Highlights that will be codified in the final policy:

• We do not sell your personal information.
• All identifying PII is envelope-encrypted with a customer-managed KMS key.
• California residents: right to know, right to delete (45-day SLA), right to opt-out of sale (nothing to opt out of — we don't sell).
• We do not accept users under 13 (COPPA).
• Flight-school-aid tenants (Part 141 FERPA) have their data handled at an elevated tier.