CAVU Aircraft Detailing

Privacy Policy

Effective Date: June 14, 2026

Important Notice

This Privacy Policy describes how CAVU Aircraft Detailing collects, uses, stores, and protects personal information belonging to customers, employees, website visitors, and SMS subscribers. Please read this document carefully. By engaging our services, visiting our website, or consenting to receive communications from us, you acknowledge the practices described herein.

Section 1. Introduction

CAVU Aircraft Detailing ("CAVU," "we," "us," or "our") is a premium aircraft detailing service provider committed to delivering exceptional care for general aviation and commercial aircraft. The acronym "CAVU" — Ceiling and Visibility Unlimited — reflects our commitment to clarity, precision, and transparency in all aspects of our operations, including how we handle personal information.

We recognize that privacy is a fundamental right, and we are committed to protecting the personal information entrusted to us by our customers, employees, prospective clients, website visitors, and SMS subscribers. This Privacy Policy sets forth our practices regarding the collection, use, disclosure, retention, and protection of personal data, and reflects our obligations under applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), the Telephone Consumer Protection Act (TCPA), and applicable Federal Aviation Administration (FAA) recordkeeping requirements.

1.1 Scope

This Policy applies to:

  • Customers — individuals and entities that purchase or inquire about detailing services from CAVU;

  • Employees and Contractors — individuals employed by or contracted with CAVU in any capacity;

  • Website Visitors — individuals who visit our website or interact with our digital properties; and

  • SMS Subscribers — individuals who have opted in to receive text message communications from CAVU.

1.2 Contact Information

If you have questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us at:

CAVU Aircraft Detailing

10126 Golden Crest Dr

Saint John, IN, 46373

Phone: +1-440-465-6050

Email: dschaefer@cavudetailing.com

Website: cavudetailing.com

Section 2. Information We Collect

CAVU collects personal information necessary to operate our business, deliver services, comply with legal obligations, and communicate effectively with customers, employees, and other individuals. We collect only the information reasonably required for these purposes. The categories of personal information we collect include the following:

2.1 Personal Identifiers

  • Full legal name;

  • Email address;

  • Phone number (including mobile numbers used for SMS communications);

  • Mailing address and/or billing address.

2.2 Aircraft Information

  • FAA-registered tail number (N-number);

  • Aircraft make, model, and year;

  • Aircraft color, finish type, and surface condition;

  • Service history with CAVU, including dates of service, services performed, and products applied.

2.3 Payment Information

CAVU collects information necessary to process payment for services rendered, including billing name, billing address, and payment method type. CAVU does not store, process, or retain full credit or debit card numbers, CVV codes, or bank account numbers. All payment transactions are processed through a third-party payment processor (see Section 7), which maintains its own security standards and privacy practices. CAVU may retain transaction confirmation numbers and invoices for accounting and recordkeeping purposes.

2.4 Employee Data

For individuals employed by or contracting with CAVU, we collect:

  • Full legal name, date of birth, and government-issued identification;

  • Social Security Number (SSN) or Tax Identification Number (TIN);

  • Employment records, including offer letters, performance reviews, and disciplinary records;

  • Payroll data, direct deposit banking information, and compensation records;

  • IRS tax withholding forms (e.g., Form W-4, Form I-9);

  • Emergency contact names and phone numbers;

  • Work schedule and job assignment records;

  • Mobile phone numbers for job-related SMS communications.

2.5 Website Usage Data

When you visit our website, we may automatically collect certain technical information, including:

  • Internet Protocol (IP) address;

  • Browser type and version;

  • Operating system;

  • Pages visited, date and time of visit, and time spent on pages;

  • Referring URL;

  • Cookie identifiers and session data (see Section 8).

2.6 SMS Opt-In Consent Records

  • Records of SMS consent, including the date, time, and method by which consent was obtained;

  • Opt-in source (e.g., web form submission, verbal consent at booking, employee onboarding documentation);

  • Opt-out records and timestamps;

  • Communication preferences.

