Privacy Policy

1) Scope

This Privacy Policy explains how we collect, use, disclose, retain, and protect information about users of our websites, apps, marketplace, community features, trainer tools, event listings, and related services (the "Services"). If a feature displays a more specific privacy notice, that notice controls for that feature.

2) Information We Collect

• Account and profile information: name, email, username, avatar, bio, home location, flying experience, gear details, trainer/school information, verification requests, and preferences.
• Content and communications: posts, comments, photos, videos, ratings, messages, group activity, event submissions, marketplace listings, support requests, reports, and appeals.
• Legal acceptance evidence: the policy version, document and clickwrap identifiers, acceptance surface, server timestamp, request identifier, and pseudonymous keyed one-way hashes (HMACs) of available IP-address and browser user-agent evidence. The legal-acceptance record stores those HMACs rather than the raw IP address or raw user-agent value.
• Marketing-email jurisdiction and choice evidence: the two-letter country code most recently inferred by our server and the country you select, the classification of each available signal, the combined rule and applicable law references, consent-text version and hash, your choice, timestamp, and request identifier. This marketing record does not store your raw IP address, GPS coordinates, city, or street address.
• AI assistant interactions: prompts, assistant responses, gear photos you choose to upload, response identifiers, ratings, optional positive or negative written feedback, extracted negative-feedback issue keywords, and short prompt and answer excerpts included with a rating, plus provider token/cost usage and a pseudonymous HMAC of your IP address used to enforce AI limits. Raw IP addresses are not stored in the AI quota ledger. Gear photos are not added to our retained parts catalog automatically.
• Location information: coarse location inferred from IP, profile home location, event or spot submissions, and precise location only when you choose to provide it or enable device permissions for a feature.
• Device and usage data: IP address, device type, browser, operating system, app version, pages or screens viewed, referrers, timestamps, diagnostics, security logs, crash logs, and product analytics. For signed-in website, iOS, and Android users, this may include foreground session start, last-active and end times, session duration, platform, and mobile app version. This session measurement does not include precise location, advertising identifiers, page contents, or screen contents. We may also store whether you dismissed or selected the app-rating prompt so that we do not show it repeatedly.
• Brazil website access record: when Cloudflare identifies a website request as coming from Brazil, we store the IP address and UTC date once for that date. This record does not contain page paths, account identity, or repeated click history. Only the owner can view it in the admin area.
• Marketplace, seller, and trainer data: listing and transaction details; messages; the buyer's name, email address, shipping address, phone number when collected, and delivery or tracking information; seller return-policy and terms acceptances; verification documents; insurance or credential information submitted for review; and fraud or safety signals. A public marketplace listing uses only a coarse seller or ship-from location consisting of city, state or region, and country. It must not contain a street address, unit, postal code, CPF, CNPJ, or identity-document number.
• Stripe marketplace payments and payouts: For purchases offered through Stripe-powered checkout, WingVoyagers uses Stripe-hosted or embedded payment fields. The order may use a direct charge on the connected seller account or a platform-processed payment on that seller's behalf. Stripe collects buyer payment and billing details and may collect device, fraud, and compliance signals. For seller onboarding and payouts, Stripe may collect legal name, business and beneficial-owner information, government identification, tax identifiers and forms, bank or debit-card payout details, and related verification information. WingVoyagers receives or stores information needed to operate and protect the marketplace, such as the Stripe connected-account identifier and onboarding, capability, requirement, and payout status; order and shipping information; payment status and limited payment-method details such as card brand and last four digits; and fee, refund, dispute, chargeback, tax, risk, and verification status. Where the relevant features are enabled, records also include actual delivery and shipping-origin addresses, claim evidence, reserve amounts and reasons, review decisions, transfer and recovery records, and limited recovery-bank details, verification status and authorization references. We retain the version and evidence of separate bank authorization and revocation; accepting the Privacy Policy is not a bank-debit mandate. Provide only relevant claim evidence through the designated secure channels. For private seller verification, compliance, and transaction administration, WingVoyagers also receives and stores the seller legal name, display name, and complete U.S. address selected from the Stripe identity record. Depending on the account, that may be a principal or primary business address or an individual seller's residential address. Buyers see only the seller name and city, state, and country on WingVoyagers listings, checkout review, and order pages. The seller's street address and ZIP code are hidden on those pages. Stripe separately controls seller support details, which may include an address, shown on its hosted Checkout and receipts. The complete Stripe identity and address remain in protected internal verification and transaction records accessible to authorized personnel. Because payment credentials and Stripe identity documents are submitted through Stripe-hosted or tokenized forms, WingVoyagers does not receive full payment-card numbers, bank-login credentials, or complete government-identification images through those forms.
• Cookies and similar technologies: essential cookies for sign-in, security, preferences, and guest mode, plus analytics, diagnostic, or Google Ads measurement technologies where enabled or permitted.
• Guest preview information: guest mode may store a local device flag and may use approximate location, public launch context, or limited interaction data to operate preview features. On iOS, guest current-location forecast previews are rounded before the app stores the selected point or sends forecast requests.
• Third-party sources: map, weather, analytics, anti-fraud, email, app store, auth, and content delivery providers, and publicly available information where relevant to safety, verification, or abuse prevention.

