Privacy policy

Please read this Privacy Policy (“Policy”) carefully. This contains important information about your rights and obligations. This Privacy Policy sets out the manner in which NORTHERN STAR TECHNOLOGY PRIVATE LIMITED (“NS”, “We”, “Us” or “Our”), the proprietor and owner of the “pneuma.club” website (“Website”), collects, uses, maintains, and discloses personal information collected from users (“User”, “You” or “Your”) of the Website. This Policy applies to all Website services and related services, including Your use of the Website through an AI assistant that You connect to Your account (see “Using Pneuma through AI assistants” below). The provisions of this Policy shall be read in consonance with the Terms of Use of the Website, and shall not be construed to override any provisions of the Terms of Use or any other contract between You and NS.

This Policy regulates Our use of Your personal information for Our own purposes, including how You interact with the Website and information submitted to Us in all interactions with Us or the Website. If You do not agree with this Policy, please stop using the Website and leave the Website. You may tell Us to delete any information collected until this point. Your continued access and use of the Website will mean Your acceptance of the provisions of this Policy.

NS may update and revise this Policy from time to time at its sole discretion. The revised Policy will be posted on the Website. NS will post a notice regarding modification of this Policy, and You will need to read the modified Policy. If You disagree to any of the changes to the Policy, please stop using or accessing the Website. Your continued use of the Website after posting of the revised Policy will mean that You agree with the changes and You will be bound by it.

Your use of the Website includes the collection of a variety of personal information from You. This is collected based on information provided by You to Us, from Your use of the Website and other sources. Please note that You are responsible for any personal information that You obtain, publish or share on behalf of any person with or through this Website and confirm that You have been duly authorised by such person to provide the information to Us. In the event that You are not authorised as indicated above, NS shall not be and specifically disclaims any liability for any information received from You pertaining to anyone else. The kind of information collected is detailed below:

• Personal information relating to Your account, involving Your full name, email address, date of birth, phone number, the credit cards You hold (the card product and the points balance You enter), registered frequent flyer program account details, points statements, payment information, information included in Your communications with us and identifying information provided to Us certifying Your identity.
• Information relating to Your activity on the Website, including but not limited to Your location, IP address, device IDs, clicks, scrolling, session heatmaps, timestamps, browsing times, transactions, load times, errors, internet service provider details, webpages visited prior as well as subsequent to accessing the Website, browser and platform type, browser language and related details.
• Information provided by You to Us when using the Website to make a booking with a Travel Service Provider [as defined in the Terms of Use] or procure the services / obtain an offering from a Financial Service Provider [as defined in the Terms of Use], including but not limited to names, addresses and their proofs, email addresses, phone numbers, itinerary details, financial information, verifying documents, location details, and other related details.
• Information You submit to Us through third party services, which may include but not be limited to Google and Apple, among others, for the purposes of creating an account on the Website and/or accessing accounts held with Travel Service Providers or Financial Service Providers.

Payments shall be made through third-party payment gateways as contracted by NS from time to time. Any such data or information collected by Us in this regard shall be collected solely for facilitating the processing of payments on the payment gateway or through the Travel Service Provider, and the same shall not be retained by Us following the successful completion of the payment. Any information collected by these third-parties shall be collected as per their own data collection and privacy policies and Your consent to such collection shall be governed by the respective third-party’s policies.

We may use information collected from You for the following purposes:

• To control Your access to the Website and services, to communicate with You, and customize Your experience by providing information that may be useful or interesting to You;
• To provide and operate the services offered on the Website, including but not limited to creating Your account, returning accurate results to queries inputted by You, accurately displaying Your miles/points/rewards balance, facilitating the processing of payments or responding to Your queries;
• To auto-renew Your subscription plan on the Website for You to be able to continuously avail Our services;
• To show You as accurate and true as possible information in response to a query that You have entered on the Website, such as providing a list of Paid Tickets [as defined in the Terms of Use] and Awards Tickets [as defined in the Terms of Use] for You to compare and choose from.
• To redirect You to a Travel Service Provider or Financial Service Provider with data collected by Us and enable
• To send administrative information, changes in account settings, changes to Our services or any updates pertaining to the services offered on the Website;
• To ensure that the services available on the Website are accessible and usable by You on Your specific device, such as for changing the way We display information to You depending on Your device type.
• To carry out Our internal business purposes, such as corporate transactions, audits, and data analysis, conduct research and analytics about Your use of the Website and interaction with Us, improve the Website and Our existing services, identify usage trends, assess the performance of Our advertisements, optimize Our advertising campaigns, and determine the effectiveness of Our communications;
• To provide customised advertising or promotional material regarding products, services, third party affiliations and related services, offers, programs and promotions of the Website;
• To ensure the security and integrity of the services of the Website;
• To analyse the use of the Website, and the people visiting and using the Website for improving the features of the Website. Further, the information provided by You may also be used to help Us in responding to Your requests and support needs more efficiently;
• To assist Our marketing partners by providing Your personal information to them for the purpose of promotional or marketing campaigns.
• To assist law enforcement agencies and ensure compliance with applicable laws and regulations if the disclosure of Your information is warranted by law or is warranted by any judicial proceeding by a court of competent jurisdiction.

