Privacy Policy

1. Introduction

Sky Safety Solutions LLC ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including:

• Our website at skysafetysolutions.com
• Our Hangar web application at hangar.skysafetysolutions.com
• Any related mobile applications, services, or platforms we may offer

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide to us, including:

• Account Information: First name, last name, email address, password
• Professional Information: Pilot certificate number, organization details
• Profile Information: Profile photos, professional preferences
• Communication Data: Messages, support tickets, feedback you send us
• Training Records: Course progress, completion status, training history
• File Data: Documents, manuals, and files you upload to our platform

2.2 Information Automatically Collected

When you use our services, we automatically collect:

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system
• Log Data: Access times, error logs, performance metrics
• Session Data: Authentication status, user preferences
• Analytics Data: Website interactions, user behavior patterns, conversion tracking
• Marketing Data: Ad performance metrics, campaign effectiveness, audience insights

2.3 Information from Third Parties

We may receive information from:

• Google OAuth: Basic profile information when you sign in with Google
• TalentLMS: Training progress and course completion data
• Organization Administrators: Information when you're invited to join an organization

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Provide access to training materials and aircraft documentation
• Process file uploads and document management
• Enable collaboration within your organization
• Synchronize training progress with TalentLMS

3.2 Communication

• Send account notifications and system updates
• Deliver invitation emails and organization communications
• Provide customer support and respond to inquiries
• Send training reminders and completion notifications

3.3 Security and Compliance

• Verify user identity and prevent fraud
• Protect against unauthorized access and security threats
• Comply with aviation industry regulations and standards
• Maintain audit trails for compliance purposes

3.4 Service Improvement

• Analyze usage patterns to improve our platform
• Develop new features and functionality
• Optimize performance and user experience
• Conduct research and analytics
• Measure advertising effectiveness and optimize marketing campaigns
• Understand user demographics and interests for better service delivery

4. Legal Basis for Processing (GDPR)

For users in the European Union, we process your personal data based on:

• Contract Performance: Processing necessary to provide our services and fulfill our contractual obligations
• Legitimate Interest: Security measures, fraud prevention, and service improvement
• Consent: Marketing communications and optional features (you may withdraw consent at any time)
• Legal Obligation: Compliance with applicable laws and regulations

5. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

5.1 Service Providers

• Supabase: Database hosting and authentication services
• Brevo: Email delivery and communication services
• TalentLMS: Training management and course delivery
• AWS Amplify: Web hosting and content delivery
• Cloudflare: Security and bot protection services
• Google Analytics: Website analytics, user behavior analysis, and performance tracking
• Google Ads: Advertising services, conversion tracking, and audience measurement

5.2 Within Your Organization

Information may be shared with other members of your organization as necessary for collaboration, training management, and organizational administration.

5.3 Legal Requirements

We may disclose information when required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data encrypted in transit and at rest
• Access Controls: Role-based access and authentication
• Security Monitoring: Continuous monitoring for threats and vulnerabilities
• Regular Audits: Security assessments and compliance reviews
• Bot Protection: Cloudflare Turnstile to prevent automated attacks
• Secure Infrastructure: Industry-standard cloud security practices

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for different periods based on the type of data:

• Account Data: Retained for 5 years after account closure or as required by aviation regulations
• Training Records: Retained for 5 years to comply with regulatory requirements
• Support Communications: Retained for 3 years for customer service purposes
• Usage Logs: Retained for 1 year for security and analytics purposes
• Account Deletion: When you request account deletion, we provide a 5-year grace period before permanent deletion

We may retain certain information longer if required by law or for legitimate business purposes such as fraud prevention or safety compliance.

8. Your Privacy Rights

8.1 General Rights

• Access: Request access to your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Data Portability: Request a copy of your data in a portable format
• Notification Preferences: Control email and notification settings

8.2 GDPR Rights (EU Residents)

• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of personal data
• Right to Restrict Processing: Limit how we process your data
• Right to Object: Object to processing based on legitimate interests
• Right to Data Portability: Receive your data in a structured format
• Right to Withdraw Consent: Withdraw consent for processing

8.3 CCPA Rights (California Residents)

• Right to Know: Information about data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of sale of personal information (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, contact us at privacy@skysafetysolutions.com or through your account settings.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide and improve our services. For detailed information about our cookie practices, please see our Cookie Policy.

9.1 Types of Cookies We Use

• Essential Cookies: Required for authentication, security, and core application functionality
• Functional Cookies: Remember your preferences such as dashboard layout and notification settings
• Analytics Cookies: Help us understand how you use our application to improve performance
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness

9.2 Cookie Consent and Management

When you first visit our application, we will ask for your consent to use non-essential cookies. You can:

• Accept all cookies
• Decline non-essential cookies
• Manage your cookie preferences through browser settings
• Withdraw consent at any time by clearing your browser cookies

9.3 Global Privacy Control (GPC)

We respect the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we will automatically treat it as a request to opt out of non-essential tracking.

10. Google Services

We use Google services to improve our platform and understand user behavior:

10.1 Google Analytics

We use Google Analytics to analyze website usage and improve our services. Google Analytics collects:

• Pages visited and time spent on each page
• User interactions and navigation patterns
• Device and browser information
• Geographic location (country/city level)
• Traffic sources and referral information

You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

10.2 Google Ads

We use Google Ads for advertising and conversion tracking, which may collect:

• Ad click and conversion data
• Website interactions after viewing our ads
• Device and browser information for ad targeting
• Interest categories based on browsing behavior

You can control Google's use of your data for advertising by visiting Google Ads Settings and Google's Privacy Policy.

10.3 Data Retention by Google

Google Analytics data is retained according to our configured retention settings (currently set to 26 months). Google Ads data retention varies by data type as outlined in Google's data retention policies.

11. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover we have collected personal information from a child under 18, we will delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification under recognized privacy frameworks
• Service provider agreements with appropriate data protection terms

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of material changes by posting the updated policy and updating the "Last Updated" date. For significant changes, we may provide additional notice. Continued use of our services indicates acceptance.

14. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us:

EU Representative: You may also contact your local data protection authority.