Legal

These Terms of Use, Data Agreement and Disclaimer (“Agreement”) govern access to and use of software, hosted services, manuals, user guides, instructions, training materials, templates, sample forms, reports, support information, communications, and other documents or materials provided by myFLIGHTDATA, LLC in connection with myFLIGHTDATA.com, Part135SMS.com/eSMS, Part135CASS.com/eCASS, and related services (collectively, the “Services and Materials”). This Agreement applies to each customer organization (“Customer”) and each individual authorized user (“User”), as applicable.

IMPORTANT: Access to the Services requires affirmative electronic acceptance of the then-current Agreement and applicable Privacy Policy. A myFLIGHTDATA employee or administrator shall not accept these terms on behalf of a Customer or User.

1. Customer and User Responsibilities

• Accuracy of Data. Customer and Users are responsible for reviewing and confirming the accuracy, completeness, and appropriateness of information entered into, imported into, or generated through the Services.
• Regulatory Responsibility. The Services are tools intended to assist aviation operators and personnel. They do not replace the Customer’s responsibility to determine and maintain compliance with applicable FAA, DOT, TSA, ICAO, EASA, CAA, IS-BAO, CAMTS, contractual, or other requirements applicable to its operations.
• Records and Retention. Customer is responsible for determining which records must be retained, the required retention period, and whether records should be separately downloaded, printed, exported, or archived.
• Authorized Use. Customer is responsible for assigning appropriate Users, roles, and permissions. Users shall access only information and functions they are authorized by the Customer to use.
• Account Security. Users are responsible for safeguarding usernames, passwords, authentication methods, and account access and shall promptly report suspected unauthorized access.
• Independent Review. Customer and Users remain responsible for independently evaluating the accuracy, suitability, completeness, and applicability of the Services and Materials to their operations. When appropriate, Customer should obtain advice from its own qualified legal, regulatory, maintenance, safety, technical, accounting, or other professional advisors. Information or assistance provided by myFLIGHTDATA personnel does not constitute legal advice and does not relieve Customer of its independent responsibilities.
• Duty to Review and Report Errors. Customer and Users shall promptly review information, reports, calculations, alerts, records, documents, instructions, and other Materials they intend to rely upon. Known or suspected errors, omissions, malfunctions, discrepancies, or misleading information shall be reported to myFLIGHTDATA in writing as soon as reasonably practicable.
• Opportunity to Correct. Customer shall provide myFLIGHTDATA a reasonable opportunity to investigate and, where appropriate, correct a reported issue before continuing to rely on affected information when continued reliance could reasonably increase loss or damage. To the maximum extent permitted by law, myFLIGHTDATA is not responsible for loss or damage that could reasonably have been avoided or reduced through timely written notice or a reasonable opportunity to investigate and address the issue.

2. License to Use

• myFLIGHTDATA grants Customer and its authorized Users a limited, non-exclusive, non-transferable, revocable right to access and use the Services for their intended business and operational purposes during the applicable subscription or authorized access period.
• Customer and Users may configure accounts, enter and maintain data, generate reports, and download or print information for authorized business, operational, regulatory, or recordkeeping purposes.
• Customer and Users may not copy, resell, sublicense, distribute, reverse engineer, decompile, attempt to obtain source code, circumvent security or access controls, introduce malicious code, or use the Services for unlawful or unauthorized purposes.

3. Customer Data Ownership and Permission to Process

• Customer retains ownership of records, documents, reports, company information, operational information, safety information, maintenance information, audit information, and other data submitted to or maintained in the Services by or for Customer (“Customer Data”). myFLIGHTDATA does not acquire ownership of Customer Data merely by providing the Services.
• Customer authorizes myFLIGHTDATA and its service providers to host, store, process, transmit, back up, reproduce, and display Customer Data only as reasonably necessary to provide, secure, maintain, support, improve, or troubleshoot the Services, or as otherwise authorized by Customer or required by law.
• Customer represents that it has the authority to provide Customer Data to the Services and to authorize its processing as described in this Agreement and the applicable Privacy Policy.

