Airli Privacy Policy

Effective date: 27/09/2026

Airli respects the privacy of the travelers who use our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, where it may be processed, how long we keep it, and the rights available to you.

Airli is operated by taliat albarmajyat aldhakiah, based in the Kingdom of Saudi Arabia, with an address at Riyadh 12354 (“Airli,” “we,” “us,” or “our”).

For privacy questions or requests, contact us at airliapp@gmail.com.

1. What this Privacy Policy covers

This Privacy Policy applies when you:

• use Airli’s website or visa readiness check;
• start or purchase a visa application preparation service;
• provide personal, travel, or application information;
• upload documents;
• communicate with Airli about your application; or
• provide information about a spouse, child, or other applicant as part of an application.

The information Airli needs depends on the destination, visa type, your circumstances, and the service you purchase.

2. What personal data we collect

Readiness-check information

To provide a visa readiness check, we may collect information such as your nationality, country of residence, destination, intended travel period, purpose of travel, and information about your travel plans or concerns.

Some information is necessary to provide a meaningful result. Other information may be optional.

Visa-application information

If you proceed with a visa service, we may collect information reasonably necessary to prepare or support your application, including:

• full name, phone number, email address, and contact information;
• nationality and residency information;
• passport details and passport images where required for the visa-preparation process;
• personal photographs;
• destination, travel dates, purpose of travel, itinerary, and accommodation information;
• employment information;
• financial and supporting documents required for the relevant visa, such as salary certificates or bank statements;
• appointment preferences;
• supporting visa documents; and
• information about a spouse or child where relevant to a family application.

Passport images are collected only where needed to extract or verify application information or prepare the passport copy or documentation required for the relevant visa process. Airli does not collect passport images for unrelated purposes such as advertising or analytics.

Airli aims to collect only the information reasonably necessary for the particular service. If required information is not provided, we may be unable to complete the readiness check or provide the requested visa-preparation service.

Technical and website information

When you use Airli’s website, we may collect limited technical and usage information such as IP address, browser or device information, pages viewed, website events, and similar information through cookies or related technologies.

Airli may use website analytics and advertising-measurement technologies to understand website performance and measure advertising activity.

3. How we collect your information

We primarily collect personal data directly from you when you:

• complete forms on Airli;
• complete a readiness check;
• upload documents;
• purchase a service; or
• contact us through Airli, WhatsApp, phone, email, or another support channel.

We may also receive information from our licensed visa-office partner where necessary to coordinate a service you requested.

If you provide information about another person, such as a spouse or child, you must be authorized to provide that information. Where required, Airli may provide that person with this Privacy Policy or another appropriate privacy notice.

4. Why we process your personal data

Airli processes personal data for specified purposes, including to:

• provide a visa readiness check;
• prepare, organize, review, or assist with a visa application;
• extract relevant information from documents;
• check application information for missing or inconsistent details;
• adjust photographs where included in the service;
• communicate with you about your application;
• process and record payments;
• provide customer support;
• maintain the security and integrity of Airli;
• prevent misuse or fraud; and
• comply with applicable legal obligations.

Airli may work with licensed visa-service providers or operational partners where required to deliver parts of the service. Including: assist with hotel or flight reservations, travel insurance, application forms, appointments, and application submission;

Depending on the activity, Airli may process personal data based on your consent, performance of an agreement with you, a legal requirement, or another legal basis permitted under Saudi law.

Where consent is required, we will request it appropriately. Where processing is necessary to perform a service you requested, processing may instead be based on the agreement between you and Airli.

Airli relies on legitimate interests only where permitted under Saudi law and after considering the rights and interests of the affected individual. We do not rely on legitimate interests to process sensitive personal data where Saudi law prohibits doing so.

5. How Airli uses AI

Airli is an AI-assisted visa application preparation service.

We may use AI and automated tools to help:

• extract information from documents;
• organize application information;
• classify and check supporting documents;
• identify incomplete or inconsistent information;
• compare information with applicable visa requirements; and
• prepare or structure information used in a visa application.

Airli currently uses the Anthropic API for certain AI-processing functions. Depending on the task, information sent for processing may include application information or relevant portions of documents.

Airli applies data minimization when using AI and seeks to send only the information reasonably necessary for the relevant task.

Under Anthropic’s current commercial API practices, inputs and outputs from the Anthropic API are not used to train Anthropic’s models by default. Airli does not opt in to using customers’ visa documents or application information for Anthropic model training.

For standard API processing, Anthropic currently states that API inputs and outputs are generally deleted from its backend within 30 days, subject to limited exceptions such as legal requirements or enforcement of its usage policies.

AI assists Airli’s preparation process. It does not decide whether your visa will be granted or refused. Visa decisions are made only by the relevant embassy, consulate, immigration authority, visa center, or other competent authority.

Human review may be used where appropriate.

6. Who we share personal data with

Airli shares personal data only where reasonably necessary for the service or another permitted purpose.

Recipients may include:

Technology providers

Airli uses third-party providers for infrastructure, hosting, AI processing, technical services, security, and related operational functions.

This currently includes Supabase for database and document storage and Anthropic for certain AI-processing functions.

Licensed visa-office partner

Airli may work with licensed visa-service providers or operational partners where required to deliver parts of the service.

