Privacy Policy

This Privacy Policy explains how PilotWise (“we”, “us”) collects, uses and protects personal data when you use our platform. We are the data controller for the personal data described here. This is a template and should be reviewed by a qualified legal adviser before launch.

Data we collect

• Account data: name, email address and role (pilot, recruiter or administrator).
• Pilot profile data: base airport, nationality, right-to-work regions, licences, type ratings, hours, ICAO English level, medical class and expiry, availability, and uploaded credential documents.
• Recruiter data: company name, website, country, job title, contact details and what you recruit for.
• Usage data: sign-in timestamps and actions such as shortlisting and contact requests.

How we use your data

We use your data to operate the marketplace: to create and display verified pilot profiles, to enable approved recruiters to search and contact pilots, to vet recruiter accounts, and to keep the service secure. Our lawful bases include performance of a contract, our legitimate interests in operating the platform, and your consent where required.

Who can see your data

Pilot profile data is private by default and only visible to recruiters who have been approved by us, and only while your profile is published. Uploaded credential documents are never shared with recruiters — recruiters see only validity status (valid, expiring or expired). Administrators can access data to operate and moderate the service. We use Supabase (database, authentication and file storage) as a processor.

Data retention

We keep your data for as long as your account is active. You can delete your account at any time from your account settings, which permanently removes your profile and associated data.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. You can exercise many of these directly in the app, or by contacting us. You also have the right to complain to your local data protection authority.

Security

Access to data is enforced at the database level through row-level security, credential files are stored privately, and traffic is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your data.

Contact

For any privacy questions or to exercise your rights, please use our contact page.