4. Privacy, Confidentiality, and Access to Customer Data

• myFLIGHTDATA will use reasonable administrative, technical, and operational measures appropriate to the Services to protect Customer Data against unauthorized access, use, or disclosure.
• myFLIGHTDATA will not intentionally disclose Customer Data to an unauthorized third party except as authorized by Customer, necessary to provide or support the Services, or required by applicable law, legal process, or governmental order.
• Where the Services provide Customer-controlled access for auditors, regulators, consultants, vendors, or other third parties, Customer is responsible for granting, limiting, reviewing, and revoking that access.
• Treatment of personal information and other privacy matters is further described in the myFLIGHTDATA Privacy Policy.

5. Aviation, Safety, Maintenance, and Compliance Information

• Information, alerts, calculations, reports, dashboards, status indicators, forms, templates, manuals, user guides, instructions, training materials, sample procedures, support communications, or other Services and Materials are provided as assistance tools and are not legal advice or independent legal, regulatory, maintenance, operational, airworthiness, or safety determinations by myFLIGHTDATA.
• Customer remains responsible for required inspections, maintenance decisions, airworthiness determinations, operational control, flight release decisions, safety risk decisions, corrective actions, regulatory submissions, and required approvals or authorizations.
• Use of eSMS, eCASS, or other compliance-oriented features does not by itself establish or guarantee compliance with 14 CFR Part 5, CASS requirements, IS-BAO, CAMTS, EASA, CAA, ICAO, or any other standard or regulation.
• Alerts and Reminders. Alerts, notifications, due-date reminders, dashboard status indicators, and similar features are supplemental aids only. Customer shall not rely on them as its sole means of determining regulatory compliance, maintenance status, inspection status, qualification status, record-retention status, MEL status, safety obligations, or other required due dates or limitations.
• Customer remains responsible for maintaining the records, procedures, independent controls, and oversight appropriate to its operation, including verification of regulatory and operational requirements even if an alert, reminder, report, or system status is missing, delayed, incomplete, or incorrect.

6. Service Availability, Changes, and Data Storage

• The Services are provided on a hosted basis and may be modified, updated, interrupted, or temporarily unavailable for maintenance, security, upgrades, third-party service interruptions, or other reasons.
• myFLIGHTDATA does not represent that the Services constitute permanent archival storage. Customer is responsible for performing regular backups or exports at intervals appropriate to its operation and applicable record-retention requirements. Customer should maintain separate copies of records whose loss could affect regulatory compliance, maintenance, safety, operations, business continuity, or other material obligations.
• Features, interfaces, integrations, and system functions may be added, modified, or discontinued as the Services evolve.

7. Data Access Following Termination

• Upon termination or discontinuation of a Customer account, myFLIGHTDATA may restrict further use of the Services.
• Where reasonably practicable and subject to account status, applicable law, security requirements, and technical limitations, Customer will be provided a reasonable opportunity to retrieve or export available Customer Data before routine deletion or removal from active systems.
• Customer remains responsible for obtaining and preserving records it is required to retain.

8. Disclaimer of Warranties

• TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” myFLIGHTDATA DISCLAIMS WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, UNINTERRUPTED AVAILABILITY, OR THAT USE OF THE SERVICES WILL SATISFY ANY PARTICULAR REGULATORY OR BUSINESS REQUIREMENT.

9. Limitation of Liability

• Customer and Users are responsible for decisions and actions taken based upon information maintained in or generated through the Services.
• TO THE MAXIMUM EXTENT PERMITTED BY LAW, myFLIGHTDATA SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST BUSINESS, BUSINESS INTERRUPTION, LOSS OF USE, AIRCRAFT DOWNTIME, LOST OR CORRUPTED DATA, MISSED OR INCORRECT ALERTS OR DUE DATES, REGULATORY ACTIONS OR PENALTIES, OPERATIONAL DELAYS, COSTS OF SUBSTITUTE SERVICES, OR THIRD-PARTY CLAIMS ARISING FROM OR RELATED TO THE SERVICES OR MATERIALS, INCLUDING RELIANCE ON INFORMATION, REPORTS, INSTRUCTIONS, MANUALS, USER GUIDES, SUPPORT COMMUNICATIONS, ALERTS, OR OTHER MATERIALS.
• Customer acknowledges that support, training, explanations, recommendations, or other assistance provided by myFLIGHTDATA personnel may involve judgment and may contain errors or omissions. Customer remains responsible for independently verifying material operational, regulatory, maintenance, safety, and legal decisions before acting upon such assistance.
• TO THE MAXIMUM EXTENT PERMITTED BY LAW, myFLIGHTDATA’S AGGREGATE LIABILITY ARISING FROM OR RELATED TO THE SERVICES SHALL NOT EXCEED THE AMOUNT PAID TO myFLIGHTDATA FOR THE APPLICABLE SERVICES DURING THE 30 DAYS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