3) How We Use Information

• Provide, operate, personalize, and improve the Services.
• Authenticate users, maintain accounts, and support onboarding.
• Display profiles, posts, spots, comments, events, groups, trainer pages, and marketplace listings according to user settings and feature behavior.
• Deliver messages, alerts, emails, push notifications, and service notices. For optional product news, community updates, and promotional event invitations, we separately evaluate the country identified by our server during the request and the country you select. If either available signal requires prior permission, or if an available signal is unknown or has not yet been reviewed, we show a separate unchecked opt-in and do not send marketing email unless you choose it. We identify reviewed country rules in the prompt when applicable. We omit the opt-in only when every available country signal has a reviewed rule that permits opt-out marketing. If a country is specifically disabled pending review, promotional email remains blocked. These choices do not stop necessary account, security, purchase, shipping, safety, legal, or support messages.
• Review reports, moderate content, investigate fraud or abuse, enforce Terms, and protect users and the Services.
• Review trainer, school, seller, reseller, or event-host verification requests.
• For Stripe-powered marketplace purchases, onboard sellers, process and reconcile orders, calculate the disclosed seller-paid Platform Fee and estimated seller proceeds, display settlement, reserve, review and payout status, support shipping and return administration, issue policy-authorized refunds, respond to disputes and chargebacks, prevent fraud, collect or report taxes, and satisfy marketplace identity, disclosure, and recordkeeping laws.
• Information collected solely to comply with the federal INFORM Consumers Act or a similar marketplace-seller verification law is used only for that compliance, unless another use is required by law.
• Analyze usage, debug issues, measure performance, and develop new features, including aggregate and per-account website and mobile session totals available only to authorized administrators.
• Measure whether Google Ads lead to completed onboarding and optimize advertising campaigns where permitted.
• Provide AI-assisted WingVoyagers search and maintenance identification. Helpful or Not helpful ratings, optional written feedback, and short prompt and answer excerpts may be processed by OpenAI to generate a generalized learning note and, for negative feedback, issue keywords. Eligible non-sensitive, non-injection notes become review candidates and do not affect future answers unless a WingVoyagers owner approves them in the admin dashboard. Only approved behavior improvements may guide the approach of future Ask WingVoyagers and WingVoyagers Maintenance answers. Raw feedback text is never directly inserted into runtime prompts. Approved improvements are not facts and cannot modify the system, safety, grounding, privacy, or tool rules for either agent; those rules remain fixed. This process is not model-weight retraining.
• Comply with legal obligations, resolve disputes, and respond to lawful requests.
• We do not sell personal information for money. Depending on applicable law and configuration, allowing Google Ads to receive advertising identifiers or measurement signals may be considered "sharing," targeted advertising, or a sale. We treat the Privacy choices control and recognized Global Privacy Control signal as an opt-out of that use as described below.

5) Disclosure of Information

We disclose information to:

• Service providers and processors for hosting, auth, storage, analytics, email, notifications, maps, weather, content delivery, moderation, security, and support.
• Google Ads, when enabled or permitted, for advertising attribution, conversion measurement, and campaign optimization.
• AI service providers, including OpenAI, when you use an AI assistant feature or submit optional written AI feedback; prompts, relevant conversation context, attached gear photos, feedback comments, and short prompt and answer excerpts may be sent for processing.
• Other users when you post content, send messages, join groups, RSVP to events, submit listings, interact with trainers, or use public/community features.
• Marketplace participants: we provide the connected seller with the buyer's name, email address, shipping address, phone number when collected, purchased item, order status, and other information reasonably needed to fulfill, support, refund, or resolve the order. We give buyers the seller name and city, state, and country. The seller's street address and ZIP code are hidden on WingVoyagers listings, checkout review, and order pages. Stripe separately controls seller support details shown on its hosted Checkout and receipts. We may give an intended buyer business-contact, return-policy, fulfillment, and legally required marketplace disclosure information through a private transaction-specific surface. We do not make a seller's CPF, CNPJ, registration, or identity documents public merely because the seller creates a listing. Buyers and sellers may use information they receive only for the transaction, safety, legal compliance, or another purpose the person has authorized.
• Stripe and other disclosed payment processors; shipping providers; and tax, identity-verification, compliance, and fraud tools where a marketplace feature requires them. Stripe hosts checkout and connected seller onboarding and processes information under its own legal terms and privacy notice as described at checkout or seller onboarding.
• For marketplace orders using automatic shipment tracking, we send the carrier and tracking number to EasyPost to obtain carrier status, scan times and available delivery-location information. We use these records with the order's shipping information to verify delivery, administer the 72-hour Purchase Protection deadline, review claims, and determine reserve and payout eligibility. Authorized staff may review the shipping label against the order. We retain the necessary tracking identifiers, delivery evidence, integrity hashes and review records under the retention rules below. Our tracking integration does not send EasyPost the buyer's full shipping address or payment details. EasyPost also describes its processing in its privacy notice.
• Trainer, school, event, or verification reviewers where needed to operate those features.
• Law enforcement, regulators, courts, emergency responders, or affected parties where required by law or reasonably necessary to protect rights, safety, users, or the Services.
• Successors in a merger, acquisition, financing, reorganization, bankruptcy, or asset transfer.

