Privacy Policy

Hangar Flow ("we", "us", or "our") provides aircraft maintenance workflow software for shops, owners, and technicians. This Privacy Policy explains what information we collect from you, how we use it, how we store it, and how you can control or delete it.

By using Hangar Flow you agree to the practices described in this policy. If you don't agree with anything below, please stop using the service and contact us at [email protected].

1. Who this applies to

This policy covers anyone who visits hangarflow.com, signs up for an account, signs into our iOS (iPhone / iPad), macOS, Android, or Windows app, or has data stored on their behalf because their employer or shop owner added them as a tech.

2. What we collect

Account information

• Full name and email address, provided when you sign up or are invited by an admin.
• Shop / organization name, provided by the account owner at sign-up.
• Hashed password, we never see or store your password in plain text.
• Role (admin or tech), assigned by the account owner.

Workspace data you create or upload

• Aircraft records (tail number, model, drop-off date, RTS deadline, calendar color).
• Work logs, tasks, squawks, time entries, and parts inventory you record in the app.
• Maintenance manuals (PDF files) you upload to your shop's library.
• Reference codes, page indexes, and metadata extracted from imported work packages.

Billing information

• Payment processor customer id, subscription id, current plan, and subscription status.
• Billing email address (may be the same as your account email).
• We never see or store full credit card numbers, CVCs, or expiry dates, payment details are collected directly by our PCI-compliant payment processor.

Other information

• Messages you send through the contact form on hangarflow.com (name, email, shop, topic and message, plus the sending IP address for spam prevention).
• Photos you add, such as squawk photos, part-location photos and receipts.
• Payroll information your shop enters, such as pay rates and hour approvals (visible to your shop's admins).
• Your shop's customers' names and contact details as they appear on quotes and invoices.
• Tail numbers you look up, which we check against the public FAA aircraft registry.
• Device tokens used to send you app notifications, and crash and performance reports from the apps.

Automatically collected

• Server logs (timestamps, IP addresses, request paths) used for security and abuse prevention.
• Sync status, last-seen timestamps, and basic device fingerprints used to keep your data consistent across iPhone, iPad, Android tablet, Mac, Windows desktop, and the web.

3. How we use it

• To provide the service: storing your shop's data so it syncs across every device on every login.
• To process billing through our payment processor and keep your subscription status accurate.
• To send transactional emails: sign-in invites, password resets, payment receipts, and important account notifications.
• To respond to support requests you send us.
• To investigate abuse, fraud, or security incidents.

We do not sell your data, share it with advertisers, or use it to train any third-party machine-learning model. We do not run third-party trackers, ad pixels, or analytics services on hangarflow.com or in the apps.

4. Where it lives

Hangar Flow uses the following service providers to run the service. Each processes data under its own published terms and only to provide its service to us. They include Supabase (database, sign-in and server functions), Cloudflare (file storage), Stripe (payments), Resend and Google Workspace (email), Anthropic (AI), GoHighLevel (marketing website) and, only if you connect it, Intuit QuickBooks:

• Application backend (managed database, authentication, and serverless functions), hosts your account data, workspace records, and billing snapshot. US region.
• Object storage provider, stores PDF manuals you upload, scoped to your organization id.
• Payment processor, processes payments and stores billing information.
• Transactional email provider, sends transactional emails (sign-in invites, password resets).
• Marketing site host, hosts the marketing pages on hangarflow.com (does not have access to your in-app data).
• AI provider (Anthropic), powers Hangar AI features. Receives the text, photos and voice transcripts you submit to those features, plus the relevant passages from your shop's manuals and inventory, in order to return a result. US region.
• QuickBooks Online (Intuit), only if your shop connects it: we send the invoice, customer and line-item data you choose to sync, and store the connection tokens securely.
• Apple and Google push services, deliver app notifications to your devices using a device token.
• Website content delivery: pages on hangarflow.com load fonts from Google Fonts and a code library from jsDelivr. Those services receive your IP address and browser details when a page loads.

Hangar AI

Hangar AI features (for example Find Parts, manual search, troubleshooting, squawk triage, receipt reading, voice walk-throughs and draft logbook entries) send what you submit, which can include text, photos and voice transcripts, together with relevant passages from your shop's manuals and inventory, to our AI provider, Anthropic, through its API to generate a result. Under Anthropic's commercial terms that data is not used to train AI models; Anthropic may keep it for a limited time for safety and abuse monitoring. Every other part of Hangar Flow works without AI. See Anthropic's privacy policy at anthropic.com/legal/privacy.

5. How long we keep it

We keep your account data for as long as your subscription is active. If you cancel your subscription, your data remains in our database for 90 days in case you reactivate, after which it is permanently deleted unless you ask us to delete it sooner.

Manual PDF files you uploaded are deleted from our object storage within 30 days of subscription cancellation. Billing records held by our payment processor are retained according to their retention policy and applicable financial regulations (typically 7 years).

6. Your rights

You can:

• Access your data, everything in your workspace is visible inside the app.
• Update your data, edit any record from the iPhone, iPad, Android, Mac, Windows, or web app.
• Export your data, email [email protected] and we'll provide a JSON export of your workspace within 7 days.
• Delete your data: delete your account at hangarflow.com/delete-account (for a shop admin this also cancels the subscription and deletes the shop's data), or email us to request deletion.

7. Children

Hangar Flow is a B2B tool for aviation maintenance professionals. It is meant for adults, and we do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it.

8. Security

Your data is encrypted in transit (HTTPS/TLS) and at rest in our managed database and object storage. Sign-in tokens are stored in your device's secure credential storage where the platform provides one. Row-level security policies on every database table prevent cross-organization data leaks. We follow the principle of least privilege internally, the small Hangar Flow team uses scoped, audited access to investigate support issues.

9. Cookies and local storage

We keep this short because there is not much to say. Hangar Flow does not use advertising cookies, ad pixels or cross-site trackers.

What	Why	Type
Sign-in session (browser local storage)	Keeps you signed in to the dashboard and sign-up flow on hangarflow.com.	Essential
hf_consent (browser local storage)	Remembers the choice you made in the cookie notice so we do not ask again.	Essential
Marketing site host cookies	Set by the platform that serves hangarflow.com for security, load balancing and form spam protection.	Essential
Payment processor cookies	Set by our payment processor on its own checkout pages to prevent fraud.	Essential

Essential items cannot be switched off, because the site does not work without them. If we ever add optional analytics, they will only run after you choose Allow all in the cookie notice, and this table will be updated to list them. You can change your choice at any time from Cookie settings in the footer of any page, or clear it by deleting this site's data in your browser.

Your shop's data about others

For information your shop enters about its own employees and customers, your shop decides what to collect and why, and we process it on your shop's behalf to provide the Service.

Do Not Track

We do not respond to browser Do Not Track signals. We do not allow third parties to track you across other websites through hangarflow.com.

Nevada residents

We do not sell covered information as defined by Nevada law. Nevada residents may still send a request to opt out of any future sale to [email protected].

10. International users

Hangar Flow is operated from the United States. If you access the service from outside the US, your data is transferred to and processed in the US.

11. Changes

We may update this policy as the product evolves. The "Last updated" date at the top will reflect any change. If a change materially affects how we use your data, we will notify active customers by email before it takes effect.

12. Contact

Questions or concerns about this policy? Email [email protected] and a real human will respond. Hangar Flow is based in Las Vegas, Nevada, United States. If we learn of a security breach affecting your personal information, we will notify you as required by law.