Privacy Policy

Effective date: November 9, 2026

Flight Level 510 LLC ("FL510", "we", "us") rents aircraft under dry leases from Mather Airport (KMHR). This policy covers our public website at flightlevel510.com, the FL510 portal, and FL510's QuickBooks app, which connects the portal to our bookkeeping. The portal is used by our staff, renters, aircraft owners and flight instructors.

This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.

What we collect

When you contact us through the website

• The details you type into the contact form: your name, e-mail address, phone number, pilot certificate level, ratings, whether you agree to text messages, and your message.
• The form's message is sent to our mailbox by e-mail. It is not saved in the portal.

Your account

• Your name, e-mail address, phone number, mailing address, billing e-mail, date of birth and home airport.
• Emergency contact details, if you give them.
• Optional details you choose to add, such as company name, gender, social media links or a pilot association membership number. These stay private. The portal does not show them to other users.
• Your settings, such as calendar views and how you want to be notified.
• You sign in through Microsoft's sign-in service. FL510 does not see or store your password. Password resets and sign-in security settings are handled by Microsoft.

Your pilot qualifications and identity documents

• Pilot certificate details: certificate type and number, ratings, issue date and endorsements.
• Medical certificate class and dates, flight review dates, and recent flight experience.
• Photos or scans of your government ID (front and back) and proof of renter's insurance. You upload these so we can check that you are eligible to rent. On a phone, you can take the photo with your camera at the moment you upload it. The portal does not otherwise use your camera, and it does not use your device's location.
• Where they apply to you: driver's license or passport details, citizenship evidence, and security-awareness training records. Some of these came from records we copied from the current Flight Level 510 Scheduling System of Record (SSOR) (see "Information we receive from the SSOR").

If you are a flight instructor

• Your instructor certificate, medical, liability insurance and security training documents, which you upload for verification.
• Your instructor profile, availability and rates.

If you are an aircraft owner

• Your ownership details, your company, and the aircraft you place with FL510.

Flights and aircraft data

• Each FL510 aircraft carries a data device from Airbly. The device records engine and flight data for the aircraft: engine start and stop times, position, altitude, speed, aircraft attitude, landings and similar readings. Your lease explains how this device measures engine time.
• We also get the aircraft's ADS-B flight tracks (the position signals the aircraft broadcasts) from Plane Finder. We look these up by the aircraft's registration.
• We connect this aircraft data to the reservation and the pilot who flew it. That gives us the flight record for each flight.

Reservations, check-out and check-in

• Your reservations, including times, aircraft, instructor and planned route, and any request you post on the instructor job board.
• What you record at check-out and check-in: meter readings, oil added, fuel you bought (gallons and price), squawks you report, and notes.
• When you check out, the portal gives you a temporary code for the aircraft's lock box. We keep a record that a code was issued. We do not store the code itself in plain text.

Payments

• When you save a card, you enter it into a secure form run by our card processor, and you type your billing ZIP code into the portal. Your full card number and security code go straight to the processor. They never reach FL510's servers.
• When you save a card, we keep the processor's reference for it, the last digits of the card, its expiry date, and a record of the consent you gave when you saved it.
• We keep your invoices, payments and receipts.

Electronic signatures and acknowledgments

• When you accept your lease or a check-out acknowledgment, we keep an exact copy of what you were shown. We keep a fingerprint (a hash) of it, the time, your name and your account.
• If you draw your signature in the portal, we keep the signature image, the time, your IP address and your browser type.
• Signature evidence is also sealed by our affiliate's e-signature service (see "Who we share it with").

Messages

• Messages you send or receive in the portal, for example with FL510 staff or an instructor.
• A record of the notices we send you.

Records we read from QuickBooks

• If you are a customer in the QuickBooks company where our books are kept, FL510 reads the customer record QuickBooks holds for you and keeps only your name and id from it. See "Who we share it with" for what FL510 reads from QuickBooks and why.

Technical information

• Our servers record technical details of each request, such as the page asked for, the time, errors and response times. We use Microsoft Application Insights for this. These details can include your IP address, or an approximate location worked out from it, and, when you send the contact form, your name.
• The cookies and browser storage described below.

Why we use it

• To run rentals: to check that you are eligible, take bookings, manage check-out and check-in, issue lock-box codes, and keep the aircraft available and maintained.
• For safety and aviation records: to keep flight, engine-time and maintenance records for each aircraft, and to follow up on squawks.
• For billing: to price flights under your lease, issue invoices, take payments and handle disputes.
• For bookkeeping and taxes: to keep accurate business records.
• To talk with you: to answer your questions, send notices about your account, reservations and documents, and deliver portal messages.
• To protect the service: to keep accounts secure, stop spam and abuse, and find and fix problems.

Who we share it with

We share information only with the services and people listed below, and only what each one needs.

