Important Disclaimer: CESAR is a logistics coordination platform. We do not operate aircraft, hold air carrier certificates, or perform air traffic control communications. All flights coordinated through CESAR are operated by independent, verified operators who hold their own operating certificates and are solely responsible for regulatory compliance and safety.
CESAR™ Services, LLC ("CESAR," "we," "us," or "our") operates the CESAR™ mobile application and website (the "Service"). This Privacy Policy describes how we collect, use, share, and protect your information when you use our platform for aviation logistics coordination, booking, and related services.
1. Information We Collect
We collect the following categories of information to operate and improve the Service:
- Full Legal Name: Collected for waiver signing, booking identification, and safety compliance workflows. Your legal name appears on booking manifests shared with operators and pilots.
- Booking Details: Pickup and dropoff locations (airports/heliports), travel dates and times, number of passengers, cargo descriptions, cargo weight, and special handling requirements (e.g., medical transport, radiopharmaceutical logistics).
- Contact Information: Email address and phone number provided during booking or account creation, used for booking confirmations, status updates, and safety notifications.
- Payment Information: All payment processing is handled securely by Stripe. CESAR does not store, process, or have access to your full credit card numbers, CVV, or bank account details. We retain only Stripe transaction IDs and payment status for record-keeping.
- Device Information & Analytics: We collect page views, session duration, referral sources, browser type, operating system, screen resolution, and IP-based geolocation (country/region level only) for platform analytics and performance monitoring.
- Cookies & Session Data: We use session cookies for authentication and maintaining your logged-in state. These cookies are essential for platform functionality and are not used for advertising or cross-site tracking.
2. Information We Do NOT Collect
CESAR is committed to data minimization. We explicitly do not collect:
- Social Security Numbers (SSN) or tax identification numbers
- Government-issued ID numbers (driver's license numbers, passport numbers)
- Biometric data (fingerprints, facial recognition, retinal scans)
- Photos, selfies, or image-based identity verification
- Precise GPS location data (unless you explicitly enable location services)
- Health records or medical history (medical transport bookings contain cargo descriptions only, not patient medical records)
3. How We Use Your Information
We use the information we collect for the following purposes:
- Booking Coordination: Processing and fulfilling flight booking requests, connecting you with verified operators, and communicating booking status and updates.
- Platform Operation: Maintaining user sessions, authenticating access, processing payments through Stripe, and providing customer support.
- Safety Compliance Workflows: Generating booking manifests, supporting waiver acknowledgment processes, and maintaining records as required by aviation regulatory frameworks.
- Analytics & Improvement: Understanding how users interact with the platform to improve features, fix issues, optimize performance, and enhance the user experience.
- Communications: Sending booking confirmations, status updates, safety notifications, and responding to inquiries. We do not send marketing emails unless you opt in.
4. Third-Party Services
We share information with the following third parties only as necessary to operate the Service:
- Stripe: Processes all payments on our behalf. Stripe's privacy policy governs their handling of your payment data. Visit stripe.com/privacy for details.
- Independent Operators & Pilots: Booking details (name, pickup/dropoff, dates, cargo description) are shared with the operator and pilot assigned to fulfill your booking request.
- Legal & Regulatory: We may disclose information when required by law, regulation, subpoena, court order, or other legal process.
We do not sell, rent, or trade your personal information to advertisers, data brokers, or any other third parties for marketing purposes.
5. Data Retention
- Booking Records: Retained in accordance with aviation regulatory requirements and applicable record-keeping obligations. Booking manifests, payment records, and waiver acknowledgments may be retained for the duration required by federal and state regulations.
- Analytics Data: Aggregated and anonymized analytics data is retained for up to 12 months, after which it is automatically purged or further anonymized.
- Account Data: Retained for as long as your account is active or as needed to provide the Service. You may request deletion at any time.
6. Data Security
We implement multiple layers of security to protect your information:
- HTTPS/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit.
- Server-Side Access Tokens: Authentication uses server-signed JWT tokens with expiration. Tokens are validated server-side on every request.
- Rate Limiting: API endpoints are rate-limited to prevent brute-force attacks and abuse.
- Encrypted Sessions: Session data is encrypted and stored securely. Session cookies use secure, httpOnly, and sameSite attributes.
- Access Controls: Internal access to user data is restricted to authorized personnel on a need-to-know basis.
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Data Portability: Request your data in a structured, machine-readable format.
To exercise any of these rights, contact us at cesaralejandrosantana3315@gmail.com. We will respond to verified requests within 30 days.
8. Children's Privacy
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at: