SKYVIEW PRO PRIVACY POLICY

1. Scope and Roles

This Privacy Policy describes how SKYVIEW PRO LLC (“SkyView Pro”) handles personal information through the SkyView Pro websites, applications, and services. SkyView Pro provides a multi-tenant software platform to flight schools and flying clubs, with each customer’s account and data maintained separately.

For Customer Data entered or controlled by a flight school or club, that organization generally determines the purposes and means of processing and acts as the business or controller; SkyView Pro acts as its service provider or processor. For information SkyView Pro collects for its own account administration, contracting, billing, security, support, and business operations, SkyView Pro acts as the business or controller.

2. Information We Collect

• Account and contact information, including name, email address, telephone number, organization, role, credentials, and account identifiers.
• Operational and training information, including schedules, flight and ground activity, aircraft, logbook entries, training progress, instructor notes, maintenance and compliance records, and audit history.
• Documents and sensitive information selected by Customers, which may include medical certificate information, government-issued identification, endorsements, insurance records, and expiration dates.
• Billing and transaction information, including subscription details, invoices, payment status, Stripe identifiers, connected-account information, refunds, and disputes. SkyView Pro does not store complete card numbers.
• Device, security, and usage information, including IP address, browser, device identifiers, log data, push tokens, authentication events, error information, and interaction data.
• Support communications and information supplied through integrations selected by a Customer, such as QuickBooks data.

3. Sources

We obtain information from Customers and Authorized Users, automatically from devices and use of the Service, from service providers such as Stripe, and from integrations that a Customer authorizes. Customers are responsible for providing required notices and obtaining required permissions before submitting information about other people.

4. How We Use Information

• Provide, configure, support, secure, and improve the Service.
• Authenticate users, enforce permissions, prevent fraud and abuse, investigate incidents, and maintain audit records.
• Support scheduling, training, document tracking, maintenance workflows, invoicing, payments, notifications, and customer support.
• Administer subscriptions, contracts, taxes, accounting, collections, and legal obligations.
• Communicate service, security, billing, and policy notices. Marketing communications will be sent only where permitted and may be opted out of.
• Create aggregated or de-identified information that cannot reasonably be linked to an individual and use it for analytics, service improvement, and business purposes.

5. Cookies and Similar Technologies

SkyView Pro uses cookies, local storage, and similar technologies that are necessary for authentication, security, user preferences, session continuity, and core functionality. SkyView Pro does not currently use third-party advertising cookies or cross-context behavioral advertising trackers.

6. Disclosure of Information

We may disclose information to Customer administrators and Authorized Users based on the roles and permissions configured within the applicable Customer account; to subprocessors necessary to operate the Service; in connection with a corporate transaction; to professional advisers; when required by law; or when reasonably necessary to protect our rights, safety, security, or the Service. We do not sell personal information or share it for cross-context behavioral advertising.

7. Service Providers and Subprocessors

Current providers may include Supabase/Amazon Web Services for database, authentication, and storage; Stripe for subscription and connected-account payment services; Resend for transactional email; Vercel for hosting; Expo for push notifications; Intuit/QuickBooks for optional integrations; Cloudflare R2 for encrypted off-site backups; Upstash for rate limiting; and Sentry for diagnostics. Providers and functions may change. The current list of service providers is available in this Privacy Policy and may be updated periodically. Customers that require a data processing agreement may contact us at privacy@skyviewpro.app.

8. Security

SkyView Pro uses reasonable administrative, technical, and organizational safeguards, which may include encryption in transit and at rest, controls designed to keep each Customer’s account and data separate from those of other Customers, access restrictions, logging, backups, and optional or required two-factor authentication. No system is completely secure, and SkyView Pro cannot guarantee absolute security. Customers are responsible for administering their accounts, managing user access, and maintaining the security of their own devices and systems.

9. Sensitive Information

SkyView Pro processes sensitive information selected and submitted by Customers only to provide the Service, comply with law, secure the platform, or as otherwise directed by the Customer. Customers should collect only information reasonably necessary for their operations and must establish an appropriate legal basis, notices, permissions, retention rules, and access controls.

10. Minors

The Service is not directed to children under 13, and persons under 18 may not establish a Customer account or accept the Terms. Flight schools may create or manage Authorized User records for minor student pilots. The Customer is responsible for parental or guardian notices and consents and for determining whether information about a minor may lawfully be entered and used.

Customer must not knowingly permit a child under 13 to create or control an account or submit personal information directly through the Service without first coordinating with SkyView Pro and implementing any legally required verifiable parental-consent process. If SkyView Pro learns that it collected personal information directly from a child under 13 without required authorization, it will take appropriate steps to delete or otherwise address the information.

11. Retention and Deletion

Customer Data is retained while the Customer subscription is active and as needed to provide the Service. Following cancellation, Customer may request a manual export during a 30-day export window. After that period, SkyView Pro may de-identify or delete Customer Data and will use commercially reasonable efforts to complete targeted deletion from active systems and off-site backups within 90 days after cancellation or a verified deletion request, subject to legal holds and required retention.

Billing, tax, accounting, transaction, fraud-prevention, and contract records may be retained for up to seven years or longer if required by law. Security and audit logs may be retained for up to one year after deletion, unless needed longer for an investigation or legal hold. De-identified and aggregated information may be retained indefinitely. Data subject to a subpoena, litigation hold, dispute, chargeback, security incident, or other preservation duty may be isolated and retained until the duty ends.

Archiving or disabling an account revokes access but does not itself delete all underlying records. More information appears on the Account Deletion page.

12. Privacy Rights and Requests

Depending on applicable law, individuals may have rights to access, correct, delete, or obtain a copy of personal information and to appeal certain decisions. SkyView Pro does not sell personal information or share it for cross-context behavioral advertising.

When SkyView Pro processes information for a Customer, requests will ordinarily be referred to the Customer, and SkyView Pro will reasonably assist the Customer. Requests may be submitted to privacy@skyviewpro.app. SkyView Pro may verify identity and authority and may deny or limit a request where permitted by law.

13. Data Processing Addendum and International Transfers

Customers that require additional contractual processor terms, including terms relating to comprehensive privacy laws or international data transfers, may contact SkyView Pro at privacy@skyviewpro.app to discuss an appropriate data processing agreement. Any applicable data processing agreement may address processing instructions, confidentiality, security, subprocessors, assistance with privacy requests, deletion, audit information, and legally required transfer mechanisms.

14. Breach and Incident Communications

SkyView Pro will notify affected Customers of a confirmed security incident involving Customer Data as required by applicable law or an applicable DPA. Customers remain responsible for determining and making notices to their users, regulators, and other parties where Customer acts as controller or business.

15. Changes; Contact

We may update this Policy. Material changes will be identified by an updated date and communicated by reasonable electronic notice. Changes that materially affect Customer Data processing should be reflected in the DPA and, where appropriate, require Customer acknowledgment.

Questions and requests may be sent to privacy@skyviewpro.app or 16745 Cagan Crossings Blvd, Ste 102B, PMB 904, Clermont, FL 34714.