Privacy Policy
Last updated: May 26, 2026
This policy describes how myAviationTools ("we", operated by SynthaSkill LLC) collects, uses, and protects information when you use the Service.
1. What we collect
- Account info: name, email, hashed password, profile photo if provided.
- Professional profile: FAA certificate type and number, ratings, role (mechanic / pilot / employer), and any other profile data you choose to provide.
- Usage telemetry: page loads, errors (via Sentry), feature usage. No third-party advertising trackers.
- Payment info: handled by Stripe; we receive a Stripe customer/subscription ID, never your card number.
2. Why we collect it
- To provide the Service you signed up for.
- To enable cross-app SSO across the myAviationTools ecosystem.
- To bill you for paid plans.
- To diagnose errors and improve the Service.
- To respond to your support requests.
3. Cross-app data sharing
Your account identity (name, email, role, certificate status) is shared across connected apps within the myAviationTools platform (MyAviJobs, Logbook, Marketplace, Hub, Blockchain Explorer) solely to provide a seamless single sign-on experience. Each connected app receives only the fields it needs to function. We do not sell this data to third parties.
4. Where data lives
Production data is hosted in the European Union (Hetzner FSN1-DC11, Helsinki, Finland) on encrypted disks. Backups are encrypted with age (X25519) and replicated to a Hetzner Storage Box in the same region. We never sell or rent your data.
5. Sharing
We share data only with:
- Stripe (payment processing — PCI-compliant)
- Sentry (error tracking — error metadata only)
- Better Auth (session management — open source, self-hosted)
- Resend (transactional email — opt-in only)
- Law enforcement when compelled by valid legal process.
We never sell data to advertisers or data brokers.
6. Your rights (GDPR / CCPA)
- Access: Export your data from Settings → Export.
- Correction: Edit your profile and account details directly in the app.
- Deletion: Settings → Delete account triggers a 30-day grace period, then hard purge across all connected apps.
- Portability: JSON export available on request.
- Object / Restrict: Email [email protected].
7. Cookies
We use only essential cookies for authentication (Better Auth session) and an opt-in analytics cookie if you accept it on the banner. See our Cookie Policy for the full list.
8. Children
myAviationTools is not directed at users under 18. We do not knowingly collect data from minors.
9. Security
Passwords are hashed via Better Auth's default algorithm (scrypt at time of writing). Sessions use HttpOnly + Secure + SameSite=Lax cookies. We enable TLS 1.3 on all endpoints with HSTS.
10. Changes
Material changes will be announced via in-app notification and email at least 30 days before they take effect.
11. Contact
Data Protection Officer: [email protected].