Privacy Notice

Information you give us. This includes your name, email address, phone number, date of birth and home address; your account and sign-in details; your company details if you are an operator; and, if you are a pilot, your work history, emergency contact, licenses, medical certificate, type ratings, insurance and other credential documents, and a profile photo. It also includes the trips, applications, ratings, messages and support requests you create and anything else you enter in forms.

Identity and eligibility information. Pilots complete an identity check with a third-party verification provider, which may collect an image of an ID document, a selfie and face-match data. We receive the result of the check and details from the ID, such as the document type, number, issue and expiry dates. Where you authorize one, we may order a background check from a screening provider, and we may look up your certificates in the public FAA registry.

Payment information. Payments are handled by a third-party payment processor. You enter card, bank, payout and tax details in the processor's own forms; we receive limited details about the payment method together with records of the payments, payouts and fees on your account.

Information collected automatically. When you use the Platform we collect device and browser type, IP address and the approximate location it indicates, the pages and screens you view, the actions you take, sign-in activity and diagnostic data. If you choose to share your device location with the mobile app, we also collect that location. You can turn it off at any time in the app or in your device settings.

Waitlist sign-ups. If you join the waitlist on fltlvl410.com, we collect your name, email address and whether you are a pilot or an operator. We use them only to send you a launch email. The waitlist page also uses Google Analytics 4 to measure visits and button clicks.

We use personal information to provide and operate the Platform: to create and secure your account, match pilots with trips, process applications and hires, enable messaging between pilots and operators, process payments and payouts, and provide customer support.

We also use it to verify identity, credentials and eligibility; to send service messages and notifications by email, push notification and, where you have opted in, text message; to detect, investigate and prevent fraud, abuse and safety issues; to understand how the Platform is used and improve it; to keep records and meet our legal and regulatory obligations; and to enforce our terms.

We use automated tools, including third-party services, to help read and check documents you upload and to pre-fill forms.

With other users. Pilots and operators see the information needed to work together. For example, operators see the profile and application details of pilots who apply to their trips, together with the credential documents a pilot chooses to share for that trip; pilots see trip details and the operator's company information; and the people on a trip can message each other.

With service providers. We share information with companies that help us run the Platform, and we give them only what they need to perform their services. These include providers of cloud hosting, databases, file storage and sign-in (such as Google Cloud and Firebase); identity verification (such as Didit); payment processing (such as Stripe); email and text messaging (such as Resend and Twilio); product analytics (such as Google Analytics and PostHog); background screening; address lookup; and document reading.

Mobile phone numbers collected for optional operational text alerts (SMS) are used only to deliver those alerts and related verification. We do not sell mobile numbers or share them with third parties for their marketing. Carriers and messaging providers (for example Twilio) and verification providers (for example Google for Firebase phone verification) process numbers solely to send or verify messages you request.

If you ask us to text you the app download link, we store the number you entered as a booth lead so our team can follow up. That number is used only for that follow-up and the one download text you requested.

For legal reasons and safety. We may disclose information when we believe it is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of our users, the public or FLTLVL410, including to investigate fraud or abuse.

Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction.

We do not sell your personal information.

FLTLVL410 uses cookies, local storage, and similar technologies to keep you signed in, remember preferences, and measure how the product is used. Product analytics are delivered through Google Analytics 4 and PostHog (US Cloud). We send typed events and page views—not free-form autocapture—and tie them to your Firebase account identifier after sign-in so engineers can troubleshoot flows and improve reliability.

PostHog may record limited session replay on routes where replay is enabled. Replay is disabled on admin screens, messaging and conversation threads (including pilot and operator message inboxes), and operator transaction detail—not on every billing, payout, or payment screen. Typed input is masked by default, and elements marked for masking or exclusion are omitted. Session recording starts only when analytics consent allows it and stops when you opt out.

You can limit analytics and session recording at any time. Browser Do Not Track (DNT) and Global Privacy Control (GPC) signals stop browser-side Google Analytics 4 and PostHog, including session replay—they do not by themselves stop server-side event capture. Signed-in users can also toggle opt-out under Security → Privacy & analytics; that account setting stops server-side analytics for your account (including Google Analytics Measurement Protocol and server PostHog) in addition to the browser controls.

Declining cookies or analytics may limit personalization and make some troubleshooting harder, but core authentication and trip workflows remain available. We describe these tradeoffs in-product when you change your choices.

We keep personal information for as long as your account is active and as long as needed to provide the Platform, meet our legal, tax, accounting and regulatory obligations, resolve disputes, prevent fraud and enforce our agreements. How long we keep a particular kind of information depends on what it is and why we hold it.

We may keep information longer where a legal hold, investigation, dispute or safety inquiry requires it.

You can ask us to delete your account and the personal data we hold. Make the request in the app or on the web under Security, then Account. If you cannot sign in, email support@fltlvl410.com from the address on your account. The page https://app.fltlvl410.com/legal/account-deletion lists the steps.

After we receive your request, we remove or anonymize your account data within 30 days. Your account stays active until we finish, and we may contact you about open trips or payments first.

We keep payment, payout and tax records that the law requires us to keep, and records we need to meet legal obligations or resolve disputes.

We use administrative and technical safeguards designed to protect personal information, including encryption of data in transit, access controls and monitoring. No online service can be completely secure, so we cannot guarantee the security of your information.

Please protect your account by using a strong, unique password, turning on two-step verification when it is offered, and telling us promptly if you think your account has been compromised. If a breach affects your personal information, we will notify you and regulators as required by law.

You can review and update much of your information in your profile and account settings, manage your notification preferences, and opt out of text alerts at any time by replying STOP. Choices about analytics are described under Cookies and analytics, and account deletion under Deleting your data.

Depending on where you live (for example California, Colorado, other U.S. states with privacy laws, the European Economic Area or the United Kingdom), you may have the right to ask whether we process your personal information and to access it, correct it, delete it, receive a portable copy, restrict or object to certain processing, or withdraw consent you have given. Where the law provides for it, you may also appeal our decision on your request.

To make a request, email support@fltlvl410.com from the address on your account. We may need to verify your identity before we act, and we may decline a request where the law allows or requires us to, in which case we will tell you why. We will not treat you differently for exercising your privacy rights.

The Platform is intended for aviation professionals and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has given us personal information, contact us and we will take appropriate steps.

FLTLVL410 is based in the United States. Our service providers may process information in the United States and in other countries, which may have data protection laws different from those where you live.

If you have questions about this Privacy Notice or want to make a privacy request, email support@fltlvl410.com and include "Privacy" in the subject line.

To report a suspected security vulnerability, email support@fltlvl410.com with "Security" in the subject line. Please give us a reasonable chance to investigate and respond before you disclose the issue publicly.

We may update this Privacy Notice from time to time. When we make material changes we will update the date at the top of this page and, where the law requires, notify you through the Platform or by email.

Your continued use of the Platform after an update means you accept the updated Privacy Notice, where the law allows.