10. Intellectual Property

• Except for Customer Data, all right, title, and interest in and to the Services, software, system design, interfaces, content created by myFLIGHTDATA, trademarks, service marks, logos, documentation, and related intellectual property remain the property of myFLIGHTDATA, LLC or its licensors.
• No rights are granted except the limited right to use the Services expressly provided in this Agreement.

11. Indemnification

• To the extent permitted by law, Customer agrees to indemnify and hold harmless myFLIGHTDATA, LLC and its officers, employees, contractors, and affiliates from third-party claims arising from Customer’s unlawful or unauthorized use of the Services, Customer Data supplied by Customer, violation of this Agreement, or infringement of another party’s rights by Customer or its Users.

12. Support, Fees, and Refunds

• Fees, subscription terms, implementation services, and support arrangements may be stated in an order, invoice, proposal, subscription page, or other agreement with Customer.
• Unless otherwise stated in writing, fees paid for activated Services are non-refundable except where required by law.
• Support is provided in accordance with the support practices then applicable to the Customer’s Services.

13. Electronic Acceptance and Authority

• Customer activation requires affirmative electronic acceptance by an individual representing that he or she is authorized to accept this Agreement on behalf of Customer. Individual Users may also be required to separately accept this Agreement and the Privacy Policy before accessing the Services.
• Selecting an unchecked acceptance box and then selecting “Accept & Activate,” “Accept & Continue,” or similar affirmative acceptance control constitutes an electronic acceptance of the displayed Agreement and Privacy Policy.
• myFLIGHTDATA may retain an electronic record of acceptance, including the accepting account, Customer, date and time, Agreement version, Privacy Policy version, and other reasonable audit information associated with the acceptance.
• No myFLIGHTDATA employee, contractor, or administrator is authorized to select the acceptance control on behalf of a Customer or individual User.

14. Changes to Terms

• myFLIGHTDATA may revise this Agreement from time to time. The current version will identify its revision or effective date and will be made available through the Services or myFLIGHTDATA website.
• For material revisions, myFLIGHTDATA may provide notice by email and/or conspicuous in-application notice and may require affirmative acceptance of the revised Agreement before continued access to the Services.
• Non-material administrative or clarifying revisions may become effective upon posting or on the effective date stated in the revised Agreement, to the extent permitted by law.

15. Termination and Suspension

• myFLIGHTDATA may suspend or terminate access for material violation of this Agreement, security concerns, unlawful use, nonpayment where applicable, or where continued provision of the Services is prohibited by law.
• Customer may terminate Services in accordance with its applicable subscription, order, or written agreement. Termination does not eliminate obligations that by their nature survive termination, including intellectual-property protections, payment obligations, disclaimers, limitations of liability, and provisions relating to Customer Data.

16. Export and Government Use

• The Services are subject to applicable U.S. export-control laws and regulations. Customer and Users shall not use or provide access to the Services in violation of applicable export restrictions.
• Any government use of the Services is subject to applicable law and any written terms governing that use.

17. Governing Law and Venue

• This Agreement is governed by the laws of the State of Florida, without regard to conflict-of-law principles. Unless another written agreement validly provides otherwise, disputes arising from this Agreement shall be brought in a court of competent jurisdiction in Palm Beach County, Florida.

