Privacy Policy

Bryghton Media LLC ("Bryghton Media", "we", "us") is a small web design, marketing and software company in the Hudson Valley, New York. We make Click to Cockpit, software that flight schools use to manage their leads and students. This policy explains what we collect, why, who we share it with, and the choices you have.

Two different roles, depending on who you are:

Visitors and customers of Bryghton Media (people who use our website, fill in our forms, or sign their school up for Click to Cockpit): we decide how your information is used. This policy covers that.
People who contact a flight school that uses Click to Cockpit (for example, you asked a school about flight lessons): the school decides how your information is used, and its privacy policy applies. We process your information only for the school, under a contract (our Data Processing Addendum). Section 5 explains what we do with it. For requests about your information, contact the school first; if you contact us, we’ll pass your request to the school and help it respond.

1. What we collect

From our website and forms

What you type into a form: name, business name, website, email, mobile number, and optional answers (what your business does, timing, budget range), plus whether you agreed to texts.
Which ad or link brought you (campaign tags such as utm_source, and Meta’s click ID).
Our web server briefly logs your IP address and browser details to block spam and keep the site secure.
If you fill in a lead form inside Facebook or Instagram, Meta sends us what you entered.

When your school signs up for Click to Cockpit

Account details: names, work emails and phone numbers of the owner and team members, school name, website, and settings.
Billing: Stripe processes payments. We receive the plan, amounts, dates, the last 4 digits and expiry of the card, and billing address, never the full card number.
Usage and security information: logins, 2-step login events, IP address, device and browser, pages used, and an audit log of important actions (for example, exports and deletions).
Support conversations with us by email, text or phone.

Information schools put into Click to Cockpit ("School Data") Leads’ and students’ names, phone numbers, emails, messages, notes, how they found the school, training progress, bookings and payments records, plus proof of their consent to be contacted (the wording they agreed to, the time, the page and the IP address). We designed Click to Cockpit not to store Social Security numbers, FAA medical details, passport or citizenship documents, license scans, full birth dates or card numbers.

2. How we use it

To reply to your request and provide the service you asked for.
To run Click to Cockpit: create accounts, send the texts, emails and calls a school sets up, keep each school’s data separate, back it up, and support you.
To bill you, prevent fraud, and keep the service secure (for example, spotting unusual logins).
To improve our products, using usage information and de-identified, aggregated statistics.
To follow up about our services, which you can stop at any time.
To measure which of our ads bring in real requests.
To meet legal obligations and enforce our terms.

We only text you about Bryghton Media if you ticked the box saying it’s OK. Reply STOP to any text and we won’t text you again. Message and data rates may apply.

3. Cookies and similar technology

Our website forms don’t set cookies. Our ad landing pages may use the Meta Pixel, which uses cookies to tell Meta that someone visited a page or sent a request after seeing one of our ads, so we can measure our ads and show them to people likely to be interested. Meta handles that data under its own privacy policy. You can control ad personalization in your Facebook ad settings and block or clear cookies in your browser.
The Click to Cockpit app uses cookies only to keep you logged in and secure. They’re required for the app to work.
A school’s website chat widget or tracking script (if the school installs it) may store an identifier so the school can see which pages a visitor viewed before asking about lessons. That’s under the school’s control and its own privacy policy.

4. Who we share it with

We don’t sell personal information and don’t share it for cross-context behavioral advertising, except the Meta Pixel ad measurement described above. We share it only:

With service providers that run our business and Click to Cockpit, under contracts that limit their use of it. The current list is on our Subprocessors page (for example, Supabase for the database, Hetzner for servers, Stripe for payments, Resend for email, and AI providers if a school turns on AI features).
With a flight school, for information about that school’s own leads and students.
If the law requires it, to protect rights and safety, or to stop fraud or abuse.
If our business is sold or merged, to the new owner, who must keep this policy’s promises.

5. Information we process for flight schools

When a school uses Click to Cockpit, we process its leads’ and students’ information only on the school’s instructions: to store it, show it to the school’s team, send the messages the school sets up, and keep it secure. We don’t use it to market to anyone, don’t sell it, and don’t combine it with other schools’ data. If a school switches on AI features, the relevant text is sent to our AI provider only to produce that result for the school, and the provider may not use it to train its models. AI output can be wrong; the school is responsible for reviewing it and for any message it sends.

Texts from a flight school: a school texts you only if you agreed on its form or texted it first. Reply STOP to stop texts from that school, or HELP for help. Message and data rates may apply. We don’t share mobile numbers or text-message consent with third parties or affiliates for their own marketing.

6. How long we keep it

Website inquiries: as long as we’re talking or working together, then a reasonable time for our records. Ask us and we’ll delete them.
Click to Cockpit account and School Data: while the account is open. After a school cancels, it can ask for an export within 30 days; then we delete School Data from live systems. Backup copies roll off on their normal schedule, within 30 days.
Billing records: as long as tax and accounting law requires (usually up to 7 years).
Consent and opt-out records: as long as needed to prove consent and honor opt-outs.

7. How we protect it

Encryption in transit (HTTPS) and at rest, each school’s data walled off from every other school’s at the database level, 2-step login, limited staff access, audit logs, and regular backups. No system is perfectly secure, and we can’t guarantee that information will never be accessed, lost or disclosed without permission. If a breach affects your information, we’ll tell you (or the school) as the law requires.

8. Your choices and rights

You can ask us what we have about you, ask us to correct it, or ask us to delete it, and you can opt out of our marketing anytime. Email bryghton@bryghtonmedia.com. We’ll confirm your request (we may ask you to verify who you are) and reply within 45 days. We won’t treat you differently for making a request.

State privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas and other states with consumer privacy laws), you may have rights to know, access, correct, delete and get a copy of your information, and to opt out of the sale or sharing of it or of targeted advertising. Some of these laws only apply to larger businesses, but we honor these requests from anyone. You can use an authorized agent. If we deny a request, you can appeal by replying to our answer.

For leads and students of a flight school: please contact the school. If you contact us, we’ll forward your request to the school.

9. Children

Our services are for businesses. We don’t knowingly collect information from children under 13. Flight schools may have student pilots under 18; Click to Cockpit lets schools mark a contact as under 18 and send texts to a parent or guardian instead. If you think we have a child’s information without permission, email us and we’ll delete it.

10. Where data is stored

Click to Cockpit is for US flight schools. Today its database is hosted by Supabase in Canada (Montreal region) and its application servers by Hetzner in Germany. Some service providers (for example Stripe and Resend) process data in the United States. Wherever it’s processed, we protect it as this policy describes. If we move where data is stored, we’ll update this section and our Subprocessors page. By using our services, you understand your information may be processed in these countries, whose privacy laws may differ from your state’s.

11. Changes

If we change this policy, we’ll update this page and the date at the top. For material changes affecting Click to Cockpit customers, we’ll email account owners before they apply.

12. Contact

Bryghton Media LLC, Hudson Valley, New York · bryghton@bryghtonmedia.com · (845) 714-9674