We will not disclose any of Your information to any third parties except with regard to the following instances:

• Your payment information is required to be shared with NS’ designated payment gateway;
• Your personally identifying information is required to be shared with Travel Service Providers and Financial Service Providers in order to facilitate the provision of services on the Website and allow them to quickly populate the necessary details in order to allow You to make a booking;
• Your email address may be shared with email management and distribution tools, to ensure that information on the latest offers, points/miles/rewards related offers/schemes, or drops in prices or other promotional content that would be beneficial for You;
• Your data pertaining to the use of the Website may be shared with data aggregation and analytics software providers, to enable Us to effectively monitor and optimise the services available on the Website, as well as tracking tool providers, to allow Us to track how many times a User is redirected to a Travel Service Provider’s or Financial Service Provider’s website which would allow Us to build Our business with these third-party service providers;
• Your data may also be shared with agencies We hire to provide customer support services, so as to smooth over any issues You may face while utilising the services available on the Website;
• Your data may be stored on an online cloud storage, and therefore Your data may also be shared with cloud storage service providers and other essential IT support services;
• Your name and related data may be shared publicly on the Website’s blog where community discussions occur and information is exchanged relating to the services available on the Website as well as other general tips to maximise a User’s experience in making a booking on the Website;
• If You connect an AI assistant, such as ChatGPT (provided by OpenAI) or Claude (provided by Anthropic), to Your account, the information that assistant requests on Your behalf is shared with the company that provides it, as described in “Using Pneuma through AI assistants” below;
• Your personal information may also be required to be shared with government agencies as required by law.

You can connect an AI assistant, such as ChatGPT or Claude, to Your Pneuma account. You start the connection in the assistant, then sign in to Pneuma and approve access on Our consent screen, which names the assistant and lists what it can see. This section explains what happens to Your data when You do this.

What We receive.

• The requests the assistant sends to Pneuma on Your behalf, such as a route, travel dates, a cabin, an airport, or cards to add to Your account.
• The identity of the Pneuma account that approved access.
• The name the assistant registers with Us, and the technical details it needs to connect, such as the address to return You to after sign-in.

We do not receive Your conversation with the assistant. We receive only the requests it sends to Pneuma.

What We send. In reply to those requests, We send the assistant the same information You would see on the Website: flight search results, award sweet spots, the cards, points balances and frequent flyer accounts saved to Your account, and how Your points transfer to airline miles. If You approve it on the consent screen, We also send Your name and email address.

After We send it. Once information reaches the assistant, the company that provides the assistant (OpenAI for ChatGPT, Anthropic for Claude) stores and uses it under its own terms and privacy policy. We do not control what that company does with it.

Access tokens. When You approve access, We issue the assistant an access token, valid for 1 hour, and a refresh token, valid for 7 days. The assistant uses the refresh token to get a new pair of tokens, and each new pair replaces the old one. If the assistant makes no request for 7 days, the connection ends and You need to connect again. The one-time code used while You approve access is valid for 10 minutes. We store the tokens in Our database as issued.

Disconnecting. You can remove Pneuma from the assistant’s connector or app settings at any time. To end the assistant’s access on Our side, email Us at hello@pneuma.club from the email address on Your account, and We will delete its tokens. Deleting Your Pneuma account also deletes them.

Logs and records. Searches You run through an assistant are saved to Your search history, as searches on the Website are. Our request logs record Your account ID and the service that was called, not the text of Your requests, and Our hosting provider keeps them for about 30 days. Events from the assistant tools that carry Your account ID or a search ID go to Our log service in the United States and are kept for up to 12 months.

Plan limits. Searches through an assistant use the same free searches, Pro plan and daily fair-use limit (20 searches a day) as the Website, and they count together with Your searches on the Website.

Data shared with Us or collected by Us will be primarily processed in India. NS may employ third party service providers situated in other countries to process Your data on NS’ behalf. The data protection regulations in India or such other countries mentioned previously may differ from those where You reside. However, subject to the local law, NS will apply appropriate technical, organisational and administrative safeguards and security measures to protect Your data.