• Our card processor, CardPointe (Fiserv). When you save a card or pay in the portal, it receives your card details directly from the secure form. When you save a card, FL510 also sends it your name and the billing ZIP code you enter, so it can check the card. It stores your card for later payments and processes the charges.
• QuickBooks Online (Intuit), our bookkeeping system. FL510's QuickBooks app connects the portal to the QuickBooks company where our books are kept. Our affiliate manages that QuickBooks company for its group of companies, so the company also holds other businesses' records.
  • What FL510 sends: each invoice's number, its dates and payment terms, and its lines (the item, quantity, rate, amount and the line's own description, and the aircraft's registration on aircraft lines), which add up to the invoice total, with a note carrying FL510's own invoice reference and billing period. The invoice is linked to the customer record that already exists in QuickBooks. FL510 does not send your name or e-mail address with it.
  • When FL510 records payments in QuickBooks, it will also send each payment's amount, its date, the invoice it pays and the card processor's transaction reference. QuickBooks never receives your card number.
  • FL510 does not send QuickBooks your documents, your pilot records, your date of birth, your phone number, your mailing address or your messages.
  • What FL510 reads from QuickBooks: each customer, item, class, location and account record in the QuickBooks company, in full, including any contact details QuickBooks holds for a customer. What FL510 keeps: only their names and ids, the ids of the invoices FL510 creates there, and the status of each send. This covers every customer in that QuickBooks company, not only FL510's renters. FL510 stores no card data and no bank data from QuickBooks.
  • FL510 uses QuickBooks data only to keep its own books and to show sync status to FL510 staff. We never sell QuickBooks data, and we do not share it with anyone else.
  • We keep the names, ids and send status we read from QuickBooks while our books are kept in QuickBooks, then as long as our accounting and tax duties require. Then we delete them. If the connection ends, FL510 stops reading from QuickBooks.
• Our affiliate's e-signature service. It seals signed records and keeps the sealed evidence. For a lease or check-out acknowledgment it receives your name and account reference, the time you accepted, for a check-out a reference to the reservation, a short description of what you accepted, and the fingerprint of the exact text. It does not receive the full text. For a guardian guaranty (see "Children and young pilots") it receives the guardian's name, e-mail address and relationship to the renter, and runs the signing and identity check for the guardian.
• Aircraft data providers (Airbly and Plane Finder). They supply data about our aircraft. We ask Plane Finder for flight tracks using only the aircraft's registration. We do not send your account details to either provider.
• Our lock-box provider, which runs the aircraft lock boxes. When you check out, we ask it for a temporary code for that lock box and time window. We do not send it your name.
• Microsoft, which provides:
  • our hosting (Microsoft Azure; our web application runs in Azure's West US 2 region, in the United States);
  • sign-in (Microsoft Entra);
  • e-mail (Microsoft 365), for contact-form messages and the notices we send you. Notices about new portal messages say only that a message is waiting. They do not include the message itself;
  • document storage (Microsoft SharePoint), for the documents you upload and your signed agreements.
• Text messages. The portal does not send text messages. If you tick the text-message box on the contact form, our staff may reply to you by text message. If the portal starts sending texts, we will use a text-message provider and text you only if you have agreed to it.
• A spam-check service, on the contact form only. See "Cookies and similar tools".
• Flight instructors and aircraft owners in the portal. An instructor assigned to your reservation sees the reservation details needed to fly with you. If you post a request on the instructor job board, FL510's flight instructors see your name and the request's details (the booking's time, aircraft and location, the aircraft, home base and timeframe you prefer, and your notes). They contact you through the portal, and your e-mail address and phone number stay hidden. If you are a flight instructor, renters see your name and availability when they book. Aircraft owners see flight and maintenance summaries for their own aircraft. Renter names are not shown to them.
• Our affiliate. From the portal, it receives business totals only, such as monthly revenue, fleet hours and the number of upcoming reservations. These totals carry no names or individual details. It also manages the QuickBooks company described above.
• Our aviation insurer, when an incident or a claim involves you or an FL510 aircraft, and then only what the claim needs.
• A new owner of our business. If all or part of FL510's business is sold or transferred, your information may be transferred with it.
• When the law requires it. We may share information when the law requires it, for example with the FAA or NTSB, a court, or law enforcement, or to protect people's safety.

We do not sell your personal information. We do not share it for advertising.

Information we receive from the SSOR. We have used the current Flight Level 510 Scheduling System of Record (SSOR) for scheduling and billing, and we are moving that work into the FL510 portal. We copied account, certificate, reservation and billing records from the SSOR into the portal, and until the move is finished the portal may also copy reservations from the SSOR's schedule as they are made. The SSOR is run by a separate company. That company's own policy covers what you gave it directly.

Cookies and similar tools

We use only the cookies the site needs to work. We do not use advertising or tracking cookies.

