Privacy Policy

Effective date: May 16, 2026

This Privacy Policy explains how FlyHighPlanes ("FlyHigh", "we", "us", "our") collects, uses, shares, stores, and protects personal information when you use our public website, account system, listings, dealership tools, wanted alerts, compare features, articles, marketplace messaging/contact forms, payment-fit estimates, account privacy tools, and subscription services.

FlyHigh is a Texas-based marketplace and advertising platform for aircraft, parts and engines, property, services, and dealership profiles. We do not process aircraft sales directly, but we do process account, listing, and payment information needed to operate the platform.

This policy applies to FlyHigh-branded domains, subdomains, and product pages that link to this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to information processed through FlyHigh websites, hosted tools, application flows, support channels, and related service providers that help us operate the platform.

It covers information submitted by visitors, registered users, sellers, buyers, dealers, brokers, property advertisers, service providers, staff accounts, and people who contact us or subscribe to updates.

2. Categories of Information We Collect

Depending on how you use FlyHigh, we may collect the following categories of information:

• Account information, such as your name, email address, password hash, profile image, continent or location selections, and account preferences.
• Agreement and consent evidence, such as terms acceptance state, acceptance timestamp, policy version, policy URL references, and a snapshot of the text you agreed to, plus request context fields like IP and browser user-agent.
• Listing and dealership information, such as aircraft details, parts or engine details, services, property details, description text, uploaded photos, documents, video links, Matterport links, dealership staff information, opening hours, and contact details.
• Communications data, such as messages submitted through support or contact forms, security notices, moderation communications, waitlist or launch communications, and email preference choices.
• Marketplace interaction logs, such as listing, dealership, or wanted enquiry sender details, recipient contact endpoint, message content, source page, interaction UUID, interaction type, and delivery outcome.
• Saved workflow data, such as wanted alerts, compare selections, likes, favorites, account-side management activity, and auto-saved listing/dealership/post/article/newsletter drafts.
• Billing and subscription data, such as plan selections, invoice references, subscription status, card brand and last four digits, billing contact data, promotions, grants, cancellations, and renewal state.
• Financing-estimate data, such as calculator inputs and outputs (for example location, income, debt, down payment, credit-range selection, target price, loan-term selection, estimated payment, and estimated affordability range).
• Property area-context and risk-estimate data, such as local benchmark values, map-derived area signals, and risk snapshot inputs/outputs used for informational display.
• Wanted-alert records, including listing kind, search criteria payload, criteria hash, alert naming, email endpoint, and alert source context.
• Remember-device and login continuity data, such as token selectors, token hashes, expiry timestamps, user-agent string, and IP address associated with a remembered device.
• Technical and device data, such as IP address, approximate location derived from network data, browser type, operating system, device identifiers, request logs, crash and abuse-prevention logs, and page interaction events.
• Security and fraud-prevention data, such as login attempts, verification codes, session identifiers, CSRF data, challenge-response tokens, and moderation risk indicators.
• Account deletion workflow state, such as request code, request timestamp, deletion deadline timestamp, and cancellation timestamp where applicable.
• Privacy report workflow state, such as report request time, completion status, expiry time, report reference, and download audit data.

3. Sources of Information

We collect information directly from you, automatically from your use of the site, and from service providers that help us run FlyHigh.

• Data you type into forms, onboarding flows, account settings, dealership pages, listing pages, payment forms, and contact forms.
• Data generated when you browse pages, create or edit listings, upload images or documents, save alerts, manage compare lists, reveal phone numbers, send marketplace enquiries, or administer dealership staff access.
• Data read from browser and device storage to maintain service behavior, such as session cookies, remember-device cookies, and preferred currency storage.
• Data received from vendors that help us process payments, prevent fraud, verify human activity, deliver email, host files, or secure the service.
• Consent-state and policy-acceptance events captured in onboarding and account flows, including context fields used for verification and legal proof.

4. How We Use Information

We use personal information to operate, secure, and improve FlyHigh. Our uses include:

