-text passwords)
- Role (e.g., Admin, Supervisor, Warehouse Staff, Airport Staff, Hotel Staff, Stakeholder View)
- Contact number and assigned city or hub, where configured
- Account status (active/inactive)
2.2 Mobile app and device data
For staff using the mobile application, we may collect:
- Device identifier (
deviceId) - Device type (e.g., Android, iOS)
- Firebase Cloud Messaging (FCM) push token for operational notifications
- Login timestamps and session-related metadata
2.3 Operational and pilgrimage-related data
In the course of legitimate logistics operations, the platform processes data uploaded or entered by authorized users, including:
- Flight schedules: flight numbers, dates, hotels, maktab/tashree references, pilgrim counts, embark cities, airports, branches
- Passenger manifests: names, passport numbers, cover IDs, room/building assignments, service centers, flight associations
- Baggage records: tag numbers, passenger name and passport (as linked to a bag), weight, scan time, status, remarks, batch and flight linkage
- Workflow data: screening notes, truck collections, dispatches, delivery notes, and audit fields (e.g., which staff member performed a scan)
This data is provided by your employer or contracting organization; AirGate processes it on their instructions for Hajj/Umrah logistics.
2.4 Files and imports
Administrators may upload Excel or CSV files for schedules and manifests. Content of those files is parsed and stored according to your organization’s configuration.
2.5 Technical and security logs
We may automatically collect:
- IP address, browser or app version, and request logs
- Error and performance logs to maintain service reliability
- Authentication events (success/failure) for security monitoring
We do not intentionally collect sensitive categories beyond what is required for logistics (e.g., passport numbers are operational identifiers supplied by the data controller).
3. How We Use Information
We use collected information to:
- Authenticate users and enforce role-based access control
- Operate flight, manifest, baggage, batch, screening, and dispatch workflows
- Send push notifications about operational events to registered devices
- Generate reports, PDFs (e.g., delivery notes, undertaking forms), and stakeholder views
- Maintain audit trails for scans, updates, and approvals
- Improve security, prevent fraud, and troubleshoot technical issues
- Comply with legal obligations and respond to lawful requests
We do not sell personal data to third parties.
4. Legal Basis (where applicable)
Depending on jurisdiction, we rely on one or more of:
- Contract — processing necessary to provide AirGate to your organization
- Legitimate interests — secure operations, fraud prevention, and service improvement
- Legal obligation — compliance with applicable laws
- Consent — where explicitly obtained (e.g., optional communications)
Your organization is typically the data controller for pilgrim and passenger data; AirGate acts as a processor when handling that data on their behalf.
5. Sharing and Disclosure
We may share information only:
- With authorized users within your organization according to role permissions
- With infrastructure providers (hosting, database, notification services) under confidentiality and security obligations
- With professional advisers or authorities when required by law
- In connection with a merger, acquisition, or asset sale, with notice where required
We require subprocessors to protect data consistent with this policy.
6. Data Retention
We retain data for as long as your organization’s contract requires and as needed for:
- Active Hajj/Umrah seasons and operational history
- Legal, regulatory, or dispute-resolution purposes
Retention schedules for manifests and passport-linked fields should be defined by the data controller (your organization). Upon contract termination, we can delete or return data per agreed terms.
7. Security
We implement measures including:
- Password hashing and secure authentication tokens (JWT)
- HTTPS for data in transit
- Access controls by user role
- Restricted production access and monitoring
No system is 100% secure. Report suspected incidents to [supportairgate@gmail.com](mailto:supportairgate@gmail.com).
8. International Transfers
Data may be processed in Saudi Arabia or other countries where our hosting providers operate. We ensure appropriate safeguards where cross-border transfer is required.
9. Your Rights
Subject to local law, individuals may have rights to:
- Access, correct, or delete personal data we hold about them as users
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
- Lodge a complaint with a supervisory authority
Pilgrims and passengers should contact the Hajj service provider or data controller that uploaded their manifest data; we will assist controllers with verified requests.
To exercise rights related to your staff account, contact your administrator or [supportairgate@gmail.com](mailto:supportairgate@gmail.com).
10. Children’s Privacy
AirGate is a business-to-business operations platform for authorized staff and partners. It is not directed at children. Passenger records may relate to minors as part of family manifests; such data is handled only for legitimate logistics under the controller’s responsibility.
11. Third-Party Services
AirGate may integrate with:
- Firebase Cloud Messaging — push notifications
- Email delivery services — account and operational emails
- Cloud hosting and databases — application storage
Their privacy policies govern their direct collection where applicable.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version with a new “Last updated” date and, where appropriate, notify administrators. Continued use after changes constitutes acceptance.
13. Contact
Data protection / privacy inquiries:
Airgate Arabian Logistics Company
Email: supportairgate@gmail.com
Address: Short Address JNMA3659, Building No. 3659, Secondary No. 7651, Al Mursi Dist., Postal Code 22756, Jeddah, Kingdom of Saudi Arabia