Privacy

Information in your workspace

We handle the account details you provide, including your name and email, and the records you or your club enter: membership, bookings, flight times, aircraft meters, maintenance notes, invoices, and payment history. Our hosting and delivery providers also process technical information, such as request logs and email delivery events, to operate and protect the service.

If you continue with Google, Google and Supabase process your basic Google profile, including your name, email, profile image, and account identifier, to sign you in. Google sign-in does not connect Calendar or Drive; you authorize those integrations separately.

How we use it

We use this information to sign you in, coordinate club activity, maintain records, process billing, send account and club notices, provide support, and investigate errors or abuse. Do not put medical information, identity documents, passwords, or card details into free-text notes.

Who can see it

Club owners and authorized instructors can see records needed for their roles. Members can see shared scheduling and aircraft information and their own records. Authorized Pilot Computer administrators can access club information for setup, support, and operations. Information entered into a club workspace is shared with that club; contact its owner about how the club uses its records.

Service providers

We use Vercel for hosting and sampled page-performance measurements, Supabase for accounts and database storage, Sentry for error monitoring, Resend for email, Stripe for payment processing, Cloudflare R2 and GitHub Actions for encrypted backup storage and operation, and Crisp for support chat available throughout the site. Performance measurements help us find slow pages. We remove query strings and record identifiers from measured URLs and exclude invitation and password-recovery routes. These providers process information needed for their services. Payment credentials are collected by Stripe; Pilot Computer keeps payment references and status rather than full card numbers. We do not sell personal information or use advertising trackers in the app.

Calendar connections

If you connect Google Calendar, we use your Google account identifier and email to identify the connection and store encrypted authorization credentials to keep your flights up to date. We create a separate Pilot Computer calendar and publish your own bookings, aircraft, airport, organization, and participant names. We do not read your other calendars, send calendar invitations, use Google data for advertising, or sell it. Our use of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect in Account → Calendar or revoke access in your Google account. Disconnecting removes the stored connection credentials; existing Google events remain until you remove that calendar. Private calendar subscription links provide read access to your flights to anyone who has the link. You can regenerate or disable a link at any time. Previously downloaded events may remain in your calendar app until you remove the subscription.

Aircraft documents in Google Drive

An organization owner can connect Google Drive for aircraft documents. We store the connected account identifier and email, encrypted access credentials, and document metadata. Uploaded files and files you choose from Google Drive are stored in that Google account, organized in Pilot Computer folders for the organization and each aircraft. We request access to files created through this integration or that you authorize with Google's file picker. Active club members can view aircraft documents through Pilot Computer; owners and instructors can attach, upload and manage them. File contents and authorization credentials are not sent to product analytics or used for advertising or AI training. Our use of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

Removing a document moves it to Google Drive Trash; it can be restored while Google retains it there. Disconnecting on an aircraft page removes stored credentials and stops document access in Pilot Computer. Files and document metadata remain so the owner can reconnect the same Google account. You can also revoke the document integration in your Google account. Google Drive's own sharing and retention settings continue to apply to files in Drive.

Product analytics and session replays

We use DataFast in cookieless mode for website traffic reports. It receives generalized page categories, referring website origins, browser and screen information, and connection information such as your IP address. DataFast uses a daily rotating visitor identifier and session-only browser storage. Our proxy removes query strings, private record identifiers, and authentication cookies before forwarding events. Recovery and invitation pages are excluded. We honor Do Not Track and Global Privacy Control.

We use PostHog’s US-hosted service to understand which features people use, where an action fails, and which screens are slow or confusing. It receives opaque account, organization, booking and aircraft identifiers, role, browser and device category, page category, and the outcome of actions. We do not send names, email addresses, passwords, private notes, invitation links, invoice amounts, or payment credentials in product analytics.

Session replays reconstruct page layouts and interactions. Private page text, input values and element attributes are masked using the recorder’s built-in privacy controls. Account, sign-in, invitation, recovery, and admin screens are excluded. Payment credentials and support conversations are never recorded. PostHog AI analysis is disabled. Replays are not recordings of your camera or microphone.

PostHog uses browser storage to recognize returning visits. We honor Do Not Track and Global Privacy Control. The service also keeps essential operational records and organization-level counts of successfully reconciled payments. Contact support with a privacy request or to request removal of previously collected analytics.

Bookkeeping exports

Organization owners can download financial reports for their bookkeeper. If an owner connects QuickBooks and enables automatic sync, Pilot Computer reads the company’s accounting settings and sends student finance journal entries to that company. Authorization tokens and the company identifier are encrypted in server-only storage. Owners can disconnect to revoke access. Saved posting references are retained for reconciliation. If an owner uses Stripe Connector by QuickBooks, that connection is managed separately by Stripe and Intuit. Instructor payments remain in the organization’s bank or payroll service.

Error monitoring

Sentry receives error types, code locations, deployment versions and generalized page paths to help us fix failures. We remove account and club details, request contents, cookies, query strings and original error messages before sending reports. We do not enable Sentry session recordings, activity breadcrumbs, performance traces or log collection. Sentry processes connection information needed to receive reports.

Support and feedback

Crisp’s chat widget loads on every page so you can contact us from any screen. Crisp processes connection, device, and page-browsing information to operate the widget, plus messages, contact details, and attachments you choose to send. We do not automatically populate your chat profile with account details or export club records to Crisp. Feedback and reviews are private unless you separately agree to publication. Email support remains available if you prefer not to use chat.

Cookies and browser storage

We use cookies to maintain your sign-in session and browser storage to support features such as safely retrying an interrupted payment request. Blocking essential cookies may prevent sign-in. Support chat may use its own cookies or browser storage to continue conversations. On a shared device, close your support conversation and clear its browsing data when finished. The app does not require advertising cookies.

Retention and your choices

Club flight and financial records remain available when a membership is archived. Removing access does not automatically delete those records. Contact us to request access, correction, export, or deletion of your personal information; we will verify your identity and review what can be removed, including any records the club needs to retain. Encrypted daily backup copies expire after 30 days. That backup expiry does not delete the active club record.

Contact and changes

Email support@pilotcomputer.com with a privacy request or concern. We will update this page when our practices change and identify the current revision date above.