• Creating and managing user accounts, logins, password resets, two-factor authentication, and dealership membership access.
• Publishing, moderating, displaying, and managing listings, dealership profiles, public seller pages, and related public marketplace content.
• Routing enquiries and contact requests to listing owners, dealership staff, and wanted request posters, and recording interaction events for spam, dispute, and abuse handling.
• Processing purchases, subscriptions, renewals, complimentary grants, invoices, and cancellation requests.
• Generating estimate-only payment and affordability outputs and, when requested by you, routing financing enquiries to selected independent lenders or finance partners.
• Displaying property area and risk context using third-party and public datasets for informational insight, not as guaranteed or definitive advice.
• Sending service communications, billing notices, moderation decisions, listing alerts, wanted-alert notifications, newsletters you request, and product updates.
• Maintaining legal agreement records and policy-acceptance traces for audit, enforcement, and compliance requirements.
• Preventing fraud, enforcing our terms and policies, investigating abuse, reviewing suspicious uploads, and protecting the security of the service.
• Applying anti-abuse controls such as CAPTCHA validation scores and challenge telemetry, and reviewing related logs for suspicious behavior.
• Checking candidate account passwords against known breach datasets using a k-anonymity range request model before account creation or password reset is accepted.
• Analyzing performance, debugging failures, improving page speed, improving search and filters, and understanding how people use FlyHigh.
• Complying with legal obligations, resolving disputes, responding to lawful requests, and protecting our rights, users, and the public.
• Enforcing account deletion request workflows, including request windows and status transitions between active, canceled, or expired states.

5. Public Information and Search Visibility

Listings, dealership pages, parts and engine listings, service listings, property listings, profile details you choose to expose, and article content may be visible to other users and to search engines once published.

You should not include personal information in public listing content unless you intend for that information to be visible to visitors and search engines.

6. Payments, Subscriptions, and Billing Data

Paid listing plans and dealership plans are processed through third-party payment providers, including Stripe. FlyHigh stores billing and subscription records needed to operate your service, including plan tier, status, renewal state, invoice references, cancellation state, and limited card metadata.

When checkout is used, billing contact information (for example billing name, billing email, billing address fields, city, region, postal code, and country) is submitted to payment providers as required to process and verify payment.

We do not intentionally store full payment card numbers or card security codes on FlyHigh servers. Payment processors may collect additional billing information under their own policies.

Financing calculator outputs on listing pages are estimate-only informational results and are not lending decisions. If you choose to proceed, relevant enquiry details may be shared with an independent lender or referral partner to continue that process.

7. Communications, Alerts, and Marketing

We send transactional and operational messages when necessary to run the service, including account, moderation, security, payment, and legal notices.

If you subscribe to newsletters, wanted alerts, launch updates, or similar optional communications, you can opt out using the unsubscribe method in the message or by contacting us. If we offer SMS or text messaging, we will use it only where you have provided the required consent.

8. Cookies, Analytics, and Similar Technologies

FlyHigh uses cookies and similar technologies to keep you signed in, remember settings, protect forms, operate maps and interactive tools, measure performance, and understand site usage.

Some features may not work properly if you disable cookies or related storage in your browser.

• Examples of first-party storage include the session cookie, remember-device cookie (if you choose that option), and preferred currency storage in cookie and localStorage.
• Remember-device cookies may persist for up to 30 days unless you sign out, clear cookies, or revoke remembered sessions.
• Third-party services we embed or run on page flows (for example payment, CAPTCHA, maps, and media providers) may also use cookies or similar technologies under their own policies.
• We do not currently run behavioral ad-targeting cookies on FlyHigh pages.

9. How We Share Information

We do not share personal information casually. We may share information in the following circumstances:

• With vendors that support hosting, file storage, payments, fraud prevention, maps, CAPTCHA, authentication, media embeds, and communications.
• With listing owners, dealership staff, or wanted request posters when you submit marketplace contact forms or reveal contact information in order to complete the requested interaction.
• With Stripe for payment processing and billing operations.
• With independent finance partners or lenders when you request financing follow-up through calculator or finance call-to-action workflows.
• With Google reCAPTCHA for abuse prevention and human verification.
• With mapping and location stack providers used on the site, such as OpenStreetMap, CARTO, and Leaflet delivery infrastructure.
• With embedded media providers, such as YouTube or Matterport, when you load media-enabled pages.
• With exchange-rate providers to support optional currency conversion displays on listing pages.
• With Have I Been Pwned k-anonymity range API when password breach screening is used (only a partial hash prefix is sent, not your raw password).
• With professional advisors, insurers, auditors, and legal counsel where reasonably necessary.
• With regulators, law enforcement, courts, or other authorities when required by law, subpoena, court order, or to protect rights, safety, or platform integrity.
• As part of a merger, financing, reorganization, sale of assets, or similar corporate transaction, subject to appropriate confidentiality measures.

10. Retention

We retain information for as long as reasonably necessary to provide the service, maintain records, resolve disputes, operate subscriptions, enforce agreements, comply with law, and protect the security and integrity of the platform.

Retention varies by data type. Public listing or dealership data, moderation history, billing records, and security logs may be retained longer than ordinary session data.

