GoFlight
← Back to goflight.ai

Privacy Policy

Effective Date: October 13, 2026

This policy explains what GoFlight.ai Inc. ("GoFlight", "we") collects when you use www.goflight.ai, the GoFlight app at app.goflight.ai, or Flyn, our AI assistant, by web chat, SMS, WhatsApp, Telegram or email. It also says who helps us run the service and how long we keep things.

1. What Data We Collect

  • Account information: Name, email address, phone number, company name and your role (for example customer, operator or broker). If you sign in with Google or Microsoft, we receive your name and email address from that provider.
  • Trip data: Flight requests, routes, dates, passenger counts and special requirements.
  • Trip activity: Bids, quotes and trip status. GoFlight does not process charter payments: customers pay the operator directly, under the operator's contract.
  • Subscription billing: Member companies pay for their GoFlight subscription on Stripe's own checkout page. We never see or store your card number.
  • Messages: What you write to Flyn (web chat, SMS, WhatsApp, Telegram, email), messages between customers and operators on a trip, and files you attach. If you use voice dictation, your audio is turned into text.
  • Operator documents: Certificates, insurance documents and fleet information.
  • Technical data: IP address, browser and device type, and request logs our servers keep for security and troubleshooting. We do not use analytics or advertising trackers.
  • Demo bookings: If you book a meeting or enter a drawing at goflight.ai/demo, we collect your name, email, company and what you tell Flyn there. At our trade-show booth, our team may scan your business card.

2. How We Use Your Data

  • Matching: Sending trip requests to operators who can fly them, and showing operators' bids to customers.
  • Running trips: Flyn reads your messages and drafts replies and trip updates (see section 3).
  • Subscription billing: Billing member companies for their GoFlight subscription and keeping those invoices.
  • Communication: Login codes, trip updates and other service notices.
  • Safety, security and compliance: Checking operator documents, preventing abuse and looking into reported problems.

We do not use your messages or trip data to train AI models.

3. Flyn and AI Processing

Flyn is an AI assistant, not a person. When you message Flyn, an AI model reads your message and the trip details it needs, and writes a reply. Flyn can also draft trip updates, read documents you send, and turn dictated audio into text.

  • Human approval: When Flyn replies by SMS or WhatsApp on behalf of an operator or broker, a person at that company approves each reply before it is sent. Replies in web chat, Telegram and email are sent by Flyn directly.
  • Where it runs: Flyn uses AI models, including Anthropic's Claude, through Amazon Bedrock inside our AWS account. Under AWS's Bedrock terms, your prompts and replies are not shared with the model makers and are not used to train their models.
  • Demo page: On goflight.ai/demo, Flyn's chat and business-card scans are processed by Anthropic's Claude models through OpenRouter.

4. Who We Share Data With

We share your data only to provide the service:

  • Other parties on a trip: Trip details go to the operators who receive the request. Operator details go to customers during bidding and when they choose an operator. Members of a company can see that company's trips and the Flyn replies waiting for their approval.
  • Legal requirements: When the law, a regulator or a court requires it.

We use these service providers. They process data for us and may not use it for their own purposes:

  • Amazon Web Services (AWS): Hosting, databases and file storage, including Amazon Cognito (sign-in), Amazon SES (email), Amazon Bedrock (AI models), Amazon Transcribe (dictation) and Amazon CloudFront (website delivery).
  • Stripe: Subscription billing for member companies.
  • Twilio: Sending and receiving SMS and WhatsApp messages.
  • Meta (WhatsApp): If you message us on WhatsApp, your messages go through WhatsApp's service.
  • Telegram: If you link Telegram, your messages go through Telegram's service.
  • Google and Microsoft: Only if you choose to sign in with them. We also use Microsoft 365 for our own email and for meeting invites from goflight.ai/demo.
  • OpenRouter and Anthropic: Flyn on goflight.ai/demo only (see section 3).

We never sell your personal data or share it for advertising.

5. Your Rights (GDPR & Global Privacy)

Wherever you live, you can ask us to:

  • Access: Give you a copy of the personal data we hold about you.
  • Rectification: Correct data that is wrong or incomplete.
  • Erasure: Delete your personal data (see section 6 for what we must keep).
  • Portability: Give you your data in a structured, machine-readable file.
  • Objection: Stop processing your data for specific purposes.
  • Restriction: Limit how we process your data in certain cases.

You can download your data or delete your account from your account settings, or email team@goflight.ai. We will respond within 30 days.

6. How Long We Keep Data

  • Flyn web chat: Deleted 30 days after the last message in the conversation.
  • SMS, WhatsApp and Telegram messages to Flyn: Our copy is deleted after 24 hours. Twilio, Meta and Telegram keep their own records under their policies.
  • Email to Flyn: Deleted after 90 days.
  • Flyn drafts waiting for approval: Deleted after 30 days.
  • In-app notifications: Deleted after 90 days.
  • Flyn chat activity logs (what Flyn did in a web chat, and when): Deleted after 90 days.
  • Audit records (security and approval events, such as who approved which Flyn reply and when): Kept for 7 years. They record the event, not the message text.
  • Data exports you request: The download file is deleted after 30 days.
  • Account, trips, bids and uploaded files: Kept while your account is open. When you delete your account, it is switched off right away and deleted 30 days later. Signing back in during those 30 days cancels the deletion.
  • What stays after account deletion: Subscription billing records, for as long as tax, accounting and dispute rules require (at least 7 years), and messages you sent to other parties on a trip, which stay visible to them. Stripe keeps its own billing records.
  • Demo bookings: Kept until we no longer need them to follow up with you. Email team@goflight.ai to have them deleted sooner.

7. Cookies & Browser Storage

We use only what the service needs to work: your sign-in session and security settings, kept in cookies or your browser's local storage. We do not use analytics, advertising or third-party tracking cookies. If you block them in your browser, you may not be able to sign in.

8. Data Security

  • In transit: All traffic to our website, app and APIs is encrypted with TLS (HTTPS).
  • At rest: Our databases and file storage on AWS are encrypted with AWS-managed keys (Amazon S3-managed encryption for files). One-time login codes get an extra layer of encryption with AWS KMS.
  • Access: What each person can see in GoFlight depends on their role and company membership.

No system is 100% secure. If a breach affects your personal data, we will tell you as the law requires.

9. SMS / Text Messaging

If you give us your mobile number, GoFlight texts you account-security messages: login codes and account verification. If you also tick the separate, unchecked SMS opt-in box at sign-up or in your settings, we text you service updates about trips, bookings and platform activity. Opting in is never a condition of using GoFlight. These messages are transactional. We do not send marketing or promotional texts.

  • No sharing of mobile numbers: Mobile information, including your phone number, will not be shared with or sold to third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and SMS consent will not be shared with any third parties or affiliates for marketing or promotional purposes.
  • Message frequency: Message frequency varies based on your account activity.
  • Rates: Message and data rates may apply.
  • Opt-out: Reply STOP (or CANCEL, END, QUIT, UNSUBSCRIBE) to any message to opt out, or HELP for help. You can also remove your phone number or turn off SMS in your account settings.
  • Who sends them: Texts are sent through Twilio. See how SMS opt-in works.

10. Changes to This Policy

When we change this policy, we update the effective date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

Contact for Data Requests

For any privacy-related questions or data requests:

Last updated: October 13, 2026