Privacy Policy

PilotSeniority.com (the "Service") is operated by Managed Climb LLC ("we," "us," "our"), a Texas limited liability company. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described in this Policy. See also our Terms of Use.

The Service is web-only. There is no PilotSeniority mobile app. Some pages can be added to your iPhone or iPad as a Progressive Web App (PWA) through Safari’s "Add to Home Screen". That is still the same web service, not an App Store or Google Play app.

Information you provide directly

• Email address (used for account creation, authentication, and account-related communications).
• American Airlines employee number and hire date (used at signup to verify pilot eligibility against the most recent published seniority list).
• Optional profile fields you choose to enter, including your first and last name, base, fleet, seat, division, special qualifications, and a bid-status override with expiration. These are used to personalize the Service and newsletters.
• Newsletter preferences. Newsletters are opt-in; you choose whether to receive Line Check (monthly per-bid-status awards digest) and The Overnight (monthly bidpack layover digest).
• Payment information, when you subscribe. Payment methods are collected and processed by Stripe; we do not store card numbers, CVVs, or full bank-account details. We receive a Stripe customer ID and your subscription status from Stripe.
• Feedback you choose to send to feedback@pilotseniority.com or admin@pilotseniority.com.

Information collected automatically

• Authentication session cookies (set by Supabase Auth) that keep you signed in securely. These are essential for the Service to function for signed-in users.
• Product analytics via PostHog. We record pageviews and feature interactions so we can understand which parts of the Service are useful and which need work. When you are signed in, this usage data is associated with your account so we can compare how different pilot segments use the Service. We do not use this data for advertising.
• Anonymous usage data via Vercel Web Analytics (pageviews, referrers, approximate country). Vercel Web Analytics is cookieless and does not identify individual users.
• Standard server log data (IP address, user agent, request path, timestamp) used for security, abuse prevention, and operational debugging.

Information we do not collect

• We do not collect precise geolocation data.
• We do not access your contacts, photos, camera, microphone, or device sensors.
• We do not use advertising cookies or any cross-site tracking.
• We do not sell your personal information to advertisers or anyone else.
• The Service is not directed at children under 13 and we do not knowingly collect data from children under 13.

We do not currently respond to "Do Not Track" browser signals because there is no industry consensus on how to interpret them; however, we do not engage in cross-site tracking regardless of any DNT signal.

We use the information we collect to:

• Verify pilot eligibility at signup and maintain your account.
• Provide the seniority, bidpack, award, vacancy, projection, and newsletter features of the Service.
• Personalize features and newsletters based on your bid status and preferences.
• Process subscription payments and maintain your subscription status (via Stripe).
• Send account-related communications such as billing receipts, security notices, and important Service updates.
• Send newsletters you have opted into.
• Improve the Service through usage analysis (segment-level, not for advertising).
• Detect, investigate, and prevent abuse, fraud, or security incidents.
• Comply with legal obligations.

We do not sell your personal information. We do not use your data for targeted advertising.

We share information only with the third-party service providers we rely on to operate the Service, and only to the extent necessary for them to perform their function. We do not sell your personal information.

• Supabase: managed Postgres database and authentication infrastructure. Stores your account record (email, hashed authentication credentials), profile fields, newsletter preferences, and subscription status. Supabase processes data on our behalf under access controls we configure.
• Stripe: subscription billing for paid plans. Stripe collects and stores your payment method directly under its own privacy policy. We receive a customer ID, subscription status, and metadata sufficient to grant or revoke access to subscriber-only features.
• Vercel: web hosting, edge network, and Vercel Web Analytics. Vercel receives the requests required to serve the Service to you. Vercel Web Analytics is cookieless and does not identify individual users.
• PostHog: product analytics. PostHog records the pageviews and feature interactions we use to understand how the Service is being used. When you are signed in, those events are associated with your account so we can group usage by pilot segment (for example, by base or fleet). PostHog data is used for product improvement only. It is not used for advertising and is not sold.
• Resend: transactional email delivery (account confirmations, password resets, billing receipts) and opted-in newsletter delivery. Resend processes email addresses and message content on our behalf to deliver email.
• Cloudflare: DNS for pilotseniority.com and email routing for the @pilotseniority.com mailboxes used for support and feedback. Cloudflare processes routing data necessary to direct traffic and email.

Each provider operates under its own privacy policy. We have access controls in place limiting who within Managed Climb LLC can access your data.

We may also disclose information if required by law, court order, valid subpoena, or to protect the rights, property, or safety of Managed Climb LLC, our users, or the public. If Managed Climb LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; any successor will be bound by the obligations in this Privacy Policy or will provide notice of any change.

Your account data is stored in the United States on secured, access-controlled infrastructure operated by our service providers. We use industry-standard measures including encrypted connections (HTTPS/TLS), signed session tokens, hashed credentials, and role-based access controls to protect your information.

No method of transmission over the internet or storage is 100% secure. While we make reasonable efforts to protect your data, we cannot guarantee absolute security.

We retain your account information for as long as your account is active. You may delete your account at any time from the Account page on PilotSeniority.com, or by emailing admin@pilotseniority.com. Deletion permanently removes your authentication record, profile preferences, and newsletter subscriptions, and (if you have an active paid subscription) cancels that subscription immediately.

Some records may be retained after deletion where required by law or for legitimate business purposes:

• Transaction records (typically up to 7 years) for tax and accounting compliance.
• Records reasonably necessary to prevent fraud, abuse, or security incidents.

Stripe retains payment records under its own retention policy; we do not control those records. If you have an active subscription at the time of deletion, you should cancel it through the Stripe customer portal before requesting deletion to avoid further charges. Backups containing your data may persist for a short period after deletion until they are overwritten in the normal course of operations.

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate information through your Account page or by contacting us.
• Deletion: delete your account from the Account page or by emailing us.
• Portability: request your data in a portable format.
• Newsletter opt-out: unsubscribe from any newsletter through the unsubscribe link in every newsletter email or by updating your preferences on the Account page.
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at admin@pilotseniority.com. We will respond within 30 days. We may need to verify your identity (typically by emailing the address on file) before fulfilling a request.

Authentication cookies

Supabase Auth sets session cookies on pilotseniority.com that keep you signed in securely. These cookies are essential for the Service to function for signed-in users and do not track you across other websites.

Browser session and local storage

The Service uses your browser's sessionStorage to hold your selected pilot context (employee number and bid status) for the duration of your browser session, so pages can read it without an extra server round-trip. This data lives on your device and is removed when you sign out or close the browser tab.

Analytics

We do not use advertising cookies, third-party tracking cookies, or cross-site tracking technologies. Vercel Web Analytics, which we use for anonymous pageview statistics, is cookieless. PostHog product analytics events are associated with your account while you are signed in so we can group usage by pilot segment for product improvement. PostHog is not used for advertising.

The Service may contain links to third-party websites or resources, including links to American Airlines, the Allied Pilots Association, public references, or partner sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the right to know what personal information we collect about you, to request deletion, to correct inaccurate information, to limit the use of sensitive personal information, and to opt out of any sale or sharing of personal information.

We do not sell or share personal information for cross-context behavioral advertising. We do not knowingly collect or process the personal information of consumers under 16.

To submit a CCPA/CPRA request, contact admin@pilotseniority.com. We will respond within the timeframe required by law.

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to that transfer.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact admin@pilotseniority.com and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify active account holders by email or in-app notice. Continued use of the Service after changes are posted constitutes acceptance of the updated Policy.

Questions about this Privacy Policy or our data practices can be sent to admin@pilotseniority.com.

Managed Climb LLC
PilotSeniority.com