Scope and roles
This notice applies to the Voyage website, instructor workspaces, invited student accounts, product email, and support interactions. Voyage operates the service and determines how account, billing, security, and service-operations information is processed.
An independent instructor decides which student training information to enter into their workspace and is responsible for providing any notice or obtaining any consent required for that relationship. Contact the instructor first when a request concerns the substance of an instructor-created training record.
Information we collect
We collect only information needed to provide, secure, bill, improve, and support Voyage.
- Account information such as name, email, role, authentication identifiers, timezone, home airport, and workspace settings
- Training-operation records such as bookings, lesson records, syllabus progress, assignments, debriefs, tests, messages, and instructor-entered notes
- Verification metadata such as document type, status, relevant dates, and verifier—without retaining medical-certificate or government-ID images
- Billing and invoice references, subscription state, connected-account status, amounts, payment state, refunds, and disputes; Stripe retains card details
- Permitted private training files and the metadata needed to secure, scan, authorize, and delete them
- Technical information such as request identifiers and limited device, browser, network, and security-event metadata needed to operate and protect the service
- Support communications and choices about product email, reports, and reminders
How we use information
We use this information to provide the requested workspace, authenticate users, enforce tenant boundaries and quotas, process subscriptions, facilitate instructor-owned student payments, deliver reports and reminders, respond to support, prevent abuse, troubleshoot, and improve service reliability.
- Generate instructor-requested or scheduled reports from that instructor's workspace
- Provide clearly labeled AI-assisted drafts when a user requests them
- Display timestamped supplemental aviation-weather context without making an operational decision
- Measure aggregate site and product performance with privacy disclosures and available consent controls
- Produce private aggregate service-operation reports from workspace milestones: trial start, first student lesson workflow, first paid workspace subscription invoice, first cancellation request, and subscription end. These server-side records do not load browser analytics or go to Google Analytics and are deleted with the workspace
- Comply with law, enforce agreements, and protect users, Voyage, and the public
AI and aviation data
When a user invokes an AI feature, Voyage sends the prompt and limited relevant workspace context to the configured model provider to produce the requested draft. AI output is labeled, may be inaccurate, and requires human review. We do not use a model failure as permission to invent an answer.
Voyage may retrieve public METAR or TAF information from AviationWeather.gov and display its station, timestamp, and source as supplemental context. Voyage does not turn that data into a dispatch, briefing, or go/no-go determination.
Service providers and disclosures
We use service providers to run Voyage, including Google Cloud/Firebase for hosting, identity, databases, storage, and jobs; Stripe for billing, connected accounts, and payment processing; email delivery providers; an AI model provider when AI is invoked; and Google Analytics 4 for optional, consent-based aggregate website and product measurement.
These providers process information under their own terms and our applicable service arrangements. We may also disclose information when required by law, to prevent fraud or harm, during a business transaction subject to appropriate protections, or with the user's direction. Voyage does not sell personal information for money.
Minors
Voyage is not intended for self-directed use by children. An instructor may keep a minimal roster entry for a minor only with documented guardian consent. A minor cannot create a portal account, receive automated email, use AI, upload files, or receive payment requests until Voyage offers a dedicated guardian workflow.
If you believe a child created an account or personal information was entered without appropriate authorization, contact us so we can investigate and delete it where required.
Retention and deletion
Active account information is retained while needed to provide the service. When a trial or subscription ends, the workspace becomes read-only and general workspace data is retained for 90 days so the instructor can review and export it. We provide deletion warnings before the scheduled purge.
Limited records may be retained longer where applicable law requires an instructor or security-training record to be maintained. Those records are restricted, minimized, retained only for the applicable period, and then deleted. Any production backup and recovery configuration must use a documented expiration schedule; deletion from live data may not remove a record from an applicable provider backup immediately.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, delete, or restrict certain personal information and to appeal a denied request. A workspace owner can download an owner-only newline-delimited JSON export. Account deletion is not self-service: it begins with a support request, and Voyage verifies the requester's identity before acting.
Send privacy questions or rights requests to support@voyage-us.com. We may direct a student to the relevant instructor for instructor-controlled training content, but Voyage will handle requests involving platform-controlled account and service data.
Changes to this notice
We may update this notice as Voyage changes. We will publish the new effective date and provide an in-product or email notice when a change materially affects how we use personal information.