Skip to main content

Yolog is in beta. Access is invite-only, and until full launch please keep your physical logbooks up to date as the primary record.

Legal

Privacy Policy

What we collect, why we collect it, and what we will never do with it.

Draft pending counsel review. This document is a working draft, not a final binding policy. Lawyer review is scheduled before public launch. Please don't rely on this version for legal purposes.

What we collect

  • Account data: your email address, your name (optional), and any aircraft you add (registration, make, model, serial, year).
  • Logbook content: entries, signatures, attachments. This is your data — you control it.
  • Mechanic identity: name, certificate number, certificate type, attestation acknowledgment. Captured at the moment of signing as part of the signed entry.
  • Operational metadata: IP address, user agent, and timestamps for security-relevant actions (logins, link issuance, signings, exports).

What we don't collect

  • We don't use third-party advertising trackers.
  • We don't embed analytics tools that share your behavior with marketing networks.
  • We don't require, ask for, or store payment card numbers — those go directly to Stripe.

How we use your data

To deliver the service. That's it. We send transactional email (sign-in links, mechanic-link receipts, compliance reminders), we surface dashboards and exports, and we run the cryptographic chain that protects your entries.

Who sees it

  • You. Always.
  • Co-owners and partners you explicitly invite to an aircraft.
  • Mechanics you send a signing link to — only the aircraft details and prior-entry context they need to sign their entry.
  • Our infrastructure providers (Postgres host, object-storage host, email/SMS gateway) under data-processing agreements.
  • Nobody else. We do not sell, share, or commercialize your data.

How long we keep it

While your account is active: indefinitely. After cancellation: 90 days exportable, then 18 months in cold storage, then deletion.

Where it lives

Primary: managed PostgreSQL in a US region with point-in-time recovery and AES-256 disk encryption. Backups: daily, encrypted under a separate key, replicated to a second cloud provider. Documents: object storage with versioning and cross-region replication.

Your rights

  • Export: any time, full PDF + CSV.
  • Correction: through correction entries (signed entries themselves are immutable).
  • Deletion: cancel and request deletion before the 90-day export window expires; we'll honor it within 30 days.
  • Access: contact us at privacy@yolog.aero.

Last updated: pending. Effective: pending counsel review.