Privacy Policy

Who we are

Bravo is a directory and review platform for private aviation, operated by Bravo GPA, LLC. This policy explains what personal information we collect, how we use it, and the choices you have. For anything privacy-related, contact us.

What we collect

Information you give us. Your name and email when you create an account or subscribe to our newsletter; the content of reviews you submit; trip details when you request a quote (route, dates, party size); your travel profile; business details when you claim an operator or broker listing or submit a company; and whatever you type into the contact or partner forms.

Payment information. Payments for placements, promotions, and sponsorships are processed by Stripe. Your card details go directly to Stripe; we never see or store full card numbers.

Information collected automatically. First-party usage events (pages viewed, interactions with features like the cost estimator and trip search, keyed to an anonymous per-visitor identifier), Google Analytics measurement when you allow analytics cookies, standard server logs from our hosting provider (IP address, browser user agent), and cookies as described below.

Location. If you use “nearest me” sorting in the directory, your browser asks your permission before sharing your location. It is used only to sort results in that moment and is not stored.

How we use it

We use your information to operate the platform, verify that reviews are genuine, route quote requests to the companies you choose, process payments, send emails you opted into (including the newsletter and transactional messages like quote updates), improve the product, keep the platform secure, and show ads. Quote requests are shared only with the operators or brokers you direct them to; operators see your trip details, not your name, email, or phone number. We do not use AI to make decisions about you; see the AI Policy.

Cookies and tracking

Essential cookies. Used to keep you signed in, maintain your session, and remember your cookie choice. The site does not work properly without them.

Analytics cookies. We run our own first-party usage events, keyed to an anonymous visitor identifier, and Google Analytics 4. Google Analytics runs in Consent Mode: until you choose “Accept all” in the cookie bar it stores no analytics cookies and sends only cookieless, aggregated pings. We honor Do Not Track and Global Privacy Control: when your browser sends either signal, our first-party event capture is switched off.

Advertising cookies. Google AdSense displays ads on content pages and may set advertising cookies once you accept them in the cookie bar. Until then ad storage is denied and any ads shown are not personalized. If you visit from the EEA, UK, or Switzerland, a Google-certified consent message also asks for your choice, and you can change it at any time through the ad privacy options shown with ads.

Bot protection. Our contact, partner, company-submission, and newsletter forms use Google reCAPTCHA v3, which collects device and interaction signals to tell people from bots and is subject to Google’s privacy policy and terms.

You can change your cookie choice by clearing this site’s data in your browser, and you can block or delete cookies through your browser settings at any time.

Third parties we work with

We share personal information only with service providers that help us run Bravo:

• Supabase hosts our database and authentication (accounts, profiles, reviews, quote requests, listing claims, newsletter subscribers). Data is encrypted in transit (TLS) and at rest.
• Stripe processes payments and stores payment card data.
• Resend delivers our transactional and newsletter emails.
• Google provides Analytics 4 (measurement), AdSense (ads), reCAPTCHA (bot protection), and Places (business data for listings, which involves no personal information about you).
• HubSpot is our customer relationship manager; we keep account contact details and business listing records there to manage communications with operators, brokers, and members.
• Vercel hosts the site and collects standard server logs.

We do not sell or rent your personal information, and we never publish your contact details.

Legal bases for processing

Where GDPR applies, we rely on: consent for the newsletter and non-essential cookies (analytics and advertising); contract to provide your account and the services you request; and legitimate interests for security, fraud prevention, and first-party analytics that help us improve the platform.

Your rights

If you are in the EEA or UK, you have the right to access, correct, or delete your personal data, restrict or object to processing, receive a portable copy, and withdraw consent at any time (this does not affect processing that already happened). You may also lodge a complaint with your local supervisory authority.

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we honor Global Privacy Control as an opt-out signal.

To exercise any of these rights, contact us. We will verify your request and respond within the timeframe the law requires. We will never treat you differently for exercising your rights.

Email

The newsletter collects your name and email, and uses double opt-in: we send a confirmation email, and you are only subscribed after you click the link in it. Every newsletter and every marketing email includes an unsubscribe link and our mailing address, and unsubscribing takes effect immediately. Account emails (sign-in codes, quote updates, claim decisions) are sent because you asked for the service; you can turn optional account emails off in Settings.

Data retention

We keep personal information only as long as needed to provide the service or meet legal obligations. Account data is kept until you ask us to delete it. Newsletter details are kept until you unsubscribe. Usage-analytics events are retained for up to 12 months. Review authorship shows as initials unless you opt to show your name.

International transfers

Bravo is operated from the United States, and our service providers store and process data in the US. If you use Bravo from outside the US, your information is transferred to and processed in the US. We rely on our providers’ standard safeguards, such as standard contractual clauses, for transfers from the EEA and UK.

Children

Bravo is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the platform evolves. When we do, we will change the effective date above, and for material changes we will give you notice on the site or by email. If Bravo is ever involved in a merger or acquisition, information may transfer as part of that transaction, subject to this policy.

Contact

Questions about privacy or this policy: contact us. Copyright questions go to our designated agent. Bravo is operated by Bravo GPA, LLC.