HangarFile (“we,” “us”) provides a hosted digital aircraft logbook and compliance-tracking service. This policy explains what information we collect, why, and what control you have over it.

Account information

When you create an account we store your email address and a securely hashed password. We use your email to send account-related notifications (compliance alerts, billing receipts, password resets) — never to send marketing you didn’t ask for.

Aircraft and logbook data

Logbook photographs, transcribed entries, maintenance records, and any other aircraft data you add belong to you. We store it to provide the service — searching, tracking compliance, generating exports — and don’t use it for any other purpose, including training AI models.

AI processing

AI transcription and Ask Your Logbook send the relevant text or image to Anthropic’s API for processing:

• Own Key plan: requests use the Anthropic API key you provide. That usage is subject to Anthropic’s own terms and privacy policy for your account with them.
• Platform Key plan: requests use our Anthropic API key on your behalf, subject to a monthly usage allowance.

In both cases, nothing is sent to Anthropic until you initiate an AI action (photographing a page, asking a question, running an AD search).

Billing

Subscription payments are processed by Stripe. We do not receive or store your full card number — Stripe handles that under its own PCI-compliant infrastructure and privacy policy.

Compliance data sources

AD compliance search queries both the Federal Register and the FAA’s Dynamic Regulatory System — both public government data sources. No personal or aircraft-identifying data is sent to these sources as part of a search.

Sharing and collaborators

Any sharing with mechanics, co-owners, or buyers — including public share links — is initiated and controlled by you. You can revoke access at any time.

Retention and deletion

You can export your data (printable logbook or full data-and-photo archive) at any time. If you close your account, we delete your data within 30 days except where retention is required for billing records or legal compliance.

Security

We use industry-standard measures to protect your data in transit and at rest, and limit internal access to what’s needed to operate and support the service. No online service can guarantee absolute security, but we treat your records with the same care we’d want for our own.

Changes to this policy

If we make material changes, we’ll notify account holders by email before they take effect.

Contact

Questions about this policy or your data: [email protected].