Privacy policy

What we collect

• Account: your email address (to sign you in with a link) and, if you add one, your mobile number for text alerts.
• Membership: your membership status and renewal date, and the customer and subscription IDs Stripe gives us. Card details go to Stripe, not to us.
• Your settings: saved alerts and routes, saved feed filters, and member API keys (we keep only a scrambled hash of each key).
• Activity: which alerts we sent you, and when you tap “Book with” an operator (so our reports count real interest), and your answers to “Was this leg as listed?” (they count toward that operator's reliability score; operators never see who answered).
• Sign-in safety: your IP address, used briefly to limit repeated sign-in requests.

Operators who list with us share business contact details and their empty-leg emails or feeds. We remove aircraft registrations (tail numbers) before anything is stored.

Cookies and browser storage

• openleg_session: keeps you signed in for up to 30 days.
• ol_seen_prev, ol_seen_last: remember your last visit so new legs can be marked “New”.
• Your light or dark theme choice, kept in your browser.

We don't use advertising or cross-site tracking cookies. Our fonts load from Google Fonts, which receives your IP address when the page loads.

Who processes data for us

• Stripe: payments and the billing portal.
• Resend: sign-in links and alert emails.
• Twilio: text alerts, only if you add a phone number and turn texts on.
• MongoDB Atlas and our hosting provider: storing and running the service.
• Postmark and Anthropic: receiving and reading operators' empty-leg emails. No member data is sent to them.

We don't sell your personal information or share it with operators. You contact operators yourself; we never pass them your details.

Your choices and deleting your account

• Change your phone number, alerts and API keys any time in Account and Alerts.
• Delete your account: this cancels any membership and permanently deletes your account, email address, saved alerts and alert history. Booking-tap counts are kept without your identity. Stripe keeps the billing records it must hold for tax and accounting.
• To ask what we hold about you, or for anything else: [contact email to be set]. [Counsel: add state-law rights wording, e.g. California, as needed.]

Security and changes

Sign-in links work once and expire after 20 minutes, and data is encrypted in transit. If we change this policy in a way that matters, we'll email members first. See also our Terms of membership.