Privacy policy

Who is responsible for your information

The controller of the personal information described in this policy is MLJ, SASU, a French simplified joint stock company, SIREN 934 769 837, publisher of PreflightLog. The publication director is Jimenez Julien. Any question, request or complaint about privacy can be sent to jimenezjulien42@gmail.com, and it is read by a person, not by an automated queue.

This policy covers the public website at preflightlog.com. Student training records held inside a PreflightLog account are a separate matter: for those records the flight school or the instructor is the controller and MLJ, SASU acts as a processor under the terms of service. This page is about the website you are reading right now.

What the contact form collects

The only place this website gathers personal information is the request form in the contact section of the home page. When you submit it, these fields are transmitted exactly as you filled them in:

• name, your full name.
• email, the work email address where you want the reply.
• company, the name of your flight school or instructing operation.
• role, the job title you selected, for example chief flight instructor or independent certificated flight instructor.
• request, what you are asking for: a demo, access for your school, a quote, or a question about moving existing records.
• size, the number of instructors on your field, chosen from a list.
• students, an optional count of your active students.
• message, your description of how you track student progress today.
• consent, the record that you ticked the box agreeing to this handling.

Three hidden fields travel with the submission for routing purposes only: form-name, which tells the form service which form was used, subject, a fixed line identifying the site, and recipient, the address the notification is sent to. A field named bot-field is present and invisible; it exists to catch automated spam and a human never fills it in. The technical logs of the hosting service also record the internet protocol address and browser user agent of the submission, which is standard for any web request.

Why we hold it, and on what legal basis

Your submission is used for one purpose: to answer you and, if you ask for one, to arrange and run a demonstration of PreflightLog. We do not build advertising profiles, we do not enrich your details with data bought from a broker, and we do not sell or share your information with anyone for their own marketing.

Under the European General Data Protection Regulation, the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a commercial enquiry that you initiated. If you later become a customer, the basis for the information needed to run your account becomes the performance of a contract. You can withdraw consent at any time, and withdrawal does not affect anything already done lawfully before it.

Who processes the submission

This site is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Form submissions are processed and stored by Netlify Forms on Netlify infrastructure, and a notification email is delivered to the address of the publication director. Netlify therefore acts as a processor for these submissions and holds a copy in the form dashboard of the site until it is deleted. No other third party receives the content of your message.

How long it is kept

Submissions that do not lead to a business relationship are deleted from the form dashboard and from the mailbox within twelve months. If we exchange emails and you become a customer, the correspondence is kept for the duration of the relationship and then for the period required by French commercial and accounting law, which is ten years for accounting records. You can ask for earlier deletion at any time and we will act on it within thirty days unless a legal obligation requires us to keep a specific document.

Cookies and tracking

This website sets no cookies of its own. There is no advertising pixel, no third party analytics script, no session recording, no heat mapping and no cross site tracking of any kind. The pages load two font files from Google Fonts, which means your browser makes a request to fonts.googleapis.com and fonts.gstatic.com and those servers see your internet protocol address as part of serving the file. Nothing else on these pages contacts an outside service. Because no tracking cookie is used, there is no consent banner to click through.

International transfers

MLJ, SASU is established in France and the hosting and form processing take place in the United States. Where personal information moves from the European Economic Area to the United States, that transfer is covered by the standard contractual clauses adopted by the European Commission, which are part of the data processing terms of the hosting provider. If you are writing from the United States, your information stays with a United States provider and with the publisher in France for the purpose of answering you.

Your rights

Wherever you live, you can ask us for a copy of the information we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to jimenezjulien42@gmail.com with enough detail to identify the message you sent, and expect an answer within thirty days. We never charge for a first request and we never require you to create an account to make one.

United States state privacy rights

Residents of California, under the California Consumer Privacy Act as amended, have the right to know what personal information is collected and for what purpose, the right to delete it, the right to correct it, the right to opt out of sale or sharing, and the right not to be discriminated against for exercising any of these. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is no opt out link to click. Residents of Colorado, Connecticut, Utah and Virginia hold comparable rights of access, correction, deletion and portability under their own state statutes, together with the right to opt out of targeted advertising and profiling, neither of which happens here. Requests from any state go to the same email address and are handled the same way. If we decline a request, we explain why and how to appeal it.

European rights

If the General Data Protection Regulation applies to you, you hold the rights of access, rectification, erasure, restriction of processing, portability, and objection to processing based on legitimate interest. You may also lodge a complaint with your national supervisory authority. In France that authority is the Commission Nationale de l'Informatique et des Libertes.

Children's privacy

PreflightLog is a business tool for flight instructors and flight schools, and this website is not directed at children. We do not knowingly collect personal information from anyone under the age of sixteen through this site. Student pilots under that age may appear in a school's training records, but those records are entered by the school as controller and are governed by its own privacy arrangements, not by this page. If you believe a child has sent us information through the contact form, write to us and it will be deleted promptly.

Security and changes to this policy

Traffic to this site is served over HTTPS, form submissions travel encrypted, and access to the form dashboard and the notification mailbox is limited to the publication director and protected by two factor authentication. No system is perfect, and if a breach ever affects your information we will notify you and the relevant authority within the deadlines the law sets.

When this policy changes, the revised version is published on this page with a new update date, and material changes are announced by email to anyone with an active account. The current version is dated March 2, 2026.