VECTOR 91 · PRIVACY
Your information. Clearly explained.
This Privacy Notice explains the information used by the Vector 91 private aircraft portal—including information submitted about passengers who do not have an account.
At a glance
- We use account, trip, passenger, credential and expense information to support aviation operations.
- Authorized managers, assigned crew and service providers may receive information needed for their work.
- Passport and manifest AI extraction sends selected document content to OpenAI through Replit. Receipt auto-read uses OCR on the app's hosting, not an external AI provider. Review all extracted information before using it.
- Send only necessary information that you are authorized to share. Contact us to request access, correction or deletion.
1. Who we are and what this covers
Vector 91 is operated by Sky Review Aviation dba Nighlight Investments LLC, based in Texas, United States. Privacy contact: mail@skyreview.us.
This notice covers the portal and its account, trip-management and document workflows. It applies to account holders, visitors, crew, passengers, trip contacts and other people whose information is entered by an authorized user. The service is intended for US residents.
Aircraft owners, operators and managers may also hold records outside Vector 91 or determine how information is used for their operations. Their separate privacy obligations and notices still apply. Contact us if you need help identifying who handles a record.
2. Information collected and why
| Information | Purpose |
|---|---|
| Account and contact information | Names, email addresses, phone numbers, account roles, password hashes, and verification/approval records support sign-in, account administration, security and communications. |
| Trip and operational records | Routes, dates, aircraft, crew assignments, passenger lists, trip contacts, preferences and ground transport details support scheduling, trip coordination and operational records. |
| Passenger identity and travel documents | Names, birth dates, nationality/citizenship, residence or address, passport numbers, issuing country, expiry dates and uploaded document images/files support manifests, international travel documentation and identity review. |
| Crew qualifications and sensitive operational needs | Certificates, ratings, training, medical certificates and expiration dates support qualification review. Accessibility, mobility or other assistance details may be entered to arrange a trip. These records may reveal sensitive information; do not submit unrelated medical histories. |
| Expenses, receipts and business records | Receipt images/files, merchants, dates, amounts, billing contacts, expense allocations and agreement/signature records support accounting and operational administration. Redact unnecessary payment-card or bank-account details before uploading. |
| Messages and technical information | Support messages, travel-assistant queries, security-event metadata, cookies and browser/request information support responses, site operation and security. Infrastructure and external resource providers receive technical connection information such as IP address and browser details. |
Information comes from you, an owner/operator, a manager, assigned crew or another person arranging the trip. We also receive unverified suggestions from document extraction and location/weather services. Not every category is required for every user or trip.
If you provide another person's information, give them this notice and obtain any authority or permission required for the submission. Do not upload unrelated documents, passwords, Social Security numbers or unnecessary financial or medical information.
4. Document extraction and travel assistance
Passport and external-manifest extraction: selecting an extraction/import action sends document text or images to OpenAI through Replit's managed integration. Documents can contain passport numbers, dates of birth, addresses, nationality and other identity details. An ordinary passport upload is distinct from selecting its extraction action.
Receipt scanning: receipt uploads can queue automatic AI extraction. Receipt images, including rendered PDF pages, are sent to OpenAI through Replit's managed integration. The uploaded receipt is still stored and processed by the portal's hosting and storage providers; this is not a promise that all hosting is private or that past copies held elsewhere were erased. AI may be unavailable or miss details. Review and redact unnecessary information before uploading, and check and correct suggested payee, date, total and category or enter them manually.
Your choices: where the form offers manual entry, you can enter information without selecting passport or manifest AI extraction. Receipt uploads may queue external AI scanning automatically, even when you intend to enter the details manually. This does not remove information already uploaded. Contact your trip manager or our privacy contact before submitting a document if you need another submission method.
Extraction results can be incorrect. They are suggestions for human review, not verified identity information, legal advice or a guarantee that a travel requirement is satisfied. This notice does not promise zero provider retention, a particular processing location, or that provider data-use settings have been independently verified. Contact us before using AI features if those conditions are required for your documents.
5. Retention, security and copies
Records may remain available after a trip finishes or an account is archived. Archiving is not deletion. The portal does not apply a universal automatic deletion period to all documents. Retention depends on operational needs, accounting, legal requirements, disputes and the record type. Ask us about a specific record or request deletion.
Deleting a portal record does not necessarily remove email attachments, downloaded exports, copies held by an aircraft operator, backup copies or records held by a service provider. Some information may need to be retained by law or for legitimate operational/security reasons. We cannot promise immediate removal of every copy.
The application uses password hashing, role/assignment-based access checks, session controls and security-event recording. These measures reduce risk but do not guarantee security. This notice does not certify encryption at rest, backup erasure or a specific backup-retention period.
Service providers may process data in the United States or other locations under their arrangements. We do not promise that all processing stays in Texas or the United States.
6. Access, correction, deletion and other requests
You may contact us about information concerning you even if someone else entered it and you have no account. Requests may include access, correction, a copy, deletion, or restrictions and opt-outs available under applicable law. A parent/guardian or authorized agent can explain their authority to act for someone else.
We review requests subject to identity/authority verification, applicable law, exemptions, legal retention obligations and the rights of other people. Not every statutory right applies to every business, individual or record. If a request is declined, you may ask for the reason and request review through the same contact using the subject “Vector 91 privacy appeal.” Where applicable law grants an appeal, its procedures and deadlines apply.
Public availability/share links and calendar subscriptions can disclose information to anyone holding the link, according to the feature. Share them only with intended recipients and use the available disable/revoke controls when access is no longer needed. Account archival or credential deletion is not a substitute for a complete privacy request.
7. Children and passenger information
The portal is not directed to children for independent use. Children may be passengers, and a responsible adult or authorized trip organizer may need to provide their information for travel. A parent or guardian should receive this notice and provide any legally required permission. Contact us if you believe a child's information was submitted without authority or if you want to request access, correction or deletion.
9. Updates to this notice
We will update the version and date on this page when this notice changes. Material changes may require additional notices or permissions under applicable law. A posted policy or acknowledgment alone does not replace consent when the law requires it.