VECTORAviation Services

Privacy Policy

Effective July 30, 2026 · Last updated September 1, 2026

Vector Aviation Services, LLC ("Vector") respects your privacy. This policy explains what information we collect, how we use and protect it, and your choices. It applies to vectorflightco.com, the Vector Members App, and the Vector Flight Deck app for iPhone.

Information we collect

Public site visitors: if you use the contact form, the name, email, and message you provide. Standard server and security logs (such as IP address and request time) are processed by our infrastructure provider to operate and protect the Site.
Members: your name and email for sign-in; aircraft, maintenance, scheduling, flight-log, and preflight data you enter; and, if you use international-manifest features, traveler details you provide, which may include date of birth, citizenship, address, and passport number and expiry.
Photos, video, and documents you upload: aircraft photos, maintenance logbook scans, discrepancy (squawk) media, receipts, and crew documents you choose to store in your account, and any media you attach to Hangar posts.
Aircraft position. Where your aircraft broadcasts ADS-B, we retrieve its publicly broadcast position from public ADS-B networks and keep a history so the app can show you where your aircraft is and help you draft flight log entries. We do not collect location from your phone, and the app never asks for location permission.
Notification registrations: if you turn on notifications, the push subscription or device push token needed to deliver them. It is stored only while notifications are enabled and is deleted when you unsubscribe or delete your account.
Diagnostic reports: when the Site or app hits an error, we record a short technical report to fix it: the error message and technical stack, the page you were on, your browser or device type (user agent), and, if you are signed in, your account identifier so we can reproduce the problem on your account. We use it only to keep the service working, it is not used to advertise or track you across other apps or sites, and these reports are kept only briefly (about 30 days).

The Hangar (member community)

The Hangar is Vector's member community. If you create a Hangar profile, your handle, bio, and profile details are visible to other members, and profiles are treated as public content. Posts, photos, and video you publish in the Hangar, along with follows and likes, are visible to other members and should be treated as public. Publish only what you are comfortable sharing, and do not post another person's information without their consent. Posted content may be reviewed, including with automated tools, to enforce the community guidelines.

How we use it

To provide the services you request: scheduling, maintenance tracking, risk assessment, recordkeeping, invoicing, and, where you direct us, preparing customs (eAPIS) manifests for a Vector person to file by hand until Vector is an approved CBP transmitter.
To communicate with you about your account and your requests.
To secure, maintain, and improve the Site.

We do not sell your personal information, and we do not use it to serve third-party advertising.

How we protect it

All traffic is encrypted in transit (HTTPS/TLS), and data is encrypted at rest by our infrastructure provider.
Passport numbers are additionally encrypted at the field level and are never displayed in full; only the last few digits are shown.
Access to member data is restricted to the authenticated account holder; sign-in uses one-time email codes and a human-verification challenge, with rate limiting and lockouts against automated attacks.
We do not store your ForeFlight, Garmin, or CBP passwords; where those services are connected, they are connected through their own authorized sign-in, and your credentials are handled by your own password manager or the provider, not by Vector.

Cookies and local storage

Security cookies. Sign-in is protected by Cloudflare Turnstile, which sets its own cookies to tell people from bots. After you pass that check, the Site sets a first-party, cryptographically signed security cookie so you are not challenged again on every request, and email sign-in sets a session cookie that keeps you signed in.
Local storage. The app keeps your sign-in token and an offline snapshot of your own account data in local storage on your device, so the app opens quickly and keeps working when your connection drops. It stays on your device; signing out or deleting your account clears it.
We set no advertising or analytics cookies, and we do not track you across other sites.

Sharing

We share personal information only in these cases:

With the service providers that operate the Site on our behalf, under confidentiality obligations: Cloudflare (hosting, data storage, and security), Resend (transactional email, such as sign-in codes and account notices), and Apple (delivery of push notifications, only when you enable them).
With an AI processing provider (Anthropic) when a feature you use calls for it: reading a maintenance logbook scan you uploaded, answering a support request you sent, analyzing maintenance data you asked about, or reviewing Hangar content against the community guidelines. Your content is sent to provide the feature, not to train the provider's models.
With the maintenance shop you engage through the app: the work-order details, messages, and media you and the shop exchange are visible to that shop.
With Stripe, our payment processor, when you pay an invoice or a shop work order. Payment pages are hosted by Stripe; Vector never sees or stores your card number. For shop work orders the shop is the merchant of record.
With U.S. Customs and Border Protection when you direct us to prepare an eAPIS manifest for your international flight. Vector does not transmit manifests to CBP until it is an approved transmitter; a Vector person files them by hand.
As required by law or to protect our legal rights.

Where your information is processed

Vector operates from the United States, and your information is processed and stored on infrastructure in the United States. If you use the services from outside the United States, you consent to your information being transferred to and handled in the United States, where privacy laws may differ from those of your country. For members in the EEA or the United Kingdom, transfers are protected by appropriate safeguards, including the contractual data-protection commitments of our service providers and the security measures described in this policy.

Retention & your choices

We keep information for as long as needed to provide the services and to meet legal, tax, and recordkeeping requirements, then delete or de-identify it. Members can start account deletion from inside the Vector app, under Account › “Delete my account”. Confirming it immediately stops every private access link from working and signs you out, and we complete the removal of your personal details within 30 days and email you when it is done. Flight logs, fuel and trip receipts, customs manifests, and maintenance history are kept in de-identified form, with your name, email, and phone number removed, because those records may be needed for tax or regulatory purposes. You can also request access to or correction of your personal information by contacting us. Passenger and traveler profiles are managed by the member who created them, who is responsible for having the traveler's consent.

Your rights

You can ask us, at any time, to tell you what personal information we hold about you, to correct it, to delete it, to give you a copy of it in a portable format, or to restrict or object to a particular use of it. Send any request to info@vectorflightco.com. We verify that a request comes from the account holder before acting on it, and we respond within the time the applicable law allows. Exercising these rights never changes the price or quality of the services.

EEA and United Kingdom residents. Where the GDPR applies, our legal bases are: performance of our contract with you, for the member services you request; our legitimate interests, for securing the Site and keeping server and security logs; and your consent, where the law requires it, which you may withdraw at any time. You have the rights of access, rectification, erasure, portability, restriction, and objection described above, and you also have the right to lodge a complaint with your local supervisory authority.

Canadian residents. We handle personal information in accordance with PIPEDA and, for Quebec residents, Quebec's Law 25. Vector's designated privacy contact for Canadian requests is info@vectorflightco.com.

California residents. You may request access to or deletion of your personal information as described above; Vector does not sell personal information and does not share it for cross-context behavioral advertising.

Children

The Site and apps are not directed to children under 13, and Vector does not knowingly collect personal information from a child under 13. If you believe a child has provided us information, contact us and we will delete it. One exception is deliberate and narrow: traveler profiles a member creates for international-manifest (eAPIS) filings may include the details of the member's minor family members. That information is supplied by the member, is used only to prepare the border-crossing manifest, and is protected by the passport and traveler safeguards described above.

Changes to this policy

If we change this policy in a material way, we will announce the change in the app or by email before it takes effect, and we will update the date at the top of this page. Earlier versions are available from us on request.

Consent for likeness

Photographs and video on the public Site depict individuals who have consented to Vector's use of their image. If you appear in Vector's media and wish to discuss its use, contact us.

Contact

Vector Aviation Services, LLC · KSRQ, Sarasota, Florida
info@vectorflightco.com · +1 (941) 417-9888