AV-COMPAviation Compliance · Canada
POLICIES & DISCLOSURES · VERSION 2026-10-12
Profile visibility defaults to Public, with publication subject to review. Account access does not require an approval badge. Private operational records and credential references are excluded. You can make your account profile private in Profile & Privacy. Professional directory publication has separate consent and review. Recruitment proposals are private to sender and recipient, and can be disabled in profile settings.
The AV-COMP service is responsible for personal information it collects and handles. Contact info@av-comp.ca with “Privacy request” in the subject for access, correction, deletion, consent withdrawal, privacy questions or complaints. We may request proportionate identity confirmation before releasing or changing personal information. Do not email a passport, driver’s licence, medical chart or password.
Depending on your use and role, we handle account identifiers, name, email, telephone, requested account type, approval and role assignments; profile photos, banners, biography, website, headline, organization, location, skills, qualifications, experience and education; organization, flight, training, maintenance and scheduling records; clinic appointment and certificate references; radio training records; credential review references and findings; private recruitment proposals and responses; feedback, correspondence, audit events, security logs and source retrieval records. Feedback abuse prevention uses a keyed IP-derived identifier rather than storing the raw IP in the feedback record. Hosting and authentication providers may separately process IP addresses and technical logs.
We use information to authenticate users, provide requested workspaces and records, manage approval and verification, publish profiles you choose to display, respond to feedback, protect the service, keep accountable audit records and meet applicable legal obligations. We do not treat signup as consent to unrelated marketing. Optional publication, verification and nonessential communications require an appropriate separate choice; withdrawing an optional choice does not cancel free account approval.
Approved account profiles are public by default: display name, account type, profile photo, banner, headline, organization, location, biography, skills, self-described qualifications, experience, education, supplied website and badge status. Use /dashboard/profile to change visibility. Account email and telephone, private flight or medical records, credential numbers and identity documents are not part of that public account profile. Engineer, CAME and ROC-A professional directory pages can publish business contact details under their own listing settings, consent and review; the account privacy toggle does not remove an independently published organization listing. External source directories may contain information already published by an official or public source. Contact us to correct or review a listing. Public information can be indexed or copied by others; hiding it here cannot immediately remove third-party copies.
Clerk provides account authentication, Supabase provides database and related storage services, and Vercel provides hosting. They process information needed to operate those services under their applicable terms and privacy practices. Interactive map viewing sends ordinary browser requests and the viewed map area to OpenStreetMap tile services. External booking, airport and regulator links are governed by their operators’ policies. Authorized organization members see records permitted by their assigned roles; AV-COMP administrators can review registrations, records and audit history, with audited read-only user view. We may disclose information where required by law or necessary to investigate security incidents, subject to applicable limits.
Paid government-issued ID verification and its subscription provider are not currently connected. AV-COMP does not presently offer passport scanning or charge that subscription. Before activation, the provider, price, information requested, biometric processing if any, retention and consent choices will be disclosed separately. Do not upload identity scans through feedback or ordinary profile fields. Manual pilot credential review is separate and requires active verified identity.
Information may be processed in countries outside Canada by service providers and may be subject to local lawful access. Authentication, owner and organization-role restrictions, publication review and audit records limit access; no online service can guarantee absolute security. Retention depends on the purpose, record category and applicable legal or aviation obligations. Account deletion or withdrawal requests are reviewed to remove or de-identify information no longer needed; required financial, safety, dispute, audit or compliance records may need to be retained with restricted access. We will explain any lawful limitation affecting your request. Backups may persist until their normal replacement cycle.
Authentication and security use cookies or equivalent browser storage. The application also uses local storage and service-worker caching for interface preferences and selected public offline resources. Local caches can remain on shared devices; sign out and clear browser storage where appropriate. There is no general advertising-consent permission implied by using this site.
You may request information about our handling of your personal information, access and corrections, deletion where applicable, and withdrawal of optional consent. We handle requests within the applicable legal time limits and explain exceptions or extensions. You may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial authority. Canadian privacy obligations can differ by province and record type; organizational clients remain responsible for the records and consents they submit.
The version date identifies this published policy. Material new uses or disclosures will be explained before implementation and additional consent sought where required. A policy update does not waive your statutory rights.
PIPEDA fair information principles · Meaningful consent guidance