Privacy Policy

AERHUB INC. PRIVACY POLICY

Effective Date: February 1, 2026

Aerhub, Inc. ("Aerhub," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Aerway mobile application, The Aerpod podcast, and related services (collectively, the "Platform"). By using the Platform, you consent to the practices described in this Privacy Policy, including how your information is collected, used, and shared.

1. INFORMATION WE COLLECT

1.1 Information You Provide

We collect information you voluntarily provide when you:

·      Create an account (name, email address, username, password)

·      Complete your profile (aviation credentials, certifications, employment history, professional associations, photographs)

·      Post content, messages, or comments

·      Subscribe to Pro Spaces or premium features

·      Contact customer support

·      Participate in surveys, promotions, or beta programs

1.2 Information Collected Automatically

When you use the Platform, we automatically collect:

·      Device information (device type, operating system, unique device identifiers)

·      Usage data (pages viewed, features used, time spent, interaction patterns)

·      Log data (IP address, browser type, access times)

·      Location data (general geographic location based on IP address)

·      Cookies and similar tracking technologies

1.3 Payment Information

Payment processing is managed by Apple, Google, and/or Stripe. We do not store complete credit card numbers or payment account credentials. We receive limited information such as the last four digits of your payment card and billing email, to facilitate transactions and maintain records. Aerhub has no liability for any issues related to your payment processing information.

1.4 Information from Third Parties

We may receive information from:

·      Social media platforms if you connect your accounts to social media

·      Aviation credential verification services (FAA Airman Inquiry database)

·      Analytics providers and advertising partners

·      Public databases and aviation industry sources

1.5 Identity and Credential Verification

When certain users purchase or access specific paid features, Aerhub may collect additional information to verify identity and aviation credentials (“Verification Data”). Verification Data may include:

• Government‑issued identification details;

• FAA license or certificate numbers and related credential information; and

• Other information you choose to provide or that is returned by the FAA or other credentialing authorities in connection with verification.

2. HOW WE USE YOUR INFORMATION

We use your information to:

·      Provide, operate, and maintain the Platform

·      Process account registrations and authenticate users

·      Enable professional networking, Spaces, and community features

·      Process subscription payments and Pro Space transactions

·      Verify aviation credentials and professional qualifications

·      Send notifications, updates, and administrative messages

·      Personalize user experience and recommend relevant content

·      Analyze usage trends and improve Platform features

·      Moderate content and enforce Community Rules

·      Prevent fraud, abuse, and security threats

·      Comply with legal obligations and respond to lawful requests

·      Send marketing communications (with your consent, where required)

For paid users We use Verification Data to:

• Confirm user’s identity and eligibility to use paid features;

• Validate FAA and other aviation‑related credentials;

• Maintain platform integrity, trust, and safety; and

• Comply with applicable legal, regulatory, or contractual requirements.

3. HOW WE SHARE YOUR INFORMATION

We may share your information in the following circumstances:

3.1 With Other Users

Certain profile information, posts, and activity may be visible to other users based on your privacy settings and the nature of the Platform. This includes information you share publicly or within Spaces.

3.2 With Space Admins

When you join a Space, the Space Admin may have access to your profile information, subscription status, and activity within that Space.

3.3 With Service Providers

We share information with third-party service providers who perform services on our behalf, including:

·      Payment processing

·      Cloud hosting and storage

·      Analytics and performance monitoring

·      Content moderation tools

·      Verification services

·      Email and communication services

·      Customer support tools

3.4 For Legal Compliance

We may disclose information when required by law, court order, subpoena, or government request, or to protect our rights, property, or the safety of users and the public.

3.5 Business Transfers

In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred to a successor entity. You will be notified via email or prominent notice on the Platform before your information becomes subject to a different privacy policy.

3.6 With Your Consent

We may share your information for other purposes with your explicit consent.

