Overview
Velari is a U.S.-only mobile marketplace connecting Part 91 operators with U.S.-licensed contract pilots and flight attendants. Privacy is foundational to that trust: every credential, medical, and trip record we hold is encrypted, scoped to least-privilege access, and used only for the purpose for which you gave it to us.
This policy applies to the Velari mobile app (iOS and Android), our website at velarigroup.ai, and any related services we operate under that brand. The App Privacy page summarizes our app practices in Apple/Google form; this Policy is the binding document.
Data we collect
a. Information you provide
- Account data — Name, email, phone, role (crew or operator), and the password you set.
- Verification data (crew) — Pilot/flight attendant certificates, FAA medical, type ratings, recurrent training, photo ID. Captured in-app via edge-detection document scanning.
- Verification data (operators) — Part 91 certificate evidence, registered tail numbers, and the operating certificate or letter of authorization we file against.
- Trip data — Routes, dates, aircraft, role, day rate, applications, messages, expenses, and Trip Cost approvals.
- Communications — Messages you send other users in-app and to our team via WhatsApp, email, or phone.
b. Information collected automatically
- Device & app data — Device model, OS version, app version, locale, time zone, crash and performance diagnostics.
- Approximate location — IP-derived approximate location for fraud prevention and U.S.-only access enforcement.
- Precise location (crew, with permission) — GPS proximity to departure airport, used by our match engine to rank applicants. Off by default; granted via the OS prompt.
- Cookies & similar — See our Cookie Policy.
c. Information from third parties
- FAA registries — Public airman and aircraft registry data used to verify certificates and tails.
- Identity verification vendors — KYC providers we use to confirm you are who you say you are.
- Payment processors — Limited transaction metadata so we can reconcile a trip's Net-30 invoice (we do not store full card or bank numbers).
How we use data
We use the data above only to operate Velari and meet our legal obligations.
- Run the marketplace: match crew to trips, post applications, exchange messages, close out Trip Cost.
- Verify identity, certificates, currency, and U.S. Part 91 eligibility.
- Issue Net-30 invoices and reconcile crew pay + approved expenses + our placement fee.
- Detect and prevent fraud, abuse, and unauthorized access.
- Meet legal obligations (audit trails, tax records, FAA-adjacent requests if served).
- Provide product support and respond to your messages.
- Improve product safety, reliability, and feature development based on aggregate usage.
Where required (EU/EEA/UK), our legal bases are: contract (operating the service for you), legitimate interests (fraud prevention, security, product improvement), legal obligation, and consent (where we ask for it, e.g. precise location).
Sharing & disclosure
- With other users — Crew profiles (name, certificates, ratings, currency, day rate) are visible to operators on whose trip you applied. Operator trip postings are visible to qualified crew.
- With service providers — Cloud hosting, identity verification, document scanning, payment processing, customer support tooling. Each is bound by data-processing terms and uses data only on our instructions.
- For legal reasons — When required by law, court order, or to protect Velari, our users, or the public.
- In a business transfer — If Velari is acquired or merged, your data transfers under this Policy; we will notify you of any material change.
We do not sell your personal information. We do not share it with advertisers, data brokers, or for cross-context behavioral advertising.
Retention
We retain account, verification, and trip data for as long as your account is active and for the period required to satisfy our legal, audit, tax, and dispute-resolution obligations afterward (typically 7 years for trip-related financial records). When you delete your account, profile data is removed within 30 days; financial records are retained per the period above and then deleted.
Your rights & choices
- Access and download your data.
- Correct inaccurate information.
- Delete your account and personal data (subject to retention obligations above).
- Restrict or object to certain processing.
- Withdraw consent (e.g. precise-location permission) at any time via your device settings.
To exercise any right, email privacy@velarigroup.ai. California, Colorado, and Virginia residents have additional rights (including the right to opt out of “sale” or “sharing” — though we do neither). EU/EEA/UK residents have the rights granted by GDPR/UK GDPR and may lodge a complaint with their supervisory authority.
International transfers
Velari operates from the United States and stores data on U.S.-based infrastructure. If you access Velari from outside the U.S., your data is transferred to the U.S. for processing. Where required (EU/EEA/UK to U.S.), we rely on the EU–U.S. Data Privacy Framework where available and on Standard Contractual Clauses with appropriate safeguards.
Security
We protect your data with TLS 1.3 in transit, AES-256 at rest, least-privilege access controls, hardware-backed authentication for our team, and ongoing penetration testing. No system is perfectly secure; if you suspect unauthorized access to your account, contact us immediately.
Children
Velari is not directed to anyone under 18 and we do not knowingly collect data from children. If you believe a minor has used the service, contact us and we will delete the account.
Changes to this policy
We may update this Policy as the product, the law, or our practices evolve. Material changes will be announced in-app and by email at least 30 days before they take effect. The “Last Updated” date at the top of this page reflects the most recent revision.
Contact us
Velari Aviation Technology · New York, NY, USA · privacy@velarigroup.ai · +1 (347) 833-8240