Your data will be stored for as long as You continue to use the services of the Website, or for any extended period as required under applicable law. NS stores Your personal data only for as long as it is required, depending on the purpose for which it was collected, how long it will take to fulfil that purpose, and whether there is any specific reason or overriding legal obligation to retain it for a longer duration. Once the purpose is served, NS will either delete the information or anonymise it to ensure that it no longer contains any of Your personally identifiable information.

You may seek the deletion of Your data once You decide to stop using the services available on the Website. To delete Your account and all data connected to it, email Us at hello@pneuma.club from the email address on Your account. Deletion completes within 14 days of Your request. Deleting Your account also ends any access You have given to AI assistants.

At any time during Your use of the Website and the services available on it, You may write to Us requesting Us to delete any part of Your data, and We shall comply with such request. However, Your request of deletion of such part of Your data may prevent Us from being able to provide a particular service, or a particular aspect of it, and You will not be able to continue using that particular service or particular aspect without re-entering such data or re-authorising NS to collect such data.

Cookies are small text files that a website stores on Your device when You visit it. This section also covers similar technologies, such as Your browser’s local storage, that the Website uses in the same way. It explains which cookies NS uses, why, and how You can switch analytics cookies off.

Strictly necessary cookies. These keep the Website working. They keep You signed in, protect Your session and Your connection, help prevent fraud and attacks, remember Your cookie choice, and let the Website load Your account, including Your registered frequent flyer program details and credit card point details. Strictly necessary cookies cannot be switched off.

Analytics cookies. These help NS understand how the Website is used and fix problems: the pages You visit, clicks, scrolling, load times and errors, Your redirection from the Website to a Travel Service Provider’s or a Financial Service Provider’s website, the effectiveness of Our marketing campaigns, and tools that let Us launch, test and roll back features. We record how You use the Website, including pages, clicks, scrolling and a replay of the screen with typed fields hidden, to find and fix problems. Analytics cookies are on by default, except for visitors in the European Economic Area, the United Kingdom and Switzerland, who are asked first.

Third-party cookies. NS’s analytics cookies are set by PostHog, the analytics service NS uses. They are stored under the Website’s own address, and the information they collect is sent to PostHog in the United States, which handles it under its own privacy policy. Services You choose to use from the Website, such as Google or Apple sign-in and Our payment gateway, may set their own cookies under their own policies. NS does not use advertising cookies; if that changes, NS will update this section and tell You.

Switching analytics cookies off. You can switch analytics cookies off, or back on, at any time from "Cookie settings" in the footer of the Website, or from the cookie notice on pages that have no footer. If You switch them off, We stop collecting analytics and clear the analytics cookies on Your device; if You later switch them back on, You start with a new analytics identifier. Your browser may also let You block or delete cookies. If You block strictly necessary cookies, some parts or features of the Website may not work.

Lawful basis. NS uses strictly necessary cookies because the Website cannot work without them. NS uses analytics cookies to understand how the Website is used and to fix problems, as described in this section. You can switch analytics cookies off at any time from "Cookie settings". For visitors in the European Economic Area, the United Kingdom and Switzerland, NS uses analytics cookies only with Your consent.

California residents. If You are a California resident, the California Consumer Privacy Act (CCPA) provides You with certain rights regarding Your personal information. These rights include:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by NS
• The right to opt-out of the sale of personal information
• The right to non-discrimination for exercising Your CCPA rights

To exercise any of these rights, please contact Us at hello@pneuma.club

We understand and recognize that privacy on the internet is very important. We take all reasonable measures to protect the confidentiality of the information disclosed by You and will not disclose the information unless as provided in this Policy. You sign in to Your account with a one-time link sent to Your email address, or with Your Google or Apple account. Keep access to that email, Google or Apple account secure, do not share sign-in links with any other person, and always log out on a shared device.

If You are a resident of California, in accordance with applicable Californian law, You have the right to request information from NS relating to NS’ sharing of Your information, including personal identifiable information, with marketing associates and other third parties. You may submit a request to NS through the contact email provided below in the Contact clause and receive the following information:

• The categories of information disclosed to third parties for the third parties’ marketing purposes during the preceding calendar year (determined according to the date of the request)
• The names and addresses of third parties that received such information, or if the nature of their business cannot be determined from the name, then instances of the products or services marketed.

You are entitled to receive a copy of this information in a standardised format and the information will not be specific to You individually.

If you have any questions about this Privacy Policy or Your dealing with the Website or any of the services, please contact Us at hello@pneuma.club