Privacy Policy

1. Introduction

Durante Tech LLC, a Delaware limited liability company ("Durante Tech," "we," "us," or "our"), operates AeroCopilot, an aviation information consolidation and analysis platform accessible at aerocopilot.ai (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information when you use our Service.

We are committed to protecting the privacy of our users. This Privacy Policy is designed to comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and other applicable state privacy laws. To the extent our Service is accessed by individuals in the European Economic Area, United Kingdom, or Switzerland, we also address obligations under the General Data Protection Regulation (GDPR).

By using our Service, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Terms of Service.

2. Information We Collect

2.1 Information You Provide

Account Information: When you create an account, we collect your name, email address, and password (stored in hashed form). If you sign up via a third-party authentication provider, we receive profile information as authorized by you through that provider.
Pilot Profile Information: You may optionally provide your pilot certificate type, certificate number, ratings and endorsements, medical certificate status, flight experience (total hours, recent hours), home airport, and other aviation-specific profile data.
Flight Planning Data: When you use the Service for flight planning research, we collect your departure and destination airports, route preferences, aircraft information, and related flight parameters.
Logbook Data: If you use our logbook features, we collect your flight records, including dates, airports, aircraft, durations, and remarks.
Aircraft Profiles: Information about aircraft you operate, including registration, type, performance data, and equipment.
Payment Information: When you subscribe to a paid plan, payment is processed through our third-party payment processor (Stripe, Inc.). We do not store your full credit card number, bank account number, or other sensitive financial information on our servers. We retain a payment token, last four digits of your card, card brand, and billing address.
Communications: When you contact us for support, provide feedback, or communicate with us, we collect the content of those communications.

2.2 Information Collected Automatically

Usage Data: We collect information about how you interact with the Service, including pages viewed, features used, search queries, map interactions, and clickstream data.
Device and Browser Information: We collect your device type, operating system, browser type and version, screen resolution, and device identifiers.
Log Data: Our servers automatically record information including your IP address, access times, referring URL, and pages visited.
Location Information: With your consent, we may collect your approximate geographic location from your IP address or your precise location from your device GPS to provide location-relevant aviation information (such as nearby airports and local weather).
Cookies and Similar Technologies: We use cookies, local storage, and similar technologies as described in our Cookie Policy.

2.3 AI Conversation Data

AI Chat Inputs:When you use AeroCopilot's AI assistant features, we collect the text of your queries, prompts, and conversational inputs.
AI Chat Outputs: We store AI-generated responses for the purpose of providing conversation history within your session and account.
AI Interaction Metadata: We collect metadata about AI interactions, including timestamps, model identifiers, token usage, and response latency, for service quality and billing purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

To provide, operate, and maintain the Service, including delivering aviation data, generating AI responses, and rendering personalized map displays.
To process your transactions and manage your subscription.
To provide customer support and respond to your inquiries.

3.2 Service Improvement

To analyze usage patterns and improve the Service's features, performance, and user experience.
To develop new features and services based on aggregated usage trends.
To monitor and improve the accuracy and relevance of data presentation.

3.3 Safety and Compliance

To detect and prevent fraud, abuse, or other harmful activities.
To comply with legal obligations and respond to lawful requests from governmental authorities.
To enforce our Terms of Service.

3.4 Communication

To send you service-related communications, including account notifications, security alerts, and subscription updates.
To send you promotional communications about new features, if you have opted in. You may opt out of promotional communications at any time.

3.5 What We Do NOT Do

We do NOT use your personal data, flight data, logbook entries, or AI conversation content to train AI models. Your aviation data and AI conversations are used solely to provide the Service to you and are not used to train, fine-tune, or improve any machine learning models.

5. Data Retention

5.1 Retention Periods

Account Data: Retained for the duration of your account and for ninety (90) days following account deletion to allow for account recovery.
Flight and Logbook Data: Retained for the duration of your account. Upon account deletion, flight and logbook data are permanently deleted within ninety (90) days.
AI Conversation Logs: Retained for the duration of your account to provide conversation history. You may delete individual conversations at any time.
Payment Records: Retained for seven (7) years as required for tax and accounting compliance.
Usage Analytics: Retained in aggregated, anonymized form indefinitely for service improvement. Individual-level usage data is retained for twenty-four (24) months.
Server Logs: Retained for ninety (90) days for security and debugging purposes.