18. Entire Agreement and Order of Precedence

• This Agreement, the applicable Privacy Policy, and any written order, proposal, subscription agreement, or other agreement expressly incorporated by reference constitute the applicable agreement concerning use of the Services. If a separately signed agreement expressly conflicts with these Terms, the separately signed agreement controls to the extent of that conflict.

19. Contact Information

1. Scope

This Privacy Policy describes how myFLIGHTDATA, LLC processes information through myFLIGHTDATA.com, Part135SMS.com (eSMS), Part135CASS.com (eCASS), and related websites and applications. It supplements the Terms of Use, Data Agreement and Disclaimer, Revision 10, and should be read together with the myFLIGHTDATA Security Architecture.

2. Information collected

Depending on features used, we process account and contact details, user permissions, aviation and pilot records, flight and maintenance records, safety and audit records, technical logs, billing and subscription information, and location data used for authorized EFB flight-following functions.

3. Customer ownership and control

Customer organizations retain ownership of their operational Customer Data. Authorized customer administrators determine which users, auditors, regulators, consultants, or vendors may access information through customer-controlled permissions.

4. Purposes of processing

We process information to deliver aviation operational and compliance features, administer accounts, provide support, maintain security, process billing, troubleshoot, and operate and improve the Services as reasonably necessary.

5. Disclosure and service providers

We do not sell Customer Data. Information may be shared with customer-authorized parties, service providers performing necessary hosting, communications, support, security, or payment functions, and when legally required. Such access is limited to applicable purposes and authorization.

Hosting and infrastructure services are provided by our hosting provider, which operates the servers and storage on which the Services run. Customer Data resides on that managed hosting environment.

6. Payments

Payments may be processed by third-party providers, including Stripe when used. Providers handle payment information under their own applicable terms and privacy notices. We may retain payment status, billing references, transaction dates and amounts as needed for administration.

7. Security

Connections to myFLIGHTDATA.com, Part135SMS.com, and Part135CASS.com are encrypted in transit using TLS 1.3 or TLS 1.2. Support for TLS 1.1, TLS 1.0, and all versions of SSL is disabled. All negotiated cipher suites provide forward secrecy using AES-GCM or ChaCha20-Poly1305 authenticated encryption. TLS certificates are issued by a publicly trusted certificate authority and renewed automatically.

We maintain role-based access controls, server-level firewalling, continuous malware scanning, and operational safeguards appropriate to the Services. No internet-based service is completely secure. Customers must safeguard credentials and report suspected unauthorized activity.

We do not currently represent that all stored information is encrypted at rest, that the Services have multi-region automatic failover, or that myFLIGHTDATA or its hosting provider holds SOC 2, ISO 27001, or equivalent third-party security certification. Additional detail is provided in the myFLIGHTDATA Security Architecture.

8. Backups, retention, and account closure

We maintain automatic account backups, reported by our hosting provider as twice daily with approximately 30 days of restore points stored off-server. Backup availability is not a guarantee of permanent retention or successful restoration. Customers are responsible for exporting and independently preserving records needed for aviation or other regulatory compliance. Following termination, data access and deletion are governed by applicable agreements, legal requirements, and technical constraints.

9. GPS and flight following

When enabled for authorized EFB/dispatch functions, GPS location data may be processed for flight following and related operational services. It is not sold for unrelated advertising.

10. Cookies and technical data

Websites and applications may use necessary session cookies and technical data for login, security, troubleshooting and service functionality. Some pages also save simple settings in the user’s browser, such as the light or dark display choice and checklist progress. These settings stay on the user’s device and are not sent to myFLIGHTDATA. Some pages load fonts from Google Fonts and, where enabled, a live chat service. These providers may receive the user’s IP address and browser information under their own privacy terms.

11. Access and privacy requests

Authorized administrators may review and manage information through available account functions. Privacy, correction, access, export, and deletion requests may be submitted using the contact information below, subject to customer authorization, law, and technical constraints.

12. Policy changes

We may update this Policy as practices or applicable requirements change. The current version and effective date will be made available through the Services or website. Material changes may be communicated and, where appropriate, require renewed acknowledgment.

