Privacy policy

This policy explains what personal information [pending: legal entity name] ("Direct2", "we", "us") collects through direct2.net and the Direct2 software, how we use it, and the choices you have. It covers two groups of people: visitors to our website, and the people who use Direct2 through an operator that subscribes to it.

Who is responsible for your information

For our website, sales and marketing, we decide how your information is used and are responsible for it.

For information inside an operator's Direct2 account (trips, crew records, maintenance records, safety reports), the operator is in charge of that information and we process it on their behalf, under our agreement with them. If you fly, maintain aircraft or work for an operator that uses Direct2, questions about your records should go to that operator first. We'll help them answer.

What we collect

When you visit the website or contact us

• What you give us in a form: name, work email, company, phone, role, fleet details and your message.
• Basic technical data: IP address, browser and device type, pages visited and the referring page. Analytics approach: [pending].
• Your emails and calls with our team.

When you use Direct2 through an operator

• Account details: name, email, phone, role and sign-in activity.
• Operational records the operator keeps in Direct2: trips, flight and duty times, training and currency, qualifications, maintenance sign-offs, and documents.
• Safety reports and FRATs. If an operator turns on confidential or anonymous reporting, the reporter's identity is protected as that setting describes, and Direct2 does not reveal it to the operator.
• Device data from the mobile apps needed to sync records and send notifications.
• An audit trail of who changed what and when, which compliance records require.

How we use it

• To provide, secure and support the software.
• To answer your questions, schedule demos and send resources you ask for.
• To send product and marketing email you can opt out of at any time.
• To improve the website and the software.
• To meet legal obligations and protect our rights.

We don't sell personal information, and we don't use the records in an operator's account for advertising.

Who we share it with

• Service providers that host, secure, email and support the service for us, under contracts that limit their use of the information. List of subprocessors: [pending].
• Integrations an operator chooses to connect. The operator controls those connections.
• Authorities when the law requires it. Operators, not Direct2, submit their own reports to the FAA.
• A buyer or successor, if our business is sold or reorganized.

How long we keep it

Operators set retention for their records, within the minimums their regulations require. When an operator leaves Direct2, they can export their data first. We then delete or return it as our agreement with them says. Website and sales records are kept for [pending].

Security

We encrypt data in transit and at rest, limit staff access, and log access to customer data. See our security page for detail, and our security disclosure policy to report a vulnerability.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to some uses. To make a request, email privacy@[pending]. If your information is held in an operator's account, we'll pass your request to that operator. State-specific disclosures: [pending].

Cookies

The website uses cookies needed for it to work, and [pending: analytics cookies, if any]. You can block cookies in your browser settings.

Children

Direct2 is a business service for aviation operators. It's not directed to children, and we don't knowingly collect their information.

Changes to this policy

If we make a material change, we'll update the date above and tell customers before it takes effect.

Contact

[pending: legal entity name]
[pending: mailing address]
privacy@[pending]