PRIVACY POLICY
Last Updated: December 23, 2024
1. Introduction
Crow Squared LLC ("we," "us," or "our") operates Flight Incident Files (the "Service"), a searchable archive of aviation accident and incident investigation reports sourced from publicly available National Transportation Safety Board (NTSB) records.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: When you create an account, we collect your email address and password. If you choose to sign up using Google OAuth, we receive your email address and basic profile information from Google.
- Payment Information: When you subscribe to our premium Investigator membership, payment information is collected and processed by our payment processor, Stripe. We do not store your complete credit card number on our servers.
- Promotional Codes: If you enter a signup code during registration, we record this code for promotional tracking purposes.
- Communications: When you contact us via email or our contact form, we collect the information you provide in those communications.
2.2 Information Collected Automatically
- Search Queries: We log search queries you perform on our Service, including the search terms, filters applied, number of results returned, and timestamps.
- Usage Data: We collect information about how you interact with the Service, including pages visited, features used (such as analytics dashboards and audio generation), credit usage, and saved views.
- Device and Connection Information: We automatically collect your IP address, browser type, user agent, operating system, and device information when you access our Service.
2.3 User-Generated Content
When you use your audio credits to generate audio narratives, these narratives are added to our community library and become available to other users. We track which user contributed each audio narrative for internal moderation and analytics purposes only; contributor identities are never publicly displayed.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your subscription payments and manage your account
- Track and manage your audio generation credits
- Respond to your comments, questions, and customer service requests
- Analyze usage patterns to improve our features and user experience
- Detect, prevent, and address technical issues and security threats
- Enforce our Terms of Service and protect our legal rights
- Comply with applicable laws and regulations
4. Information Sharing and Third-Party Services
We share information with third-party service providers who perform services on our behalf. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.1 Service Providers
- Supabase: We use Supabase for user authentication, database hosting, and file storage (including audio files). Your account data and usage information are stored on Supabase infrastructure.
- Stripe: We use Stripe to process subscription payments. When you provide payment information, it is transmitted directly to Stripe. Please review Stripe's privacy policy at stripe.com/privacy.
- Cloudflare Turnstile: We use Cloudflare Turnstile for bot protection during account registration. This service may collect device and browser information to verify you are human.
- Google: If you choose to sign in with Google, we receive basic profile information from Google. Google's privacy policy applies to information collected by Google.
- OpenAI: We use OpenAI services to power semantic search functionality. Search queries may be processed by OpenAI to generate search results.
- Google Gemini: We use Google Gemini AI to generate audio narratives from NTSB investigation reports. The report content is processed by Google Gemini to create narrative scripts.
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
4.3 Business Transfers
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
- Account Data: Retained until you delete your account or request deletion.
- Payment Records: Retained for seven (7) years for tax and legal compliance.
- Search Logs: Retained for up to two (2) years for analytics purposes.
- Audio Contributions: Audio narratives contributed to the community library are retained indefinitely as part of the shared archive.
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request that we correct inaccurate or incomplete personal information.
- Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
- Account Deletion: You may delete your account at any time. Note that audio narratives you have contributed to the community library will remain available but will be disassociated from your account.
- Subscription Management: You may cancel your subscription at any time through your account settings or the Stripe customer portal.
To exercise any of these rights, please contact us at support@crowsquared.com.
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL
- Secure password hashing
- Access controls limiting who can access personal information
- Regular security assessments
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
9. Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.
10. California Privacy Rights (CCPA)
If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA):
- Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
Do Not Sell My Personal Information: We do not sell personal information to third parties. We do not have actual knowledge that we sell personal information of minors under 16 years of age.
To exercise your CCPA rights, please contact us at support@crowsquared.com.
11. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.
For material changes, we will provide notice through the Service or by sending you an email. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: support@crowsquared.com
- Contact Form: Flight Incident Files Contact Page
- Company: Crow Squared LLC