Section 3. How We Use Your Information

CAVU uses personal information for the following purposes, which are each grounded in a legitimate business interest, contractual necessity, legal obligation, or your express consent:

  • Service Delivery: Scheduling, dispatching, and delivering aircraft detailing services to customers, including accessing aircraft-specific information necessary to perform the work safely and effectively;

  • Payment Processing: Processing customer payments, generating and delivering invoices and receipts, and maintaining financial records;

  • Appointment Communications: Sending appointment confirmations, pre-service reminders, and post-service follow-up communications via email or SMS;

  • SMS Notifications: Delivering job status updates, crew dispatch confirmations, estimated time-of-arrival notifications, and other service-related messages via text message to customers and employees who have consented to receive such communications;

  • Employee Management: Processing payroll, administering employee benefits, managing HR communications, tracking work schedules, and issuing job assignments to crew members;

  • Marketing and Promotions: With your prior express consent, sending promotional offers, service announcements, and other marketing materials. You may withdraw consent at any time;

  • Website Improvement: Analyzing website usage data to improve the functionality, performance, and user experience of our website;

  • Legal Compliance: Fulfilling obligations imposed by federal, state, and local law, including tax reporting, employment law compliance, and FAA-related recordkeeping;

  • Internal Analytics and Business Operations: Conducting internal analysis, performance measurement, service quality reviews, and other legitimate business operations.

Section 4. SMS Communications & Twilio A2P 10DLC Compliance

4.1 SMS Programs

CAVU operates SMS messaging programs for the following purposes:

  • Customer Service Updates: Notifications regarding appointment scheduling, service status, completion confirmations, and billing reminders;

  • Employee Job Notifications: Job assignments, schedule changes, crew dispatch instructions, and internal operational communications sent to employees;

  • Appointment Reminders: Automated or manual reminders sent to customers in advance of scheduled service appointments.

4.2 Opt-In Process

CAVU obtains affirmative express written consent before sending any marketing or recurring informational SMS messages. Consent is obtained through one or more of the following methods:

  • Web Form: Customers who complete a service request, booking form, or contact form on our website may elect to opt in to SMS communications by checking a clearly labeled consent checkbox. The opt-in language will be displayed adjacent to the checkbox;

  • Verbal Consent at Booking: Customers who book services by phone may provide verbal consent to receive SMS communications, which will be documented in our customer relationship management (CRM) system;

  • Employee Onboarding: Employees consent to receive job-related SMS communications as part of the onboarding process by signing an acknowledgment form that clearly describes the nature, frequency, and opt-out method for such messages.

SMS consent is separate from and independent of any consent to receive email communications. Consent records, including the source, date, and time of consent, are retained in accordance with applicable law and TCPA compliance best practices.

4.3 Message Frequency

Message frequency varies based on service activity. Customers actively scheduling or receiving services may receive multiple messages per engagement. Employees may receive job-related messages as frequently as operational needs require. You will not receive unsolicited promotional messages without your prior express written consent.

4.4 Opt-Out Instructions

You may opt out of receiving SMS messages from CAVU at any time by replying STOP to any text message you receive from us. Upon receipt of your opt-out request, we will send a one-time confirmation message and promptly remove you from the applicable messaging list. Following opt-out, no further messages will be sent unless you re-subscribe.

4.5 Help Instructions

To receive assistance regarding our SMS program, reply HELP to any message received from CAVU, or contact us directly at [Email Address] or [Phone Number].

Carrier Disclaimer

Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. CAVU is not responsible for any charges incurred by your mobile carrier as a result of receiving SMS messages.

4.6 No Sharing of Mobile Information for Marketing

Mobile phone numbers, opt-in data, and SMS consent records collected by CAVU will not be shared with, sold to, or transferred to any third parties or affiliates for marketing or promotional purposes. This restriction applies without exception. Mobile information may be shared with Twilio solely for the purpose of message delivery (see Section 4.7 and Section 7).

4.7 SMS Service Provider — Twilio

CAVU utilizes Twilio, Inc. as its third-party SMS platform and delivery provider. Personal data, including mobile phone numbers and message content, is transmitted to Twilio for the purpose of delivering SMS messages on CAVU's behalf. Data shared with Twilio is governed by Twilio's Privacy Policy, available at www.twilio.com/legal/privacy. CAVU maintains a data processing agreement with Twilio consistent with applicable law.

4.8 Consent Is Not a Condition of Service

Consent to receive SMS communications is not a condition of purchasing or receiving services from CAVU. Customers who decline to receive SMS messages will continue to receive service communications through alternative channels, such as email or phone calls, as available.

4.9 A2P 10DLC Compliance

CAVU's SMS messaging programs are registered and compliant with the Application-to-Person (A2P) 10-Digit Long Code (10DLC) industry standards established by major U.S. wireless carriers. This registration ensures that messages sent by CAVU are properly identified as business-originated communications, improving deliverability and protecting recipients from spam. CAVU maintains current and accurate campaign registrations and will update such registrations as required by carrier and industry guidelines.