• Sign-in cookie. It keeps you signed in. It lasts up to 12 hours and renews while you use the portal. While you sign in, the site also sets short-lived cookies that let the sign-in finish safely, and Microsoft's sign-in pages set their own cookies.
• Security (anti-forgery) cookie. It protects forms from being submitted by another website.
• Short-lived message cookie. It carries a one-time message, such as "Your message has been sent", to the next page. It is then cleared.
• Server cookie from our host. Microsoft Azure, which hosts the site, may set a cookie that sends your visits to the same server. It holds no personal information.
• Browser storage. The portal remembers a few display choices in your browser, such as light or dark theme and which sections you left open. This stays on your device.
• Usage telemetry. Microsoft Application Insights records technical details on our servers. It sets no cookies in your browser.
• Spam check (contact form only). To stop spam, the contact page loads a spam-check service. When you send the form, we send that service a token from the form and your IP address so it can check the request came from a person. The service may set its own cookies while the contact page is open, and its own privacy policy and terms apply to the check.
• Other companies. Apart from the spam check on the contact page, we do not let other companies collect information through our site about what you do here over time or on other websites.
• Do Not Track. We do not track you across other websites, so our site works the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal.
• Links. Our social media links take you to those sites. Their own policies apply there.

How long we keep it

We keep each kind of information only as long as we need it, and then we delete it or de-identify it. Where we have not set a fixed period, the practice below is the rule we follow. The portal does not delete records on its own: apart from technical logs, which Microsoft deletes automatically, our staff carry out the deletions below by hand.

• Account information (your profile, optional details, settings and emergency contact, and an instructor's profile, availability and rates), invoices, payments, receipts, saved-card references and card consent records are kept while your account is open, then as long as billing, disputes, tax and accounting duties require. Then we delete them or de-identify them.
• Pilot qualifications and identity documents (certificate and medical details, government ID images, insurance documents, license and passport details, citizenship evidence and training records), and instructor verification documents, are kept only as long as we need them to check eligibility and meet our obligations. Then we delete them.
• Aircraft owner details are kept while your aircraft is placed with FL510, then as long as our agreement and aircraft-records duties require. Then we delete them or de-identify them.
• Flight, engine-time and maintenance records, including the aircraft data from Airbly and Plane Finder, your reservations and job-board requests, check-out and check-in records, and the record that a lock-box code was issued, are kept as long as the law and the aircraft's records require. Some aircraft records go with the aircraft if it is sold. When those duties end, we delete or de-identify the parts that identify you.
• Signed records and signature evidence, including a guardian guaranty and the guardian's details, are kept with no set end date for now, while we settle a records schedule with counsel. When the schedule is set, we will delete or de-identify what it no longer requires, and we will update this policy.
• Portal messages and the record of notices are kept while your account is open, then as long as we need them to answer questions or disputes about them. Then we delete them.
• Contact-form e-mails are kept in our mailbox while we answer you, then as long as our business records require. Then we delete them.
• Records we read from QuickBooks (names, ids and send status) are kept while our books are kept in QuickBooks, then as long as our accounting and tax duties require. Then we delete them.
• Technical logs are kept for a limited period, and then Microsoft Application Insights deletes them automatically.
• Cookies and browser storage last as described under "Cookies and similar tools". You can clear them in your browser at any time.

Your choices and rights

• See your information. Your profile, documents, flights and signed records are in the portal. You can download your own copy of a signed record from the Documents page.
• Correct it. You can edit your profile in the portal. For anything you cannot edit, contact us.
• Close your account. Contact us and we will close it: we turn off your sign-in, and our staff then delete or de-identify, by hand, what we no longer need. We keep what the law or our aircraft records require, and what we need for billing or disputes.
• Notices. You can change how we notify you in the portal's notification settings. Some account notices are required while your account is open.
• California residents. If you live in California, you may have the right to know what personal information we hold about you, to get a copy, to ask us to correct or delete it, and to limit how we use sensitive information. Sensitive information here means things like your ID documents, license and passport numbers, and citizenship evidence. We use it only to run your rentals and meet our legal obligations. We will not treat you differently for using these rights. To make a request, contact us. We will check your identity before acting. You may use an authorized agent.

Children and young pilots

• Our website and portal are not meant for children under 13. We do not knowingly collect information from them. If we learn that we have, our staff will delete it.
• A renter under 18 may have an account, but cannot book an aircraft until a parent or legal guardian signs a guardian guaranty. The guardian signs through our affiliate's e-signature service and verifies their identity with a government ID. We collect the guardian's name, e-mail address and relationship to the renter.

How we protect it

• The site and portal use encrypted connections (HTTPS) only.
• Staff can see only what their role in the portal allows.
• Staff sign in with their Microsoft work accounts.
• Card numbers never reach our servers.
• Lock-box codes and some other sensitive values are stored in protected (encrypted) form.
• Our data is held in Microsoft's cloud services.
• No system is perfectly secure. If we learn of a breach that affects you, we will tell you as the law requires.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change matters to you, we will also tell you in the portal or by e-mail.

Contact us

Questions or requests about your privacy: e-mail info@flightlevel510.com.