Service providers acting only as our processors may use personal information only to provide the contracted service and as law permits. Some recipients, including Stripe, may act as our processor for one activity and as an independent controller for fraud prevention, security, compliance, and services they independently provide. Their privacy notices describe those separate purposes and rights.

6) Retention

We retain personal information as long as needed for the purposes above and according to the context of the data. Account records and user content are generally kept while your account is active or until you delete or request deletion, subject to legal, backup, safety, moderation, fraud, tax, audit, and dispute-resolution needs. Security, analytics, and diagnostic logs are generally kept for a limited period unless needed longer for safety, fraud, legal, or operational reasons. The separate Brazil website access record is deleted six calendar months after it is first saved for that UTC date. Marketplace order, fee, payout, tax, refund, dispute, chargeback, and seller-verification records may be kept after account closure for the period needed for settlement, audits, tax reporting, fraud prevention, legal claims, and other legal or processor requirements. Payment processors retain information under their own policies and legal duties. Anonymized or aggregated data may be kept longer.

Information collected solely to satisfy the federal INFORM Consumers Act or a similar marketplace-seller verification law is retained only as long as reasonably necessary for required verification, recertification, consumer disclosure, audit, enforcement, and legal obligations, then deleted or deidentified unless law requires or permits longer retention. We do not repurpose that solely collected information for advertising or unrelated product development.

WingVoyagers requests that supported AI responses are not stored by the model provider for product history. AI providers may still retain limited abuse-monitoring or security logs according to their terms and the data controls configured for our account. AI ratings, optional positive or negative written feedback, extracted issue keywords, generated generalized learning notes, approval status, and approved behavior improvements may be retained for authorized review and product evaluation.

7) Your Privacy Rights

Depending on where you live, you may have rights to access, know, correct, delete, restrict, object to processing, withdraw consent, port data, appeal a decision, or avoid discrimination for exercising privacy rights. California residents may have rights under the CCPA/CPRA. EEA and UK users may also lodge a complaint with their local supervisory authority.

To exercise rights, email contact@wingvoyagers.com from your account email when possible, or use the account deletion tools in Settings or at /account/delete. You may review or correct editable account and profile information in Settings and may email us to request review or correction of other personal information we maintain. We may need to verify your identity or authority before completing a request. Some information may be retained where permitted or required for security, fraud prevention, legal compliance, backups, disputes, or other legitimate reasons.

9) Cookies & Tracking

We use essential cookies and similar technologies for sign-in, security, session management, guest mode, preferences, and service operation. We may use analytics or diagnostic technologies to understand usage and improve the Services. Signed-in session measurement is limited to time when the website is visible or the mobile app is active in the foreground. Where regional consent is required, no website or mobile usage session is recorded before opt-in, and the choice can be changed later in Privacy Settings. Our website also uses the Google tag and Consent Mode to measure whether Google Ads lead to completed WingVoyagers onboarding. Google Ads consent is denied by default. If you allow it, Google may use advertising cookies and related identifiers for attribution and campaign optimization. If you decline, advertising storage, ad-user-data use, and ad personalization remain denied, though Google may receive limited cookieless measurement signals. You can change your selection at any time through the Privacy choices control. We honor a recognized Global Privacy Control signal as a request to opt out of sale, sharing, or targeted advertising by keeping Google Ads consent denied while that signal is enabled. Because there is no common industry standard for the older browser "Do Not Track" signal, our Services do not change their behavior in response to Do Not Track alone. You can still use the Privacy choices control described above.

Other parties may collect information about your online activity over time and across different websites or services when their technology is present. This can include Google when Google Ads measurement is enabled with your permission and Stripe when you visit its hosted Checkout, seller-onboarding, or Link experiences. Those parties process information under their own privacy notices and controls.

10) Children and Minors

The Services are intended for adults 18 and older. We do not knowingly collect personal information from minors under 18. If you believe a minor under 18 has provided information, contact us so we can review and delete it where required.

11) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure. You are responsible for protecting your credentials and devices.

12) International Transfers

If you access the Services from outside the United States, your information may be processed in the United States and other countries that may not provide the same level of data protection as your home jurisdiction. We use appropriate safeguards where required.

13) Changes

We may update this Policy from time to time. We will post the revised Policy, change the effective date and version above, and maintain it at this privacy-policy location. For a material change, we will provide a reasonably prominent notice through the Services, by email, or by another legally required method before or when the change takes effect. We will request consent before a new use when applicable law requires consent; continued use will not replace consent where law requires it.

14) Contact

Questions or requests: contact@wingvoyagers.com