Section 5. Employee Data Handling

5.1 Categories of Employee Data

CAVU collects and maintains the following categories of data relating to employees and contractors:

  • Human Resources records (offer letters, employment agreements, disciplinary records, performance evaluations);

  • Payroll records (compensation history, pay stubs, direct deposit information);

  • Federal and state tax forms (Form W-4, Form W-2, Form 1099, Form I-9);

  • Emergency contact information;

  • Job assignment and scheduling records;

  • Mobile phone numbers used for SMS-based job communications.

5.2 Purposes of Use

Employee data is used for the following purposes:

  • Processing payroll and disbursing compensation;

  • Complying with federal and state employment law, including tax withholding, reporting obligations, and I-9 verification;

  • Scheduling crew assignments and coordinating detailing operations;

  • Administering employee benefits, where applicable;

  • Maintaining records required for workers' compensation and liability purposes.

5.3 Employee SMS Communications

CAVU sends SMS messages to employees for operational purposes, including job assignments, schedule changes, crew dispatch coordination, and safety notifications. Employee SMS opt-in consent is obtained during the onboarding process through execution of a written acknowledgment. Employees may opt out of SMS communications at any time by replying STOP to any message or by notifying their supervisor or HR representative in writing. Opting out of SMS communications will not affect an employee's employment status, compensation, or any other terms of employment. Alternative communication methods will be made available to employees who opt out.

5.4 Third-Party Disclosure

Employee data will only be disclosed to third parties in the following circumstances:

  • To payroll processing providers for the purpose of administering compensation and tax obligations;

  • To benefits providers (health insurance, retirement plan administrators, etc.) as necessary to administer benefits;

  • To government agencies as required by applicable law (e.g., IRS, state tax authorities, Department of Labor);

  • To Twilio for the delivery of job-related SMS messages, subject to Section 4.7 of this Policy.

Employee data is never sold, rented, or shared for marketing purposes.

5.5 Retention of Employee Records

Employee records are retained in accordance with applicable federal and state employment laws. At a minimum:

  • Payroll records: retained for a minimum of three (3) years pursuant to the Fair Labor Standards Act (FLSA);

  • Form I-9 records: retained for three (3) years from the date of hire or one (1) year after termination, whichever is later;

  • Tax records: retained for a minimum of four (4) years per IRS guidance;

  • General HR records: retained for a minimum of one (1) year following termination of employment, or longer if required by applicable state law.

Records subject to a legal hold will be retained until the hold is lifted, regardless of standard retention schedules.

Section 6. Customer Data Handling

6.1 Categories of Customer Data

CAVU collects and maintains the following data regarding its customers:

  • Contact information (name, email address, phone number, mailing/billing address);

  • Aircraft information (tail number, make, model, year, finish type, and service history);

  • Service records (dates of service, services performed, products used, crew notes);

  • Payment information (transaction records, invoice history — but not full card numbers; see Section 2.3).

6.2 Purposes of Use

Customer data is used to:

  • Schedule and deliver aircraft detailing services;

  • Process payments and issue invoices, receipts, and statements;

  • Maintain service history records to ensure continuity and quality of care across appointments;

  • Provide warranty-related information and follow-up services;

  • Send appointment reminders and service updates via email or SMS (with consent);

  • Respond to customer inquiries and resolve service-related issues.

6.3 No Sale or Rental of Customer Data

CAVU does not sell, rent, lease, or otherwise transfer customer personal information to third parties for their own marketing or commercial purposes. Customer data is shared only as described in Section 7 of this Policy or as required by law.

6.4 Customer SMS Communications

Customers who have opted in to SMS communications will receive appointment reminders, service status updates, and completion notifications. The opt-in and opt-out process is described in full in Section 4 of this Policy. Customer SMS consent records are maintained and are available for review upon request.

6.5 Retention of Customer Records

  • Customer service records (including aircraft details and service history) are retained for a minimum of seven (7) years from the date of last service;

  • Payment and financial records are retained in accordance with applicable federal and state tax and accounting laws;

  • SMS consent records are retained for a minimum of five (5) years from the date of last interaction.

Section 7. Third-Party Services

CAVU works with a limited number of trusted third-party service providers to operate our business and deliver services. Where applicable, personal data is shared with these providers only to the extent necessary to perform the services described below. Each third party is required to handle personal information in a manner consistent with applicable law and acceptable data security standards.

