Skip to main content
Legal

Privacy Policy

What we collect, why we collect it, and what we will never do with it.

Draft pending counsel review. This document is a working draft, not a final binding policy. Lawyer review is scheduled before public launch. Please don't rely on this version for legal purposes.

What we collect

  • Account data: your email address, your name (optional), and any aircraft you add (registration, make, model, serial, year).
  • Logbook content: entries, signatures, attachments. This is your data — you control it.
  • Mechanic identity: name, certificate number, certificate type, attestation acknowledgment. Captured at the moment of signing as part of the signed entry.
  • Operational metadata: IP address, user agent, and timestamps for security-relevant actions (logins, link issuance, signings, exports).

What we don't collect

  • We don't use third-party advertising trackers.
  • We don't embed analytics tools that share your behavior with marketing networks.
  • We don't require, ask for, or store payment card numbers — those go directly to Stripe.

How we use your data

To deliver the service. That's it. We send transactional email (sign-in links, mechanic-link receipts, compliance reminders), we surface dashboards and exports, and we run the cryptographic chain that protects your entries.

Who sees it

  • You. Always.
  • Co-owners and partners you explicitly invite to an aircraft.
  • Mechanics you send a signing link to — only the aircraft details and prior-entry context they need to sign their entry.
  • Our infrastructure providers (Postgres host, object-storage host, email/SMS gateway) under data-processing agreements.
  • Nobody else. We do not sell, share, or commercialize your data.

How long we keep it

While your account is active: indefinitely. After cancellation: 90 days exportable, then 18 months in cold storage, then deletion.

Where it lives

Primary: managed PostgreSQL in a US region with point-in-time recovery and AES-256 disk encryption. Backups: daily, encrypted under a separate key, replicated to a second cloud provider. Documents: object storage with versioning and cross-region replication.

Your rights

  • Export: any time, full PDF + CSV.
  • Correction: through correction entries (signed entries themselves are immutable).
  • Deletion: cancel and request deletion before the 90-day export window expires; we'll honor it within 30 days.
  • Access: contact us at privacy@yolog.aero.

Last updated: pending. Effective: pending counsel review.