Privacy Policy

We collect the following categories of information:

• Account information — name, email address, password (stored hashed), time zone, and notification preferences.
• Sign-in via Google — if you sign in with Google, we receive your name, email address, and basic profile information through Google OAuth. We do not receive your Google password.
• Operational data — aircraft details, schedules and bookings, flight and maintenance logs, squawks, endorsements, partnership and billing records you enter into the Service.
• Documents — files you upload (e.g. maintenance scans, insurance, registration), stored on Amazon S3.
• Payment information — payments are processed by Stripe. We do not store full card numbers; we retain transaction metadata and references provided by Stripe.
• Technical data — IP address and browser user-agent, captured for security and audit logging.

We use information to:

• Provide, operate, and maintain the Service;
• Authenticate you and keep your account secure;
• Process subscription and partnership payments;
• Send transactional email (invitations, password resets, notifications) — you control notification preferences in your account;
• Maintain audit logs and detect or prevent fraud and abuse;
• Comply with legal obligations.

We share information only with service providers who help us run the Service:

• Google — authentication (sign-in with Google).
• Stripe — payment processing and subscription billing.
• Amazon Web Services — document storage (S3) and transactional email (SES).
• Turso — managed database hosting.

We do not sell your personal information.

We retain your information for as long as your account is active or as needed to provide the Service. Some records (e.g. transactions and audit logs) may be retained longer where required for legal, accounting, or security purposes. You may request deletion of your account by contacting us.

We use industry-standard measures to protect your information, including encrypted connections (TLS), hashed passwords, role-based access controls, and account-scoped data isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can review and update your account information and notification preferences at any time while logged in. You may request access to, correction of, or deletion of your personal information by contacting us at the address below.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

Questions about this Privacy Policy? Contact us at support@sharedhangar.com.