ProviderPurposeData SharedTwilio, Inc.SMS message delivery platform (A2P 10DLC)Mobile phone numbers, message content[Payment Processor — e.g., Stripe / Square]Payment processing and transaction managementBilling name, billing address, payment method data[Scheduling / CRM Software Provider]Customer and job scheduling, service record managementContact info, aircraft info, appointment dataGoogle AnalyticsWebsite traffic analysis and performance measurementAnonymized browsing data, IP address (anonymized)[Payroll Processor]Employee payroll administration and tax reportingEmployee names, SSNs, compensation data

Each third-party provider maintains its own privacy policy governing its data practices. CAVU is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services with which you interact independently. Relevant policies include:

CAVU does not sell personal data to any third party. Personal data is shared with third-party providers solely for the operational purposes described above, and not for any third party's independent marketing or commercial benefit.

Section 8. Website Usage & Cookies

8.1 Types of Cookies Used

Our website may use the following categories of cookies:

  • Essential Cookies: Cookies strictly necessary for the website to function, such as session cookies that allow you to navigate our site and use its features. These cookies do not require your consent, as they are essential to service delivery;

  • Analytics Cookies: Cookies used to collect aggregated, anonymized information about how visitors use our website (e.g., pages visited, time on site). This data helps us improve our website's performance and content. We use Google Analytics for this purpose, with IP anonymization enabled;

  • Preference Cookies: Cookies that remember your preferences and settings (e.g., language preferences) to improve your experience on return visits.

8.2 Managing and Disabling Cookies

You may manage, restrict, or delete cookies at any time through your web browser's settings. Most browsers allow you to refuse new cookies, disable existing cookies, or receive a warning when a website tries to set a cookie. Please note that disabling certain cookies may affect the functionality of our website. For guidance on managing cookies, please consult your browser's help documentation.

8.3 No PII from Cookies Without Consent

CAVU does not collect personally identifiable information through cookies without your prior express consent. Analytics data collected through cookies is processed in anonymized or aggregated form and is not used to identify individual users without consent.

8.4 Google Analytics

CAVU uses Google Analytics to understand how visitors interact with our website. Google Analytics collects data such as pages visited, session duration, and traffic source in anonymized form. We have enabled IP anonymization to ensure that no full IP addresses are stored by Google Analytics. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

Section 9. Data Retention

9.1 General Retention Schedule

CAVU retains personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The following general retention schedule applies:

Data TypeRetention PeriodCustomer service and aircraft records7 years from date of last serviceCustomer payment and invoice recordsAs required by applicable tax and financial law (typically 7 years)Employee payroll recordsMinimum 3 years (FLSA); tax records minimum 4 years (IRS)Employee HR recordsMinimum 1 year post-termination or as required by applicable state lawForm I-9 records3 years from hire date or 1 year after termination, whichever is laterSMS opt-in / opt-out consent recordsMinimum 5 years from date of last interactionWebsite analytics dataUp to 26 months (Google Analytics default)

9.2 Secure Deletion

When personal information is no longer required pursuant to the retention schedule above, CAVU will dispose of it through secure and appropriate means. Electronic records will be permanently deleted or anonymized using industry-standard methods. Physical documents containing personal information will be shredded or otherwise destroyed in a manner that renders them unreadable and irretrievable.

9.3 Legal Hold

Notwithstanding the retention periods above, CAVU reserves the right to retain personal information beyond the standard retention period when required to do so by a legal hold, regulatory investigation, litigation, audit, or applicable law. Records subject to a legal hold will be segregated and retained until the hold is formally lifted by authorized personnel or legal counsel.

Section 10. Data Security

CAVU employs reasonable and appropriate physical, electronic, and administrative safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. These measures include, but are not limited to:

10.1 Technical Safeguards

  • Encrypted Data Transmission: All data transmitted between your browser and our website is encrypted using industry-standard HTTPS/TLS (Transport Layer Security) protocols;

  • Access Controls: Access to personal information is restricted on a need-to-know basis. Only authorized personnel with a legitimate business purpose are granted access to sensitive data;

  • Secure Storage: Electronic records containing personal information are stored in secured systems with appropriate authentication and access controls;

  • Third-Party Security Standards: CAVU works only with third-party providers that maintain reasonable and appropriate security standards, including PCI-DSS compliance for payment processors.

10.2 Administrative Safeguards

  • CAVU maintains internal privacy and data security policies and procedures;

  • Employees with access to personal information are trained on data handling and privacy compliance obligations;

  • Access privileges are reviewed periodically and revoked upon termination of employment or cessation of business need.

10.3 Physical Safeguards

  • Physical documents containing personal information are stored in locked facilities or cabinets;

  • Access to physical records is restricted to authorized personnel only.

