Privacy Policy
The short version
- We collect what you give us to run the directory and pilot tools, plus basic technical data needed to operate the site.
- Your public profile is visible to anyone only after you publish it and we approve it. Private details (legal name for FAA checks, recovery contacts, saved checklists) are never shown publicly.
- We don't sell your personal information or share it for targeted advertising. There are no ad trackers on the site.
- You can download or delete your data at any time from your Account page.
1. Information we collect
You give us
- Account: your sign-in email; optional authenticator app setup (Google or Microsoft Authenticator) (we store a factor, never your codes).
- Crew profile: name you display, role, certificate, ratings, FAA medical class, crew type, home region and airport, aircraft with hours, type ratings, currency dates, training school and Part 135 status, availability, travel, passport (yes/no), experience, languages, and optional free text.
- Profile photo (optional): if you add one, we store a 400×400 copy made in your browser (location and camera details are removed). It stays private until an administrator approves it, then it appears on your profile page and, if you choose, your résumé PDF. It isn't shown in search results. Removing it, or deleting your account, deletes the file.
- Private verification details: legal first and last name and the city/state on your FAA address, used only by administrators to check the public FAA registry.
- Operator profile: operator type, company name (or "Private owner"), base, aircraft operated and crew needs.
- Recovery contacts: backup email and optional phone number.
- Checklists and saved items you create in the checklist builder (stored on your device, and in your account if you sign in).
- Contact requests: when you contact a crew member through the site, we store your note, the aircraft it's about, who sent it and to whom, and whether it was reported. Your sign-in email is given to that crew member as the reply address for the email we send them. Their email address isn't shown to you unless they reply.
- Messages to us: "Get notified" sign-ups (email and role), help requests, aircraft requests and partner inquiries.
Collected automatically
- Anonymous search statistics: the aircraft and region searched and the number of results, with no account or IP address attached. Used to see where owners need crew.
- Technical data processed by our hosting providers to deliver and secure the site (such as IP address, browser type and request logs).
- Browser storage: your sign-in session and your checklists are kept in your browser's local storage so the site works offline and keeps you signed in. We don't use advertising or analytics cookies.
2. How we use it
- To create and secure your account, show your published profile, run search, matching and recommendations, and sync your checklists.
- To review profiles, verify certificates against the FAA registry, prevent fraud and enforce our Terms.
- To send sign-in codes, recovery codes, service notices and, if you asked, news about the directory.
- To understand and improve the service using aggregate statistics.
3. Who can see what
- Public (after you publish and we approve): your crew or operator profile fields listed above, except the private items below.
- Only you and Cali Aircrew administrators: your email, legal name and FAA address city/state, recovery contacts, drafts, text waiting for review, and moderation notes.
- The sender and the recipient (and administrators): a contact request and its note. The recipient also receives the sender's email address as the reply address.
- Only you: your saved checklists and personal pick-list items.
4. Service providers
We share information only with providers that run the site for us, under their terms and security practices: Supabase (database, sign-in and server functions), GitHub Pages (website hosting), Resend (recovery, notice and contact-request emails), Google (Gmail for sign-in emails; Google Fonts, which receives your IP address when the page loads fonts). We may disclose information if required by law or to protect members' safety. If Cali Aircrew is sold or merged, information may transfer to the successor under this policy.
5. Retention
We keep your information while your account is open. When you delete your account, your profiles, aircraft, private details, recovery contacts and synced checklists are deleted. We keep a minimal record that an account was deleted (in our administrator audit log), anonymous search statistics, and backups for up to 30 days. Contact requests you sent or received are deleted with your account. Get-notified sign-ups are kept until you ask us to remove them.
6. Security
Passwordless sign-in with email codes, optional authenticator app (Google or Microsoft Authenticator), database rules that limit each member to their own private data, review before publication, hashed recovery codes and an audit log of administrator actions. No system is perfectly secure; please keep your email and devices protected.
7. Your California privacy rights
California residents may: know and access the personal information we hold; delete it; correct it; and opt out of sale or sharing (we don't sell or share personal information for cross-context behavioral advertising). We won't discriminate against you for using these rights. Use Account → Download my data or Delete my account, or email caliaircrew@gmail.com. We'll verify your request (usually by your sign-in email) and respond within 45 days. You may use an authorized agent.
8. Children
Cali Aircrew is for adults. We don't knowingly collect information from anyone under 18; if we learn we have, we'll delete it.
9. Changes and contact
We'll post any changes here with a new effective date and notify members of significant changes. Questions or requests: caliaircrew@gmail.com. Cali Aircrew is a trade name (DBA) of James Bailey, San Ramon, California.