Privacy

If you request or join a flight

• What you type in: your name, email address, phone number if you give one, the route and dates you want, how many seats, your maximum price, your preferred time of day, and anything you write in the notes box.
• What happens to your request: which trip it joined, whether it flew, what it cleared at, what you were charged and what was refunded.
• Passenger details for the manifest: full legal names and, for flights where the operator requires it, passenger weights. This is a safety input for weight and balance, not a data grab.

If you list seats on your charter

• Your name, email, phone, the flight's route, date and time, the aircraft, the charter company operating it and their certificate number if you have it, how many seats you are selling and at what price, plus anything in the notes.
• Your first name is shown publicly on the listing — “Marcus has 4 seats available on their private charter”. Your surname, email and phone are not.

If you are an operator

• Company details, contact name, email, phone, bases, your Part 135 certificate number, your Part 298 registration, safety ratings, insurance limits and expiry, and your fleet. Your password is stored as a scrypt hash and cannot be read back.

Automatically, from anyone

• Approximate location from your IP address, resolved to a city using a local database, so the homepage can show flights near you. It is looked up in memory on our own server, is not stored against you, and never leaves the machine.
• Ordinary web server logs — IP address, time, page, browser — kept for security and debugging.

We do not collect your date of birth, your passport, your government ID number, your address, or anything about your health, beliefs, politics or anything else of that kind. If a flight ever needs something in that category, we will ask for it explicitly and say why.

• To arrange the flight. A route and a date with nobody attached books nothing.
• To show operators real demand. They see passenger counts, routes, dates and committed revenue in order to decide whether to fly it.
• To take payment and give it back. Including working out what you are owed when the price falls.
• To email you about your flight. Confirmations, price drops, departure changes, cancellations. These are transactional and you cannot opt out of them while you have a live booking, because they are the booking.
• To keep the marketplace honest. Detecting abuse, junk requests and fraud.

We do not send marketing email unless you ask for it, and there is currently nothing to ask for. If that changes it will be opt-in, with an unsubscribe link that works.

• The charter company flying you. Names, passenger count, weights when required, and contact details so they can reach you about the flight. They need this to carry you legally and safely. They are independent companies with their own privacy practices.
• The host, if you buy a seat on someone's private charter. They are told a seat sold and given the passenger names for the operator's manifest. They do not get your email address or phone number from us.
• Stripe, to process payments and refunds. Their privacy policy governs what they do with card data.
• Nobody else. We do not sell, rent or trade personal information, and we do not share it with advertisers or data brokers. There is no advertising network on this site.
• Law enforcement or regulators, if we are legally required to. As an arranger of air transportation we may be required to produce passenger manifests. If we are compelled to hand over your information and are permitted to tell you, we will.
• A buyer of the business, if Encore is ever sold or merged. You would be told, and the terms of this policy would follow the data.

We never see your full card number. Card details go straight from your browser to Stripe. What comes back to us is a token, the card brand and the last four digits — enough to charge the card you chose and to show you which one it was, and nothing else.

Your card is stored, not charged, until there is a real flight at a real price. When a flight is confirmed we charge the token. Refunds go back to the same card.

• Requests that never flew: deleted or anonymised twelve months after they expire.
• Flights that happened: kept for seven years. Financial records and passenger manifests for completed flights are records we are required to be able to produce.
• Server logs: ninety days.
• Operator accounts: for as long as the account is open, then two years.

Email flights@encorediversified.com from the address on your booking and we will action any of these within thirty days, free of charge:

• See it. A copy of everything we hold about you.
• Correct it. Anything wrong, fixed.
• Delete it. Everything except records of flights that actually happened, which we have to keep — see above.
• Take it elsewhere. Your data in a machine-readable file.
• Object. Tell us to stop a particular use.

We will not treat you differently for exercising any of these. If you are in California, Colorado, Connecticut, Virginia or another state with its own privacy statute, the rights above are offered to everyone regardless of where they live, and we do not sell or share personal information as those laws define it.

There are no advertising or analytics cookies on this site. No Google Analytics, no pixels, no third-party trackers.

What we do set:

• A session cookie if you sign in as an operator or an admin. Signed, and it holds nothing but who you are.
• A local preference in your browser remembering whether you chose light or dark. It never leaves your device and we cannot read it.

The site does not respond to Do Not Track headers because there is nothing here for them to turn off.

The site is served over HTTPS. The database sits on a private server, not in a public bucket, readable only by the system account that runs the application. Passwords are hashed with scrypt. Sessions are signed and verified in constant time. Card numbers are never on our infrastructure at all.

No system is perfect. If we ever discover a breach affecting your information we will tell you and the relevant authorities promptly, describe what happened in plain language, and say what we are doing about it. If you find a security problem, email flights@encorediversified.com and we will take it seriously and credit you if you want.

Encore is not for people under 18 and we do not knowingly collect anything about them. Children can of course fly — a booking naming a minor is made by an adult who is responsible for them, and the details belong to that adult. If you believe a child has given us information directly, email us and we will delete it.

If we change this policy the date at the top changes with it. Material changes are emailed to anyone with a live request or booking before they take effect.

Encore Diversified
10105 E Via Linda, Ste 103-1183, Scottsdale, AZ 85258
flights@encorediversified.com · (623) 227-6688

See also our terms of service.