Privacy Policy

1. Introduction

General Aviation Solutions LLC ("we", "us", "our") operates SkyBookings. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information you provide directly, including:

Account information: name, email address, phone number, and password when you create an account.

Flight school data: aircraft registrations, booking schedules, pilot currency records, and other operational data you enter into the Service.

Billing information: payment details are processed and stored by Paddle, our payment processor. We do not store credit card numbers on our servers.

Usage data: we automatically collect information about how you interact with the Service, including IP addresses, browser type, pages visited, and timestamps.

3. How We Use Your Information

We use your information to: provide and maintain the Service, process transactions, send transactional emails (booking confirmations, currency alerts, account notifications), improve and optimize the Service, respond to customer support requests, and comply with legal obligations.

4. Data Sharing

We do not sell your personal information. We may share your information with:

Service providers: third-party companies that help us operate the Service (Supabase for data storage, Paddle for payments, Resend for email delivery, Vercel for hosting). When we send transactional emails through Resend, message content — which may include pilot names, aircraft identifiers, booking details, and currency alert information — passes through Resend's servers. Resend processes this data solely to deliver messages on our behalf and is bound by its own privacy and data processing terms.

Within your organization: administrators at your flight school can view student profiles, booking data, and currency records within the same organization.

Legal requirements: we may disclose information if required by law, court order, or governmental regulation.

5. Data Isolation

Each flight school organization's data is logically isolated. Users from one organization cannot access data belonging to another organization. We enforce this isolation at both the application and database levels.

6. Data Security

We implement industry-standard security measures including: encryption of data in transit (TLS/SSL), encryption of data at rest, row-level security policies at the database level, secure authentication with hashed passwords, and regular security reviews. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we retain data for 30 days to allow for reactivation, after which it is permanently deleted. This 30-day period is consistent with the account termination provisions in our Terms of Service. We may retain certain data longer if required by law or for legitimate business purposes (e.g., billing records).

8. Your Rights

You have the right to: access your personal data, correct inaccurate data, export your data using the built-in CSV export features, request deletion of your account and associated data, and opt out of non-essential communications. To exercise these rights, contact us at the email below.

Depending on your location, you may have additional rights under applicable privacy laws — including the California Consumer Privacy Act (CCPA) for California residents or the General Data Protection Regulation (GDPR) for individuals in the European Economic Area. We strive to provide these protections to all our users regardless of their location. If you believe you have rights under these or other local privacy laws, please contact us and we will respond accordingly.

9. Cookies

We use essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. The "last updated" date at the top of this page indicates when it was last revised.

12. Contact

For questions about this Privacy Policy or your data, contact us at support@skyfsbookings.com.