3.7 Sharing of Verification Data

We may share Verification Data with:

·      Third‑party verification providers (currently including Persona Identities, Inc. and its affiliates) that perform identity and credential verification on our behalf;

·      The FAA and other credentialing or governmental authorities, to the extent reasonably necessary to perform verification or meet legal or regulatory obligations; and

·      Our service providers, professional advisors, and affiliates, as reasonably necessary to support the above purposes.

We do not sell Verification Data to third parties.

We retain Verification Data for as long as needed to provide the relevant paid features, to meet our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. We may retain limited records of Verification outcomes (e.g., “verified” or “not verified”) for audit, compliance, and security purposes after underlying documents are deleted or de‑identified. 

If you choose not to provide Verification Data when requested, or if we are unable to verify your identity or credentials, you may not be able to access or continue using certain paid features. Depending on your jurisdiction, you may have additional rights regarding access, correction, or deletion of your Verification Data, as described in the “Your Rights and Choices” section of this Privacy Policy. 

4. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your information within 90 days, except where retention is necessary for:

·      Legal compliance

·      Dispute resolution

·      Enforcement of agreements

·      Fraud prevention and security

·      Backup and disaster recovery purposes

5. YOUR RIGHTS AND CHOICES

Depending on your location and applicable data protection laws, you may have certain rights in relation to your personal information (“Personal Data”). Subject to any limitations under applicable law, these may include the right to:

• Access: Request confirmation of whether we process your Personal Data and receive a copy of that Personal Data.

• Know More About Our Processing: Request additional information about how we collect, use, disclose, and otherwise process your Personal Data.

• Correction: Request correction or updating of inaccurate or incomplete Personal Data.

• Deletion: Request deletion or erasure of your Personal Data, to the extent permitted by applicable law.

• Restriction: Request that we restrict our processing of your Personal Data in certain circumstances.

• Objection: Object to certain types of processing, including where we process your Personal Data for direct marketing purposes. You can exercise your right to object to direct marketing at any time without having to provide a specific reason by contacting us at help@aerhub.com.

• Portability: Request to receive your Personal Data in a structured, commonly used, and machine‑readable format, and to have that data transmitted to another controller where technically feasible.

• Opt‑Out of Marketing and Certain Disclosures: Opt‑out of receiving marketing communications from us and, where applicable, opt‑out of certain disclosures of your Personal Data to third parties. You can opt‑out of marketing communications by using the unsubscribe link in our emails or by contacting us at help@aerhub.com.

• Non‑Discrimination: Not be unlawfully discriminated against for exercising any of the rights described above.

To exercise any of these rights, please contact us at help@aerhub.com. We may need to verify your identity and location before processing your request. We will respond to your request within the timeframe required by applicable law, and within 30 days of receiving a complete request. If we require additional information to verify your identity or to locate your data, we will let you know.

These rights may be subject to certain exceptions and limitations under applicable law. In some cases, we may be unable to fully comply with your request, for example where doing so would interfere with our legal obligations, affect ongoing legal matters, or expose the Personal Data of other individuals. Where we deny your request in whole or in part, we will explain the reasons for our decision, unless we are prohibited from doing so by law.

6. DATA SECURITY AND HOW WE SECURE YOUR PERSONAL DATA

We use a combination of administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include, as appropriate:

• Encryption of data in transit and at rest;

• Access controls, authentication mechanisms, and role‑based permissions;

• Internal policies, training, and confidentiality commitments for personnel who have access to personal information; and

• Security assessments, monitoring, and other measures intended to maintain the ongoing integrity of our systems.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information, and we do not accept liability for unauthorized access to or use of personal information that is beyond our reasonable control. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

For payment processing, we use third‑party providers such as Stripe, Inc. These providers maintain their own security programs and compliance frameworks (for example, PCI DSS compliance for payment card processing). Aerhub does not store complete payment card numbers or full payment account credentials on its systems.