Depending on the service purchased, the partner may receive information including:

• identity and contact information;
• nationality and residency information;
• passport details and passport copy where necessary;
• personal photographs;
• destination and travel information;
• visa-application information;
• itinerary and accommodation information;
• employment and financial supporting documents where required;
• spouse or child information where relevant;
• supporting visa documents; and
• appointment preferences.

The partner may use the information to assist with application forms, hotel or flight reservations, travel insurance, appointments, document preparation, and application submission, depending on the service requested.

Visa and travel-related recipients

Where necessary to provide the service, relevant information may also be disclosed to or processed by entities such as:

• visa application centers;
• embassies and consulates;
• immigration or other government authorities;
• insurers;
• appointment providers;
• hotel or flight reservation providers; and
• other providers involved in the requested visa service.

We limit the information shared with each recipient to what is reasonably required for that purpose.

Payment provider

Payments are processed through Moyasar.

Where card information is entered directly into Moyasar’s payment environment, Airli does not receive or store your complete payment-card number.

Airli may receive information such as the transaction amount, status, reference number, and other information needed to confirm or support your payment.

Analytics and advertising providers

Where enabled, limited website, device, and event information may be processed by providers used to measure website activity or advertising performance.

Authorities and legal disclosures

Airli may disclose personal data where required or permitted by applicable law or pursuant to a valid request from a competent authority.

Airli does not sell customers’ passports, visa documents, financial documents, or application information.

7. International processing and storage

Some personal data handled by Airli is processed outside Saudi Arabia.

Airli currently stores its application database and uploaded customer files through Supabase in Sydney, Australia.

Airli also uses the Anthropic API. Anthropic currently states that commercial API traffic may be processed through infrastructure in the United States, Europe, Asia, or Australia and that API data is stored in the United States by default.

Information may also be transferred outside Saudi Arabia where this is necessary to prepare or submit a visa application or provide a related service involving a foreign embassy, consulate, immigration authority, visa center, or travel-service provider.

Airli limits international transfers to personal data reasonably necessary for the relevant purpose and applies the transfer assessments, contractual safeguards, and other measures required under applicable Saudi personal-data laws.

8. Payments

Airli uses Moyasar to process payments.

Airli does not intend to store complete card numbers when payment details are entered directly into Moyasar’s payment environment.

We may retain transaction information necessary to confirm purchases, provide customer support, process refunds, maintain financial records, and meet applicable legal requirements.

9. How long we keep personal data

Airli does not keep visa documents indefinitely.

Our retention approach is:

• General customer and application data: retained for up to 2 years after your last interaction with Airli or completion of the relevant service.
• Uploaded visa and identity documents: retained for up to 30 days after completion of the service or issuance of the visa decision, whichever is later, unless a longer period is legally required.

The temporary retention of information by a technology provider, such as Anthropic’s standard API retention described above, is separate from Airli’s own retention of your application records.

When personal data is no longer necessary for the purpose for which Airli collected it and no legal basis requires continued retention, Airli will take appropriate steps to destroy it.

10. Spouses, children, and other applicants

If you provide information about another adult, you must have appropriate authority to provide that information.

Where an applicant does not have full legal capacity, their information must be provided or authorized by a parent, legal guardian, or another person legally entitled to act on their behalf.

Airli may request information reasonably necessary to confirm that authority.

11. Security

Airli uses technical and organizational measures intended to reduce the risk of unauthorized access, disclosure, alteration, loss, or misuse of personal data, taking into account the nature of the information and the risks involved.

Access to application information should be limited to Airli personnel, service providers, and partners who require it for an authorized purpose.

No digital service can guarantee absolute security, and Airli does not claim that unauthorized access can never occur.

If a personal-data breach occurs, Airli will take the actions and provide any notifications required under applicable Saudi law.

12. Your privacy rights

Subject to applicable Saudi law, you may have the right to:

• be informed about the legal basis and purpose for processing your personal data;
• access personal data Airli holds about you;
• request a readable and clear copy of your personal data;
• request correction, completion, or updating of inaccurate information;
• request destruction of personal data where the applicable legal conditions are satisfied; and
• withdraw consent where consent is the legal basis for processing.

To exercise a privacy right, contact airliapp@gmail.com.

Airli may need to verify your identity before fulfilling a request.

Requests under the Saudi Personal Data Protection Law are generally handled within 30 days. Where legally permitted, this may be extended by up to an additional 30 days where fulfilling the request requires disproportionate effort or multiple requests have been received. Airli will inform you where such an extension applies.

Withdrawal of consent does not affect processing that was lawful before the consent was withdrawn.

If Airli is legally required to retain certain information, we may be unable to destroy it immediately.

You may also submit a complaint to the competent Saudi data-protection authority in accordance with applicable procedures.

13. Marketing communications

Service-related communications about your application are different from marketing communications.

Where Airli sends direct marketing that requires consent under applicable law, we will obtain the required consent and provide an appropriate way to stop receiving those communications.

14. Cookies and similar technologies

Airli may use cookies, pixels, and similar technologies to:

• operate and secure the website;
• understand how the website is used;
• measure application-funnel performance; and
• measure advertising effectiveness.

Where applicable law requires additional notice or consent for a particular technology or purpose, Airli will provide it separately.

15. Changes to this Privacy Policy

Airli may update this Privacy Policy as our service, technology, partners, or legal obligations change.

When we make material changes, we will update the effective date and provide additional notice where required.

16. Contact us

For questions about this Privacy Policy, Airli’s use of personal data, or to exercise your privacy rights, contact: airliapp@gmail.com