Privacy Policy

OneSource is used by flying clubs, flight schools and similar organizations to run their membership and their aircraft. Most of what we hold, we hold because an organization asked you for it.

Your organization decides what to ask. It builds its own application form, so two organizations using OneSource may collect quite different things. The list below is what the product is capable of collecting, and what a typical membership application asks for today.

• Who you are: name, email address, mobile, home and work phone numbers, and your date of birth.
• Where you live: street address, city, state and postal code.
• Work: your employer and occupation.
• Flying: certificate level, certificate number, ratings, flight review date, total hours, night hours, instrument hours, complex hours, aircraft types flown, and the kind of flying you do.
• Medical: your medical class and the date of your last medical.
• History an organization may ask about: whether you have been involved in an accident or incident and the details, and whether you have been subject to an FAA enforcement action and the details.
• Documents you upload: images or scans of certificates, medicals and similar records, and the expiry dates recorded from them.
• Why you are applying: why you want to join, who referred you, how you heard about the organization, and other organizations or operators you have flown with.
• Identity and emergency details your organization may record: driver's license number and expiry, passport number, country and expiry, and an emergency contact name, relationship and phone number.
• Activity in the product: your bookings, flight records, squawks, and money owed and paid.
• Notes your organization writes about you. Administrators can add notes to your record, and those notes are kept.
• Technical information: we record the network address (IP address) your application or contact message was sent from, which we use to limit abuse of those forms.

We do not ask for your Social Security number, and OneSource does not run credit checks or background checks.

Comment and note fields are open. Whatever an administrator chooses to write in one is held as written, and we do not control what goes into them.

Your organization can see it. The people who run the organization you belong to, or applied to, can see your record. Which of them can see the more sensitive parts, such as your date of birth, your address and your uploaded documents, is controlled by the roles that organization gives its officers/administrators.

Other members mostly cannot. Other members see only what your organization publishes in its member directory, and your organization decides what that directory shows.

SyncEtc runs the platform. A small number of our staff can access data when we are asked to help with a problem, or where we must to keep the service running.

We do not sell your data. We do not sell or rent personal information to anyone, and we do not use it to advertise to you.

Your organization's data is stored in the United States, in Amazon Web Services' US East (Northern Virginia) region.

When you leave an organization, it stops being able to see the details you share with the organizations you belong to now. But it can still put your membership back on its own roster without asking you, and if it does, it can see your address, your date of birth, your licenses and medical certificates, and the documents you have uploaded. It cannot delete any of them.

We are working on this. Until it is fixed, treat the organizations you have belonged to as able to look at those details again if they choose to.

We send text messages only to members who turn them on in their profile. Message frequency varies with your own activity. Message and data rates may apply. Reply STOP to cancel or HELP for help. We do not sell or share your phone number, and we do not use it for marketing.

You can turn text messages off at any time from the same place you turned them on, in your profile.

Your organization decides how long to keep your records. You can ask it to remove what it holds about you, and it can do that for most of your details: your address, your date of birth, your identity documents, and the notes and answers it has collected about you.

Some things stay, and each one is kept for a reason rather than just filed away:

• Money. Invoices, payments and account entries are required for billing, financial and tax reasons, and cannot be edited or removed once they are posted.
• What you agreed to. The record of what you consented to when you applied, and any permission you gave for a photograph, is kept because it is the proof that you agreed. It is never edited.
• What happened. Your membership history, your bookings, and the record of changes made to your organization's documents are kept because they record events that took place. Removing them would not make them untrue.
• Your licenses, ratings and medical certificates. These belong to you rather than to any one organization, and every organization you belong to sees the current version. When an organization removes one, it is recording that it no longer accepts it: the certificate itself stays on your own record and other organizations are not affected.

If an organization stops using OneSource, we keep its data for 90 days so it can be exported or restored, and then delete it.

If you have a question about this policy, or about the information we hold, contact SyncEtc at sales@syncetc.com or (646) 519-3520.

If your question is about the records a particular organization holds about you, contact that organization directly. They decide what to keep and what to remove.