Privacy Policy

Last updated: April 9, 2026

Hangar Flow ("we", "us", or "our") provides aircraft maintenance workflow software for shops, owners, and technicians. This Privacy Policy explains what information we collect from you, how we use it, how we store it, and how you can control or delete it.

By using Hangar Flow you agree to the practices described in this policy. If you don't agree with anything below, please stop using the service and contact us at [email protected].

1. Who this applies to

This policy covers anyone who visits hangarflow.com, signs up for an account, signs into our iPhone or macOS app, or has data stored on their behalf because their employer or shop owner added them as a tech.

2. What we collect

Account information

• Full name and email address — provided when you sign up or are invited by an admin.
• Shop / organization name — provided by the account owner at sign-up.
• Hashed password — we never see or store your password in plain text.
• Role (admin or tech) — assigned by the account owner.

Workspace data you create or upload

• Aircraft records (tail number, model, drop-off date, RTS deadline, calendar color).
• Work logs, tasks, squawks, time entries, and parts inventory you record in the app.
• Maintenance manuals (PDF files) you upload to your shop's library.
• Reference codes, page indexes, and metadata extracted from imported work packages.

Billing information

• Stripe customer id, subscription id, current plan, and subscription status.
• Billing email address (may be the same as your account email).
• We never see or store full credit card numbers, CVCs, or expiry dates — payment details are collected directly by Stripe on Stripe's PCI-compliant checkout pages.

Automatically collected

• Server logs (timestamps, IP addresses, request paths) used for security and abuse prevention.
• Sync status, last-seen timestamps, and basic device fingerprints used to keep your data consistent across iPhone, Mac, and the web.

3. How we use it

• To provide the service: storing your shop's data so it syncs across every device on every login.
• To process billing through Stripe and keep your subscription status accurate.
• To send transactional emails: sign-in invites, password resets, payment receipts, and important account notifications.
• To respond to support requests you send us.
• To investigate abuse, fraud, or security incidents.

We do not sell your data, share it with advertisers, or use it to train any third-party machine-learning model. We do not run third-party trackers, ad pixels, or analytics that ship your data outside our subprocessors listed below.

4. Where it lives

Hangar Flow uses the following subprocessors to run the service. All of them are bound by their own data-processing agreements with us:

• Supabase (Postgres database + authentication + edge functions) — hosts your account data, workspace records, and billing snapshot. US region.
• Cloudflare R2 — stores PDF manuals you upload, scoped to your organization id.
• Stripe — processes payments and stores billing information.
• Resend — sends transactional emails (sign-in invites, password resets).
• GoHighLevel — hosts the marketing pages on hangarflow.com (does not have access to your in-app data).

5. How long we keep it

We keep your account data for as long as your subscription is active. If you cancel your subscription, your data remains in our database for 90 days in case you reactivate, after which it is permanently deleted unless you ask us to delete it sooner.

Manual PDF files you uploaded are deleted from Cloudflare R2 within 30 days of subscription cancellation. Stripe billing records are retained according to Stripe's retention policy and applicable financial regulations (typically 7 years).

6. Your rights

You can:

• Access your data — everything in your workspace is visible inside the app.
• Update your data — edit any record from the iPhone, macOS, or web app.
• Export your data — email [email protected] and we'll provide a JSON export of your workspace within 7 days.
• Delete your data — cancel your subscription from the dashboard's Plan & Billing card, or email us to request immediate deletion.

7. Children

Hangar Flow is a B2B tool for aviation maintenance professionals. We do not knowingly collect data from anyone under 13. If you believe a minor has created an account, please contact us and we will delete it.

8. Security

Your data is encrypted in transit (HTTPS/TLS) and at rest (Supabase + Cloudflare R2). Authentication tokens are stored in your device keychain. Row-level security policies on every Supabase table prevent cross-organization data leaks. We follow the principle of least privilege internally — the small Hangar Flow team uses scoped, audited access to investigate support issues.

9. International users

Hangar Flow is operated from the United States. If you access the service from outside the US, your data is transferred to and processed in the US.

10. Changes

We may update this policy as the product evolves. The "Last updated" date at the top will reflect any change. If a change materially affects how we use your data, we will notify active customers by email before it takes effect.

11. Contact

Questions or concerns about this policy? Email [email protected] and a real human will respond.