Privacy Policy

Who we are

Curbly Labs LLC, operating as Aero Crew Data, provides the pilot service at bid.aerocrewdata.com, including Bid Sorter and What Could I Hold. The service is available only to verified UPS pilots based in the United States. Aero Crew Data is independent and is not affiliated with, sponsored by, or endorsed by UPS or the Independent Pilots Association (IPA). This policy describes information handled by that pilot service. Contact support@aerocrewdata.com with privacy questions or requests. Our mailing address is 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110.

Information we collect and where it comes from

• Account and pilot identity: email address, name, password hash, employee ID, verification information, account role/status, seniority number, pilot seat, optional commute airport, and account timestamps. We compare registration details with an administrator-imported pilot roster. That roster contains pilot names, employee IDs, seniority, domicile, equipment, seat, active status, and import timestamps. The roster database intentionally excludes birth dates and hire dates.
• Policy agreement records: the approved Terms/Privacy bundle version, the account identifier, the time recorded by our server, and whether agreement occurred at registration or before Checkout. We keep these records while the account exists and remove them when the account is deleted. We do not collect an IP address or browser fingerprint for this record.
• Bidding information: preferences, saved bid workspaces and ordering, profiles, and information you provide when using the tools. Administrator-imported bid and award information supports comparisons and historical results, including information about other pilots where displayed by a feature.
• Billing information: Stripe customer, subscription, and Checkout identifiers; subscription status and period dates; cancellation status; trial and beta-access history; and processed billing-event identifiers/types/timestamps. Card and payment details are submitted to Stripe through its hosted pages. Our application does not store full card numbers or card security codes.
• Support communications: information you include when contacting us, such as your account email and a description of a problem. Please do not email full payment-card details or passwords.
• Technical and usage information: hosting and security systems may process IP addresses, request information, browser/device details, and error logs. Cloudflare Web Analytics measures visits, page views over time, referring sites, browser/device categories, and page performance. Its analytics beacon does not use tracking cookies or local storage to identify visitors across visits.

How we use information

We use information to create and secure accounts, verify pilot eligibility, show relevant bid and seniority context, save preferences and workspaces, provide billing and access, respond to support requests, investigate errors and misuse, improve the service, and meet applicable recordkeeping obligations.

Service providers and disclosures

Our service uses Vercel for frontend hosting, Railway for backend/database hosting, and Stripe for subscriptions, payments, receipts, and the customer billing portal. These providers process information needed to supply their services. Cloudflare Web Analytics provides aggregate website traffic and performance measurement.

If you use AI-assisted sorting, your written preference prompt is sent to Anthropic to translate it into sorting criteria. Avoid including information in the prompt that is unnecessary for your request, particularly sensitive personal or employer-confidential information. Manual sorting does not require this prompt-processing step.

We may disclose information when required by law, to protect accounts and the service, or as part of a business transfer subject to applicable requirements and notice.

Browser storage and tracking choices

The app uses essential browser local storage to keep sign-in tokens, account state, and display preferences. Signing out removes the app's stored sign-in tokens. Clearing browser storage can also remove saved local preferences and require you to sign in again.

We use Cloudflare Web Analytics to understand traffic to the public pilot website, including visits and page views over time. It does not use analytics cookies or browser storage to recognize returning visitors. Visit totals are not exact counts of distinct people. We do not send your account email, employee ID, bid preferences, or payment details as custom analytics fields.

The website does not load Google Analytics or display its former analytics consent popup. Our manually installed Cloudflare beacon does not load when the browser reports Global Privacy Control or Do Not Track at page load. Browser blockers may also prevent analytics collection. Stripe's hosted payment and billing pages may use their own cookies or similar technology separately from our website.

Retention and deletion

Subscription cancellation stops future renewal according to your billing settings; it does not automatically delete your account or saved bids. To delete your pilot account, open Account → Delete my account, enter your current password, and type DELETE to confirm. Deletion immediately ends access and cancels subscription billing. It removes your account profile, saved bid workspaces, sorting profiles, policy agreement records, and any saved queries or query history belonging to the account. It does not automatically issue a refund. Accounts that manage internal or shared source documents require support-assisted deletion so those documents can be transferred safely.

We retain protected codes derived from your email and verified employee ID, together with used-trial and beta-grant dates where applicable, to prevent repeat trials and preserve beta eligibility if you register again. The codes are created with a secret key; the eligibility record does not contain your original email or employee ID. An inactive account placeholder prevents old login tokens from identifying another account. A separate recovery record retains the account identifier, account creation and deletion times, protected identity codes, and applicable trial/beta dates so a backup restoration can preserve completed deletions. Shared pilot rosters and award data, Stripe payment history, support correspondence, logs, and existing backups are not automatically erased by account deletion. Contact support@aerocrewdata.com with requests concerning those records. Applicable retention requirements and exceptions may apply. We review ordinary closed support requests for deletion after 12 months, with exceptions for unresolved matters and records that must be retained. We retain protected trial and beta eligibility codes while needed to prevent repeat trials and preserve permanent beta access, and review that need annually. These are review procedures, not automatic deletion deadlines.

Your choices and requests

You can update the profile fields exposed in Account and manage billing through Account → Manage billing. Contact support@aerocrewdata.com to request access to, correction of, or deletion of information, or to ask about other privacy rights available where you live. We may verify your identity before acting to protect your information. Applicable exceptions and response deadlines depend on the request and governing law. Support will not ask you to send your password. Self-service account deletion requires entering your current password in the app.

Security and audience

The application uses password hashing and authenticated access controls. No system can guarantee absolute security. Protect your account credentials and report suspected misuse promptly.

The service is designed only for UPS pilots based in the United States and is not directed to children. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action.

Updates and contact

We will post the effective date of this policy and communicate material changes as appropriate. Privacy questions and requests: support@aerocrewdata.com. Mail: Curbly Labs LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110.