Privacy Policy

Sage Cactus Works LLC, doing business as Flight Deck ("we," "us," or "our"), operates the honorflightdeck.com platform. This Privacy Policy explains how we collect, use, and protect information when you use our service.

1. Information We Collect

Account information: When a hub administrator signs up, we collect their name, email address, password, and hub name.

Veteran and guardian data: Hub administrators and staff enter information about veterans and guardians, which may include names, contact details, dates of birth, military service history, and accessibility/logistics information relevant to trip planning.

Payment information: If you subscribe, payment details are collected and processed by Stripe, Inc. We do not store credit card numbers on our servers.

2. Accessibility and Logistics Data

Some data fields capture accessibility needs (mobility aids, dietary requirements, medical considerations) relevant to safe trip logistics. This information is used solely for flight planning and participant safety. It is not medical data in the clinical sense and is not shared with medical providers, insurers, or any third party.

3. How We Use Information

• To provide and operate the Flight Deck platform
• To manage hub accounts and subscriptions
• To send transactional emails (application confirmations, status notifications)
• To provide customer support
• To improve the service and fix bugs

We do not sell, rent, or share personal information with third parties for marketing purposes.

4. Database Isolation

Each hub's data is stored in a separate, isolated database. Hub administrators can only access their own hub's data. No hub can view, query, or access another hub's information. Platform administrators have access only for technical support and maintenance purposes.

5. Data Ownership

Your hub's data belongs to your organization. You may export all veteran and guardian data as CSV files at any time. Upon cancellation, you will have the opportunity to export your data before it is deleted.

6. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing. Stripe's privacy policy applies to payment data. See stripe.com/privacy.
• Email service provider: Transactional email delivery. We share only the minimum information needed to deliver emails (recipient address, email content).

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), hashed passwords, role-based access control, and regular security updates. While no system is 100% secure, we take reasonable measures to protect your data.

8. Data Retention

We retain hub data for the duration of an active subscription. After cancellation, data is retained in read-only state for 90 days to allow reactivation, after which it is permanently deleted.

9. Data Deletion

Hub administrators may request deletion of their hub and all associated data at any time by contacting [email protected]. We will process deletion requests within 30 days.

10. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics services.

11. Children's Privacy

Flight Deck is not directed at individuals under 18. We do not knowingly collect information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify hub administrators by email of any material changes. Continued use of the service after notification constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at [email protected].