Privacy Policy

When you create an account, we collect:

• Email address, display name, and password (stored as a salted hash — never in plain text)
• Role and profile details you choose to add: flight hours, certifications, medical class, availability, home airport, bio
• Content you create: bulletin board posts, marketplace listings, aircraft profiles, reviews, and messages
• Basic technical data (IP address, browser) for security and rate-limiting purposes

• To operate core features: bulletin boards, safety pilot matching, marketplace, aircraft garage, fuel prices, job alerts, and notifications
• To show your profile to other users only when you opt in (e.g., the "discoverable" setting for the pilot directory)
• To send transactional email (welcome message, password reset, job alert matches) — never sold or shared for marketing
• To verify certificates against the public FAA airmen registry, only when you request it

• We do not sell your personal data to third parties
• We do not show your email address to other users (safety pilot listings, reviews, and directory search intentionally exclude it)
• We do not require payment information to use any free feature

Regardless of where you live, we extend the same data rights to every user:

• Access — view all profile data anytime from your Profile page
• Correction — edit your profile directly at any time
• Consent — opting into directory discoverability requires an explicit, timestamped consent
• Erasure — request account deletion; your account is anonymized within 30 days (identifying fields removed, historical posts de-attributed)
• Portability — request an export of your data

Bulletin board posts expire automatically based on category (from 7 days for events up to 90 days for aircraft-sale listings) to keep boards relevant. Fuel price reports and other time-sensitive data are pruned on a rolling basis. Deleted/anonymized accounts are permanently purged from active tables per our internal retention schedule.

We use trusted third parties to operate the Service: a payment processor (Stripe) for optional premium subscriptions, an email delivery provider (SendGrid) for transactional email, and public aviation data sources (aviationweather.gov for METAR/TAF, OpenSky Network for ADS-B traffic) for situational-awareness widgets. These providers only receive the minimum data necessary to perform their function.

We use a small number of essential, HttpOnly authentication cookies to keep you signed in securely. We do not use third-party advertising or tracking cookies.

The Service is not directed to children under 13, and we do not knowingly collect data from them.

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

To exercise any of the rights above, use the account deletion option in your Profile settings, or reach out through the contact details listed on your account's support page.