13. Contact

myFLIGHTDATA, LLC | 5431 Shirley Drive, Jupiter, FL 33458 | 561-373-5962 | www.myFLIGHTDATA.com

To submit a privacy, access, correction, export, or deletion request, open a support ticket at www.myFLIGHTDATA.com/support.

1. Purpose and scope

This Security Architecture describes the technical and operational safeguards applied to the myFLIGHTDATA platform, including Part135SMS.com (eSMS) and Part135CASS.com (eCASS). It supplements the myFLIGHTDATA Privacy Policy and the Terms of Use, Data Agreement and Disclaimer, and describes current practice rather than a contractual warranty.

Statements in this document are limited to measures that have been verified. Where a safeguard is provided by a third party, that fact is identified.

2. Hosting infrastructure

The Services are hosted on a fully managed cloud environment operated by our hosting provider, deployed on major public cloud infrastructure. Server configuration is centrally managed and standardized across the platform, with security patches and operating system kernel updates applied automatically.

Continuous malware scanning with automatic remediation and server-level firewalling are applied to the hosting environment.

3. Data in transit

All data transmitted between a user's browser or mobile device and the Services is encrypted using TLS 1.3 or TLS 1.2. Support for TLS 1.1, TLS 1.0, SSL 3, and SSL 2 is disabled. This applies to myFLIGHTDATA.com, Part135SMS.com (eSMS), and Part135CASS.com (eCASS).

All negotiated cipher suites provide forward secrecy and use AES-GCM or ChaCha20-Poly1305 authenticated encryption. The platform supports post-quantum hybrid key exchange.

TLS certificates are issued by a publicly trusted certificate authority and are provisioned and renewed automatically for each domain and subdomain.

The transport configuration of all three platforms was verified in October 2026 using the public Qualys SSL Labs server test, with each receiving an overall rating of A. Operators may reproduce this assessment at any time.

4. Data at rest

Customer Data is stored in managed databases within the hosting environment described in Section 2. myFLIGHTDATA does not currently represent that all stored information is encrypted at rest. Operators requiring encryption-at-rest attestation should contact myFLIGHTDATA before relying on any such assumption.

5. Backups and recovery

Account files and databases are backed up automatically, reported by our hosting provider as twice daily with approximately 30 days of restore points. Backups are stored off-server and provide multiple restore points, with recovery to a specific point in time within the retention window.

Backups exist for disaster recovery. They are not a records-retention service and are not a guarantee of permanent retention or successful restoration. Operators remain responsible for retaining records required by applicable regulation, and the Services provide export functions for that purpose.

6. Identity and access management

Role-based access control separates Operator, Pilot, Maintenance, and FAA user roles so that each user reaches only the functions and records permitted by the assigned role.

The operator's designated administrator controls who is granted access, including any access provided to auditors, inspectors, or FAA personnel, and is responsible for revoking access when personnel change.

Audit logging records user logins and record modifications.

7. Third-party certifications

myFLIGHTDATA does not hold SOC 2, ISO 27001, or equivalent third-party security certification, and does not represent that its hosting provider holds such certification for the hosting platform. The underlying public cloud infrastructure providers maintain their own certifications; those certifications apply to the infrastructure operators and not to myFLIGHTDATA.

This section will be updated if certification status changes.

8. Operator responsibilities

Operators and users are responsible for safeguarding usernames, passwords, and account access, and for promptly reporting suspected unauthorized access.

Operators are responsible for assigning roles and permissions appropriate to each user and for removing access when personnel change.

Operators are responsible for exporting and independently preserving records their operation is required to retain, and for determining the applicable retention period.

9. Reporting a security concern

Suspected vulnerabilities, unauthorized access, or other security concerns should be reported to myFLIGHTDATA promptly by opening a support ticket at www.myFLIGHTDATA.com/support, or by using the contact information below.

10. Contact

myFLIGHTDATA, LLC | 5431 Shirley Drive, Jupiter, FL 33458 | 561-373-5962 | www.myFLIGHTDATA.com

To submit a security question or request documentation regarding the safeguards described in this document, open a support ticket at www.myFLIGHTDATA.com/support.