Loading…
Loading…
Last updated: 9 October 2026
The data controller is SIA VASILS, Koku iela 1-8, Rīga, LV-1004, Latvia (registration No. 40203780755), operating Copilot Elite (“we”, “us”).
For anything about your personal data, email privacy@copilotelite.com — you do not need an account to contact us.
| Data | Purpose | Legal basis |
|---|---|---|
| Account: name, email, password (hashed), role, sign-up date, acceptance of these terms | Create and secure your account | Contract (Art. 6(1)(b)) |
| Profile photo (optional) | Show who you are to the people you fly with | Contract |
| Instructor profile: bio, experience, licence summary, aircraft, simulators, languages, rate, timezone | Publish your Instructor listing | Contract |
| Instructor proof documents: logbook page and licence scan | Verify that Instructors are real pilots before listing them | Legitimate interest in a trustworthy marketplace (Art. 6(1)(f)); deleted after review |
| Aviator sim profile: platforms, controls, aircraft, experience, home airport, setup notes, goals (optional) | Help your Instructor prepare the session | Contract |
| Bookings, prices, payment status, refunds, payouts | Run bookings and pay Instructors | Contract; legal obligation for accounting records (Art. 6(1)(c)) |
| Instructor payout details: country, and either a Stripe payout account reference or (where Stripe payouts aren't available) bank account holder, account number, SWIFT/BIC, bank and currency | Pay Instructors their share of completed sessions | Contract |
| Session join/leave times | Resolve no-show and quality disputes | Legitimate interest |
| Reviews and ratings | Help Aviators choose an Instructor | Legitimate interest |
| Support messages and dispute reasons | Answer you and resolve problems | Contract; legitimate interest |
| Feedback and ideas you send us (with an optional rating) | Improve the service | Legitimate interest |
| Technical data: IP address, browser, request logs, login cookies | Keep the service running and secure, prevent abuse | Legitimate interest |
| Visit statistics: pages viewed, approximate country, IP address, browser and language, referring website, and your account if you are signed in. No cookies; query strings are never stored | Understand how the site is found and used, so we can improve it | Legitimate interest |
Card details are entered directly with Stripe; we never see or store full card numbers. Live sessions are not recorded. We make no automated decisions that have legal or similarly significant effects on you, and we do not profile you for marketing.
Name and email are required to create an account; without them we cannot provide the service. Everything else in your profile is optional.
These companies process data on our behalf under data processing agreements:
| Provider | Purpose | Location / safeguard |
|---|---|---|
| Supabase | Database, login, file storage | EU (Frankfurt, Germany) |
| Amazon Web Services | Website hosting and delivery | EU (Stockholm, Sweden); global CDN — EU Standard Contractual Clauses |
| Stripe | Payments, refunds and Instructor payouts (Stripe collects identity and bank details directly for automatic payouts) | EU/US — EU–US Data Privacy Framework and Standard Contractual Clauses |
| LiveKit | Live video and screen share | US company — EU–US Data Privacy Framework / Standard Contractual Clauses |
| Resend | Transactional emails | US — EU–US Data Privacy Framework / Standard Contractual Clauses |
| Zoho | Our email inbox (support and privacy requests) | EU data centre |
We do not sell your data and do not use advertising trackers or third-party analytics. Our visit statistics are collected on our own servers only. If your browser sends Do Not Track or Global Privacy Control, we do not record your visits. We may disclose data where required by law.
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Instructor proof documents | Deleted when the application is approved; 30 days after a rejection; 180 days if an application is abandoned |
| Unconfirmed sign-ups | 30 days |
| Instructor bank details | Until you delete your account or switch to Stripe payouts |
| Bookings, payments and payouts | As long as accounting law requires (in Latvia generally 5 years after the end of the financial year), in anonymised form after account deletion |
| Session join/leave logs | 1 year after the session |
| Support messages | 2 years |
| Feedback and ideas | 2 years |
| Dispute details | 2 years after resolution (free text removed) |
| Admin audit log | 2 years |
| Server logs | Up to 90 days |
| Visit statistics | 90 days |
You have the right to:
Email privacy@copilotelite.com for any request. We answer within one month and may ask you to confirm your identity.
You can also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050 — dvi.gov.lv — or the data protection authority where you live or work.
We only use cookies that are strictly necessary to keep you signed in and to secure your session. We use no advertising or analytics cookies (our visit statistics work without any cookie or browser storage), so we do not ask for cookie consent. Fonts are served from our own domain.
Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Access is restricted per user by database row-level security; proof documents are kept in a private store. If a breach puts your rights at risk, we will tell you and the authority as the law requires.
Copilot Elite is for people aged 18 and over. We do not knowingly collect data from anyone younger; if you believe we have, email us and we will delete it.
We will post changes here and update the date above. If a change is significant, we will tell you by email or in the app.