• Session cookies usually expire when your browser session ends.
• Remember-device tokens are configured to expire after up to 30 days unless removed sooner.
• When an account deletion is completed, the login profile is anonymized while billing, legal, tax, dispute, fraud-prevention, and operational records may remain linked to a secure account reference.
• Consent and deletion workflow records are typically retained for legal, security, and operational reasons and may remain associated with an anonymized account record after account-level closure.
• Autosaved draft records are retained while their workflow is active and may persist after completion for recovery, audit, moderation, or integrity checks.
• Contact interaction logs, abuse-prevention logs, and payment records may be retained after account closure where required for legal, contractual, accounting, fraud-prevention, or enforcement purposes.

11. Security and Incident Response

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication controls, environment-based secrets, validation controls, logging, and monitoring.

No system is perfectly secure. You are responsible for using a strong password, protecting your credentials, and notifying us promptly if you suspect unauthorized use of your account.

If we become aware of a security incident involving personal information, we will investigate it and provide notice where required by applicable law.

12. Privacy Rights and Choices

Depending on where you live and how the law applies to our business, you may have rights to request access, correction, deletion, portability, or restriction relating to your personal information.

Texas residents may have rights under applicable Texas law, including the Texas Data Privacy and Security Act where applicable. Requests may be submitted through our Contact Page or by emailing support@flyhighplanes.com.

Where required by law, California and other U.S. state residents may also have rights related to access, deletion, correction, portability, appeal, and limits on certain processing activities.

We may need to verify your identity before acting on a request. If we deny a request, you may request an internal review or appeal where applicable law provides that option.

• To submit a rights request, email us or use our Contact Page and include enough detail for us to verify your request and locate your records.
• Where applicable law sets response windows, we aim to respond within those windows and may extend once when permitted by law with notice to you.
• Where applicable law allows appeals, we provide a review path through our support channel and include escalation information in the appeal response when legally required.
• If relevant and requested, we can provide data tied to active account deletion requests, consent history references, and draft records where systems support retention and export controls.
• Privacy report downloads may require recent authentication because they can contain account, listing, dealership, billing, and notification records. If your session is stale, you may need to sign in again before downloading the report.
• We do not currently describe FlyHigh as selling personal information for money and we do not currently run third-party behavioral ad-targeting flows on the platform.
• If we later engage in targeted advertising, profiling, or other activities that trigger additional opt-out rights under applicable law, we will provide legally required controls before those practices begin.

12B. Browser Privacy Signals (DNT/GPC)

Some browsers transmit Do Not Track (DNT) and Global Privacy Control (GPC) signals.

Because FlyHigh does not currently operate third-party behavioral ad-targeting or personal-information sale flows, we do not presently treat DNT or GPC as a standalone universal request mechanism for all processing activity.

You can exercise privacy rights directly through the request methods in this policy. If our processing model changes and applicable law requires signal-based handling, we will update this policy and implement required controls.

13. Property and Fair Housing

FlyHigh includes a property category. We expect advertisers, brokers, and users of that category to comply with fair housing laws and related advertising rules.

We may review, remove, or restrict content that appears to express unlawful discriminatory preferences or that otherwise creates housing-law risk.

Category-specific operational standards are documented in the Property Compliance Policy.

13B. Aviation Compliance

For aviation listings and services, additional obligations are documented in the Aviation Compliance Policy.

14. Children

FlyHigh is intended for users age 18 and older. We do not knowingly provide account, paid service, or listing tools to children.

15. International Access

FlyHigh is operated from the United States. If you access the service from outside the United States, your information may be transferred to and processed in the United States and other jurisdictions where our service providers operate.

16. Third-Party Services and Links

FlyHigh may link to or embed third-party services, including maps, payment providers, CAPTCHA, and external video or media services. Those third parties have their own terms and privacy practices, and we are not responsible for them.

Current integrations can include providers such as Stripe, Google reCAPTCHA, OpenStreetMap, CARTO, Leaflet delivery infrastructure, exchange-rate API providers, YouTube, Matterport, and Have I Been Pwned API. Integrations may change as the platform evolves.

Property risk, area, and location-context displays may incorporate third-party/public data and modelled estimates. These displays are informational only, may not be current or complete, and should not be solely relied on for legal, financial, insurance, safety, or purchase decisions.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and update the effective date above. Continued use of FlyHigh after the effective date means you acknowledge the revised policy.

18. Contact Us

For privacy requests or questions, email support@flyhighplanes.com or use our Contact Page.

Your use of FlyHigh is also subject to our Terms & Conditions.

Version: 7.1