Privacy policy

Last updated: August 9, 2026 · Applies to Winglocker

1. Overview

This policy explains what information Winglocker collects, how we use it, and the choices you have. We build a compliance document product for business aviation — we are not in the business of selling personal data.

2. Information we collect

  • Account data: name, email, password (hashed by our auth provider), organization details.
  • Compliance content you upload: certificates, D085s, related metadata (dates, aircraft tails, FAA codes).
  • Request workflow data: named insured details, certificate holder addresses, delivery emails you choose to send.
  • Technical logs: IP address, browser type, approximate timestamps, and product usage events needed to secure and operate the service.

3. How we use information

We use data to provide the product (accounts, document storage, public links, signed downloads, emails you trigger), to prevent abuse, to improve reliability, and to communicate about the service. We may use subprocessors for hosting, authentication, file storage, and email delivery (for example cloud infrastructure and transactional email).

4. Sharing and public links

When you publish a public compliance profile or send a link, the documents and fields you mark as public can be viewed by anyone with the link. Short-lived signed download URLs are used so files are not openly listed. Do not publish documents you are not permitted to share.

5. Retention

We retain account and document data while your organization is active. You may delete documents or close an organization; residual backups and audit logs may persist for a limited period for security and legal compliance.

6. Security

We use industry-standard controls including encrypted transport (HTTPS), access controls, and private storage buckets. No method of transmission or storage is 100% secure.

7. Your choices

You can update organization profile fields, unpublish public links, and delete documents you control. Contact us to request account closure or data export where required by law.

8. Children

Winglocker is a business service and is not directed to children under 16.

9. Contact

Privacy questions: hello@winglocker.io.