7. CHILDREN'S PRIVACY

The Platform is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that we have collected information from a child under 16, we will delete it promptly without notice. If you believe we have collected information from a child under 16, please contact us immediately at help@aerhub.com.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in the United States or other countries where Aerhub or its service providers operate. These countries may have data protection laws different from your jurisdiction. By using the Platform, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy.

9. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We may retain your Personal Data for a period of time consistent with the original purpose of collection (see the "Data Retention" Section 4 above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for Personal Data on the basis of the amount, nature, and sensitivity of the Personal Data being processed, the potential risk of harm from unauthorized use or disclosure of the Personal Data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).

After expiry of the applicable retention periods, your Personal Data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of or access to such data.

10. YOUR RIGHTS RELATING TO YOUR PERSONAL DATA

·       

10.1 Use of Personal Data for Business Purposes

Certain state laws require that we detail the categories of Personal Data that we disclose for certain "business purposes," such as to service providers that assist us with securing our services or marketing our products.

We disclose the following categories of Personal Data for our business purposes:

·      Identifiers

·      Personal information under California Civil Code section 1798.80

·      Internet activity information

·      Visual information

·      Professional or employment-related information

·      Aviation credentials and certifications

·      Commercial information (Pro Space subscriptions)

·      Inferences drawn from any of the above information categories

10.2 Sensitive Categories of Personal Data:

·      Account log-in information

·      Geolocation data

·      Payment information

Several jurisdictions grant state residents certain rights, including the right to access specific types of Personal Data, the right to learn how we process Personal Data, the right to know whether and how we disclose or sell Personal Data, the right to opt out of any sale of Personal Data, the right to request deletion of Personal Data in certain circumstances, and the right not to be denied goods or services for exercising these rights.

California law further permits you to request information regarding the disclosure of your personal information to third parties for the third parties' direct marketing purposes. We do not disclose your personal information to third parties for the third parties' direct marketing purposes.

In the preceding twelve months we have not sold personal information.

For information on how to exercise your rights, please refer to Section 10.4 below.

If you are an authorized agent wishing to exercise rights on behalf of a state resident, please contact us using the information in the "Contact us" section below and provide us with a copy of the consumer's written authorization designating you as their agent. We may need to verify your identity and place of residence before completing your rights request.

10.3 How to Exercise Your Rights

To exercise your rights, please contact us by using the information in the "Contact us" section below. Your personal data may be processed and accessed in responding to these rights. We will respond to all legitimate requests in a timely manner and in accordance with applicable laws and will contact you if we need additional information from you in order to honor your request or verify your identity.

10.4 Your Rights Relating to Space Admin Data and Pro Space Subscriber Data

As described above, we may also process Personal Data submitted by or for Space Admins or Pro Space subscribers. To this end, if not stated otherwise in this Privacy Policy or in a separate disclosure, we process such Personal Data as a processor on behalf of the Space Admin who is the controller of the Personal Data within their Space (see the "Responsible entity" section above).

We are not responsible for and have no control over the privacy and data security practices of Space Admins, which may differ from those explained in this Privacy Policy.

If your data has been submitted to us by or on behalf of a Space Admin and you wish to exercise any rights you may have under applicable data protection laws, please inquire with them directly. Because we may only access a Space Admin's data upon their instructions, if you wish to make your request directly to us, please provide us with the name of the Space Admin who submitted your data to us. We will refer your request to that Space Admin and will support them as needed in responding to your request within a reasonable timeframe.

11. CHANGES TO THIS PRIVACY POLICY

We may change our Privacy Policy at any time. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes on the Platform or by directly sending you a notification via email. Material changes will be communicated at least 30 days before taking effect. We encourage you to periodically review this Privacy Policy to ensure you are familiar with the most current version.  By using the Platform constitutes acknowledgement and acceptance of the most current terms of this Privacy Policy.

12. CONTACT US

If you wish to contact us or have any questions about and/or complaints in relation to this Privacy Policy, please contact us at the following email address:

Email: help@aerhub.com

For Space Admin data practices or Pro Space subscriber inquiries, please contact the relevant Space Admin directly.