Who we are
Charter Ops LLC ("CharterOps," "we," or "us") provides the CharterOps website, workspace and API. This policy explains how we handle personal information when you visit, use the service or contact us.
Organizations control the client and trip information they put in their workspace. We process those records to provide the service for them. If a broker or operator entered your information, contact that organization first about its use of your records.
Information we handle
Account and business details include your name, email, profile image, company information, membership, permissions and subscription details. Workspace records can include client contacts, passenger and itinerary details, preferences, messages, quotes, bookings, aircraft records and files you upload.
We receive the information you submit, information provided by your organization or people you work with, and public aviation records from sources such as the FAA and OurAirports. We also process support messages, request and device information, IP addresses, usage counts and operational logs.
How we use information
We use information to sign you in, run your workspace, share records as directed, process subscriptions, deliver messages, answer support requests and maintain the service. Usage and security information help us enforce limits, investigate problems and prevent abuse.
Where applicable law requires a legal basis, we rely on performing our agreements, legitimate interests in operating and protecting the service, legal obligations, or your consent for activities that require it.
Services we use
Google Cloud provides hosting, storage and infrastructure. Stripe handles checkout, payment methods and billing when payments are enabled; CharterOps receives subscription and transaction details, not full payment card numbers. Mailgun delivers account and support emails and, when enabled, customer campaigns.
When you use Paste a request, the text you submit goes to Google’s Gemini API to extract trip details. CharterOps saves that text with the request only when you create it. Address suggestions send the text you type in the address search to Google Places. Optional Google sign-in uses Google to verify your identity. Enabled aircraft-position features query FlightAware.
These services receive the information needed for the feature you use and process it under their applicable terms and data arrangements. Availability depends on which features are connected.
Browser storage and email
The dashboard uses browser storage to keep you signed in, remember preferences and save local demo data. Demo records are fictional and stay in your browser. Clearing browser storage can sign you out and remove those preferences and demo changes.
We do not add advertising cookies or use private workspace records for targeted advertising. Campaign emails do not use tracking pixels. We record delivery events, bounces, complaints, unsubscribe choices and requests or bookings made through campaign links. Use the unsubscribe link to stop that organization’s marketing emails; essential account messages may still be sent.
Storage and retention
We keep information for as long as needed to provide the service, maintain records, resolve disputes and meet legal or security requirements. The period depends on the record, your account status and those requirements. Closing a subscription does not itself delete workspace data.
Account and organization deletion tools start an erasure process. Deletion may take time, and some information may remain in backups, provider records or records we must retain. We cannot remove copies that recipients have saved independently. Information may be processed in the United States or other countries where our providers operate, subject to applicable transfer requirements.
Your choices and rights
You can update your profile, manage available account settings and ask your organization’s administrator about workspace access or corrections. You can also contact us to request access, a copy, correction or deletion of your personal information.
Depending on your location and applicable law, you may have rights to restrict or object to processing, withdraw consent, receive portable data or complain to a data protection authority. We may need to verify your identity and authority before acting. We respond under applicable law, and exercising a privacy right will not result in unlawful discrimination.
Security
We use access controls, scoped API keys and other safeguards to protect information. No service or transmission is completely secure. Keep sign-in codes and API keys private, give members only the access they need, and contact us if you suspect unauthorized access.
Children
CharterOps is a business service and is not directed to children under 13. Organizations are responsible for having the authority to provide passenger information, including information about children. Contact us if you believe a child has provided account information directly.
Updates and contact
We update this policy as the service or our practices change and revise the date above. We provide additional notice or request consent when required by law. Use the contact link below for privacy questions or requests, and include the account or organization involved without sending credentials or sensitive passenger records.