10.4 Incident Response and Breach Notification

In the event of a data security incident that results in unauthorized access to or disclosure of personal information, CAVU will take prompt remedial action to contain and assess the incident. Where required by applicable federal or state law, affected individuals and/or regulatory authorities will be notified in accordance with the timelines and requirements prescribed by law. CAVU will cooperate fully with any resulting investigation and implement corrective measures to prevent recurrence.

Please note that no method of electronic transmission or storage is completely secure. While CAVU takes data security seriously and strives to protect your information, we cannot guarantee absolute security.

Section 11. Your Rights

Depending on your jurisdiction and your relationship with CAVU, you may have the following rights with respect to your personal information:

11.1 General Rights

  • Right to Access: You have the right to request a copy of the personal information CAVU holds about you;

  • Right to Correction: You have the right to request correction of inaccurate or incomplete personal information;

  • Right to Deletion: You have the right to request deletion of your personal information, subject to applicable legal retention obligations;

  • Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from CAVU at any time, without affecting your ability to receive transactional communications;

  • Right to Opt Out of SMS: You have the right to opt out of SMS communications at any time by replying STOP to any message (see Section 4.4).

11.2 California Residents — CCPA Rights

If you are a resident of California, you have the following additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: The right to request disclosure of the categories and specific pieces of personal information collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom your information is shared;

  • Right to Delete: The right to request deletion of personal information collected about you, subject to certain exceptions;

  • Right to Correct: The right to request correction of inaccurate personal information;

  • Right to Opt Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information. CAVU does not sell or share personal information for cross-context behavioral advertising purposes;

  • Right to Limit Use of Sensitive Personal Information: The right to limit CAVU's use of sensitive personal information to purposes permitted by the CPRA;

  • Right to Non-Discrimination: CAVU will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive a different level or quality of service as a result of exercising these rights.

To submit a verifiable consumer request under the CCPA/CPRA, please contact us using the information provided in Section 14. We will respond to your request within 45 days, with an extension of an additional 45 days where reasonably necessary, as permitted by law.

11.3 How to Exercise Your Rights

To exercise any of the rights described in this Section, please contact CAVU by:

  • Email: dschaefer@cavudetailing.com

  • Phone: +1-440-465-6050

  • Mail: 10126 Golden Crest Dr, Saint John, IN, 46373

We may need to verify your identity before processing your request. Identity verification may require you to provide information that CAVU can match against records we already hold about you.

Section 12. Children's Privacy

CAVU's services are not directed at, intended for, or designed to attract children under the age of thirteen (13). CAVU does not knowingly collect, use, or disclose personal information from children under the age of 13. Our website and SMS programs are not targeted at, nor intended for use by, minors.

If CAVU becomes aware that it has inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete such information from our records. If you are a parent or guardian and believe that your child has provided personal information to CAVU without your consent, please contact us immediately using the contact information in Section 14.

Section 13. Changes to This Policy

CAVU reserves the right to update, revise, or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or industry standards. When we make changes, we will update the "Effective Date" at the top of this document.

13.1 Material Changes

For material changes — defined as changes that significantly affect the scope of data collection, the purposes of use, or the rights of individuals — CAVU will provide advance notice through one or more of the following methods:

  • A prominent notice posted on our website homepage or service portal;

  • A notification sent via email to customers and employees for whom we have a valid email address on file;

  • An SMS notification to opted-in subscribers, where appropriate.

13.2 Continued Use

Your continued use of CAVU's services or website following the effective date of any revised Privacy Policy constitutes your acknowledgment of, and agreement to, the updated terms. We encourage you to review this Policy periodically to remain informed of our data practices.

Section 14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or CAVU's data practices, or if you wish to exercise any of your rights described herein, please contact us through any of the following channels:

CAVU Aircraft Detailing

10126 Golden Crest Drive

Saint John, IN, 46373

Phone: +1-440-465-6050

Email: dschaefer@cavudetailing.com

Website: cavudetailing.com

We are committed to addressing your inquiries promptly and professionally. For verifiable consumer requests under the CCPA/CPRA, please see Section 11.3 for identity verification requirements.

Acknowledgment

By engaging CAVU Aircraft Detailing's services, visiting our website, or opting in to any of our communications programs, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

CAVU Aircraft Detailing — Privacy Policy

Document Version 1.0  |  Effective Date: June 14, 2026

This document is subject to change. The current version is available upon request and on our website at [Website URL].

© 2026 CAVU Aircraft Detailing. All rights reserved.