5.2 Deletion

You may request deletion of your personal data at any time by contacting us at legal@aerocopilot.ai or through your account settings. We will process deletion requests within thirty (30) days, except where we are required by law to retain certain data.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher.
Encryption at Rest: Sensitive data stored in our databases is encrypted at rest using AES-256 or equivalent encryption.
Access Controls: Access to user data is restricted to authorized personnel on a need-to-know basis, with role-based access controls and multi-factor authentication.
Password Security: User passwords are hashed using industry-standard algorithms and are never stored in plaintext.
Infrastructure Security: Our hosting infrastructure implements network segmentation, intrusion detection, and regular security assessments.
Vendor Security: Third-party service providers are selected based on their security practices and are bound by contractual data protection obligations.

No method of transmission over the internet or electronic storage is one hundred percent (100%) secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Right to Access: You have the right to request a copy of the personal information we hold about you.
Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information.
Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as legal retention obligations).
Right to Portability: You have the right to request your personal information in a structured, commonly used, and machine-readable format. We provide data export functionality in your account settings for logbook and flight plan data.
Right to Opt Out: You have the right to opt out of the sale of your personal information (note: we do not sell personal information), targeted advertising, and profiling that produces legal or similarly significant effects.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
Right to Appeal: If we deny your privacy request, you have the right to appeal that decision by contacting us at legal@aerocopilot.ai.

To exercise any of these rights, contact us at legal@aerocopilot.ai. We will respond to verifiable requests within the timeframes required by applicable law (generally thirty (30) to forty-five (45) days). We may need to verify your identity before processing your request.

8. Aviation-Specific Data

AeroCopilot processes certain aviation-specific data that warrants special consideration due to its sensitivity and regulatory significance:

8.1 Pilot Certificate and Medical Information

Pilot certificate type, ratings, endorsements, and medical certificate status are used solely to personalize the Service (such as displaying relevant airspace and weather information based on your certificate level). This information is stored securely and is not shared with third parties except as described in this Privacy Policy.

8.2 Logbook Data

Digital logbook entries may contain personally identifiable information (names, dates, locations) as well as information relevant to regulatory compliance (currency requirements per 14 CFR 61.57, experience requirements per 14 CFR 61.129, etc.). We treat logbook data with heightened protection. Your logbook data is your property, and you may export it at any time in standard formats.

8.3 Flight Plans and Route Data

Flight planning data, including departure and destination airports, waypoints, routes, and associated preferences, may reveal your travel patterns and operational practices. This data is used solely to provide the Service and is not shared with third parties for marketing or tracking purposes.

8.4 Aircraft Information

Aircraft registration numbers, type designators, and performance data are used to provide personalized performance calculations and operational information. We recognize that aircraft registration numbers may be used to identify individual aircraft and treat this data accordingly.

9. AI Data Processing

9.1 How AI Conversations Are Processed

When you use AeroCopilot's AI assistant, your text inputs are transmitted to our AI model provider (currently Anthropic PBC) via their API for processing. The AI provider generates a response, which is returned to you through the Service. This transmission occurs over encrypted connections.

9.2 What Is Sent to the AI Provider

We send the following to the AI provider when you use AI features:

Your text query or prompt (the question you ask the AI)
Relevant aviation data context (such as current weather at a specified airport, NOTAMs, or other operational data needed to generate a useful response)
Conversation history within the current session for context continuity

We do NOT send the following to the AI provider:

Your name, email, or account credentials
Your pilot certificate number or medical information
Your payment or billing information
Your logbook entries (unless you specifically ask the AI about your logged data)

9.3 AI Provider Data Handling

Under our commercial agreement with Anthropic, API inputs and outputs are not used by Anthropic to train, improve, or fine-tune their AI models. Anthropic may retain API data for a limited period for trust and safety purposes (such as detecting abuse). For more information, refer to Anthropic's commercial API data usage policy.

9.4 No AI Training on User Data

Durante Tech does NOT use your data to train AI models. Your aviation data, conversations, flight plans, logbook entries, and all other personal information are never used to train, fine-tune, or improve any AI or machine learning model, whether operated by Durante Tech or any third party.

10. Children's Privacy

AeroCopilot is not directed at children under the age of thirteen (13). We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as promptly as possible. If you believe that a child under 13 has provided us with personal information, please contact us at legal@aerocopilot.ai.

For users between the ages of thirteen (13) and seventeen (17), parental or guardian consent may be required under certain state laws. We recommend that minors use the Service only with the supervision and consent of a parent or guardian.

