01Who we are
StratusLog is operated by Stratus Marketing LLC, doing business as StratusLog ("StratusLog," "we," "us"), a Florida limited liability company. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit stratuslog.co, book a demo, or use the StratusLog web and mobile applications (together, the "Service").
By using the Service you also agree to our Terms of Service, which this policy is incorporated into.
02Schools, instructors & students — who controls what
StratusLog serves flight schools and independent certificated flight instructors ("Customers"), and the students and renters they manage ("Student Users"). Understanding who is responsible for which data matters:
- Customer account data. For information you give us directly to open and pay for an account — your name, business details, contact information, billing records — StratusLog is the business responsible ("controller") and this policy governs in full.
- Training and student data. When a flight school or instructor enters or invites students into StratusLog — enrollment details, schedules, logbook entries, endorsements, progress records — the school or instructor controls that data, and StratusLog acts as their service provider (processor). We process it only to provide the Service under their instructions and our Terms; we do not use Student User training records for our own marketing, and we do not sell them. Student Users with questions about how their school uses their data should contact the school first — we will assist schools in responding to those requests.
03Information we collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, email address, phone number, business name, mailing address | You; your school |
| Aviation profile | Pilot certificate type and number, ratings, medical certificate class and expiration, date of birth where required for training records | You; your school |
| Training & logbook records | Flight and lesson entries (date, aircraft type and tail number, departure/arrival, flight time and conditions), instructor endorsements and signatures, stage checks, training progress notes | You; your instructor or school |
| Scheduling data | Bookings, aircraft and instructor availability, cancellations, no-shows | You; your school |
| Billing information | Subscription plan, invoices, account balances, block-time balances, transaction history. Payment cards are processed by Stripe; we receive only limited details (such as card brand and last four digits) and never store full card numbers. | You; Stripe |
| Communications | Support messages, demo bookings, emails and texts you exchange with us, in-app reminder preferences | You |
| Device & usage data | IP address, browser and device type, operating system, pages viewed, actions taken in the app, approximate (city-level) location derived from IP, crash logs | Automatic |
What we deliberately don't collect: we do not ask for Social Security numbers, government photo IDs, health records beyond medical-certificate class and date, or precise GPS location, and we do not use biometric identifiers.
A note on TSA citizenship verification: federal rules (49 CFR part 1552) require flight training providers to verify and document student citizenship. That obligation belongs to the school or instructor. If a Customer stores such documentation in StratusLog, the Customer controls it and is responsible for its lawful collection and retention.
04How we use information
- Providing the Service — running scheduling, logbooks, student management, reminders, billing, and the student portal; syncing your data across devices.
- Billing and account management — processing subscriptions through Stripe, sending invoices and renewal notices, preventing fraud and abuse.
- Support and communications — answering requests, sending service and security notices, and (for Customers and prospects only) occasional product updates you can opt out of at any time.
- Improving the Service — understanding how features are used, fixing bugs, and developing improvements, using aggregated or de-identified data wherever possible.
- Safety, security, and legal compliance — securing accounts, enforcing our Terms, and complying with law, lawful requests, and regulatory obligations.
We do not use your training records or logbook entries to make automated decisions that have legal or similarly significant effects on you.
06No sale, no ad targeting
We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral (targeted) advertising — including the personal information of minors — and we have not done so in the preceding 12 months. Because we do not sell or share personal information for these purposes, opt-out signals such as the Global Privacy Control do not change how we process your data; if our practices ever change, we will update this policy, provide the required opt-out mechanisms, and honor such signals.
08Retention & aviation records
We keep personal information only as long as needed for the purposes above, and our general rules are:
- Account and training data — retained while the account is active. Aviation records have real regulatory weight: FAA rules require pilots to retain records supporting certificates and currency (14 CFR 61.51), instructors to retain training records for at least 3 years, and TSA rules require citizenship-verification records for 5 years. For that reason, after a Customer account closes we retain Customer data for a wind-down period of 90 days, during which it can be exported, before deletion from production systems.
- Billing records — retained as required by tax and accounting law (generally 7 years).
- Support communications — up to 3 years after resolution.
- Backups — encrypted backups roll off on a fixed retention schedule.
Export before you delete. Your logbook is your career record. The Service provides export tools, and we strongly recommend exporting your records before closing an account. Deleting a Student User profile is a request we route to the controlling school where the school owns the record.
09Your privacy rights
Wherever you live, we extend these rights to you:
- Access / know — get a copy of the personal information we hold about you and how it's used.
- Correction — fix inaccurate information (training-record corrections may require your instructor's or school's confirmation, since endorsements are regulatory records).
- Deletion — ask us to delete your personal information, subject to legal retention duties described above.
- Portability — receive your data in a usable format (logbook export is built into the Service).
- Non-discrimination — exercising your rights will never result in worse service or pricing.
- Appeal — if we decline a request, you may appeal by replying to our decision, and we will respond with an explanation. You may also contact your state Attorney General.
To exercise any right, email privacy@stratuslog.co from the address on your account (or provide equivalent verification — we verify every request to protect your records). An authorized agent may act for you with written proof of authority. We respond within 45 days, extendable once by 45 days for complex requests with notice. Requests concerning data controlled by your flight school will be forwarded to the school, and we'll tell you we've done so.
10Security
We protect your information with measures appropriate to the sensitivity of flight training records, including encryption in transit (TLS) and at rest, role-based access controls, logging, least-privilege access for personnel, and vendor security review. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you and regulators as required by applicable law and will tell you what happened and what we're doing about it.
11Students under 18
Flight training legitimately includes minors, and we treat their data with extra care. StratusLog is not directed to children under 13, and we do not knowingly collect personal information from children under 13; if we learn we have, we will delete it. Contact privacy@stratuslog.co if you believe a child under 13 has provided us information.
Students aged 13–17 may use StratusLog only as Student Users under a Customer's account, and the Customer is responsible for obtaining verifiable parent or guardian consent before adding a minor (see our Terms of Service). We collect the minimum information needed to deliver training records and scheduling for minor students, we do not serve them marketing, and we never sell minors' personal information.
12US-only service
StratusLog is offered to users in the United States and its data is stored and processed in the United States. The Service is not currently offered to residents of the European Economic Area, United Kingdom, or other jurisdictions with data-localization or transfer requirements we have not implemented. If you use the Service from outside the US, you do so on your own initiative and consent to processing in the US.
13Changes to this policy
We may update this policy as the Service and the law evolve. The effective date at the top always reflects the current version. For material changes, we will give at least 14 days' advance notice by email and/or in-app notice before the changes take effect, and where required by law we will ask for renewed consent. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
14Contact
Privacy questions and requests: privacy@stratuslog.co
General: hello@stratuslog.co