Privacy Policy

1. Introduction

SoaringOps ("we", "our", or "us") operates the SoaringOps platform, a flight logging and club management service for glider clubs. This Privacy Policy explains how we collect, use, and protect information about you when you use our Service.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information: name, email address, and password when you register
• Profile information: avatar photo and pilot designations
• Flight records: flight times, aircraft used, tow pilot, and other operational data entered by club administrators or members
• Payment information: billing details collected and processed by Stripe on our behalf (we do not store full card numbers)
• Club information: club name, timezone, contact details, and logo

We also collect certain information automatically when you use the Service, such as IP address, browser type, and pages visited, for security and analytics purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process payments and generate invoices on behalf of your club
• Send transactional communications (e.g. invitation emails, password resets)
• Respond to support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

4. Sharing of Information

We may share your information with:

• Your club administrators — club admins can view member profiles, flight records, and billing activity within their club
• Stripe — payment processing; subject to Stripe's Privacy Policy
• Supabase — our database and authentication provider; data is stored in the US
• Service providers — other vendors we use to operate the Service, under confidentiality obligations
• Legal requirements — if required by law or to protect the rights of SoaringOps or others

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g. financial records).

Club administrators may retain flight and billing records for their club independently of individual member account deletion.

6. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), row-level security on all database tables, and restricted access to production systems. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use cookies and similar technologies to maintain your session and remember your active club. We do not use cookies for advertising or cross-site tracking. You can disable cookies in your browser settings, but some features of the Service may not function correctly without them.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at [email protected].

You may update your profile information at any time from your account settings. You may delete your account from your profile settings page.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy should be directed to [email protected].