11. International Users

AeroCopilot is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

11.1 European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the following additional provisions apply:

Legal Basis: We process your personal data on the basis of: (a) your consent; (b) the necessity to perform our contract with you (the Terms of Service); (c) our legitimate interests (such as service improvement and security); or (d) compliance with legal obligations.
Data Transfers: Transfers of personal data from the EEA, UK, or Switzerland to the United States are conducted under appropriate safeguards, including standard contractual clauses approved by the European Commission.
Additional Rights: You have the right to lodge a complaint with your local supervisory authority if you believe we have not adequately addressed your data protection concerns.
Data Protection Officer: You may contact us regarding data protection matters at legal@aerocopilot.ai.

12. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with specific rights regarding your personal information.

12.1 Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information as defined by the CCPA:

Identifiers: Name, email address, IP address, account ID
Personal information under Cal. Civ. Code 1798.80(e): Name, address (if provided for billing)
Commercial information: Subscription plan, payment history, transaction records
Internet or electronic network activity: Browsing history, search history, interaction with the Service
Geolocation data: Approximate location from IP address; precise location if you grant permission
Professional information: Pilot certificate type, ratings, endorsements, flight experience
Inferences: Preferences and characteristics derived from your use of the Service

12.2 Your California Rights

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we share personal information.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt Out of Sale/Sharing: We do NOT sell your personal information. We do NOT share your personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Information: To the extent we process sensitive personal information, you have the right to limit its use.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

12.3 Exercising Your Rights

To exercise your rights under the CCPA/CPRA, you may submit a verifiable request by emailing legal@aerocopilot.ai. We will respond within forty-five (45) days. You may also designate an authorized agent to make a request on your behalf.

12.4 Do Not Track

Our Service does not currently respond to "Do Not Track" signals. However, you may exercise your privacy choices as described in this Privacy Policy and our Cookie Policy.

12.5 Financial Incentives

We do not offer financial incentives or price differences in exchange for the retention or sale of personal information.

13. Additional State Privacy Rights

13.1 Virginia (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a portable copy of their personal data. You have the right to opt out of the processing of your personal data for targeted advertising, sale, or profiling. To exercise these rights, contact us at legal@aerocopilot.ai. If we deny your request, you have the right to appeal by contacting us, and if the appeal is denied, you may contact the Virginia Attorney General.

13.2 Colorado (CPA)

Colorado residents have similar rights to those described for Virginia residents, including access, correction, deletion, portability, and opt-out. You may exercise these rights by contacting us. If we deny your request, you may appeal, and if the appeal is denied, you may contact the Colorado Attorney General.

13.3 Connecticut (CTDPA)

Connecticut residents have the right to access, correct, delete, obtain a portable copy of, and opt out of the sale of personal data, targeted advertising, and profiling. Contact us to exercise these rights. Appeal rights are available if a request is denied.

13.4 Tennessee (TIPA)

Tennessee (TIPA, effective July 1, 2025). Tennessee residents have rights under the Tennessee Information Protection Act (TIPA) to access, correct, delete, obtain a portable copy of, and opt out of targeted advertising and the sale of personal data. Submit requests to legal@aerocopilot.ai. AeroCopilot's TIPA obligations apply only to the extent Durante Tech meets the entity threshold (175,000+ Tennessee consumers, or 25,000+ with 50%+ revenue from data sale).

13.5 Texas (TDPSA)

Texas (TDPSA, effective July 1, 2024). Texas residents have similar rights under the Texas Data Privacy and Security Act. Submit requests to legal@aerocopilot.ai.

13.6 Global Privacy Control

Global Privacy Control. AeroCopilot honors the Global Privacy Control (GPC) browser signal as a valid opt-out request under California CPRA Regulation §7025, the Colorado Privacy Act, the Connecticut Data Privacy Act, and other state privacy frameworks that recognize universal opt-out mechanisms. Technically, the Service detects the Sec-GPC: 1 HTTP header on inbound requests and applies the equivalent of a Do-Not-Sell preference for the session and any authenticated account.

13.7 Other States

As additional state privacy laws take effect, we will update this Privacy Policy to address the rights and obligations applicable to residents of those states. We are committed to respecting the privacy rights of all users regardless of location.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where practicable, provide you with notice via email or through the Service at least thirty (30) days before the changes take effect.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

15. Contact and Data Protection

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Durante Tech LLC
Data Protection Inquiries
Email: legal@aerocopilot.ai
Website: aerocopilot.ai

We aim to respond to all inquiries within thirty (30) days. For privacy-related complaints, if you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.