Skip to main content
Advanced International Aviation Academy

Privacy Policy

Advanced International Aviation AcademyEffective Date:

1. Who We Are

This Privacy Policy explains how Jet & Rotor Aviation LLC, doing business as Advanced International Aviation Academy ("AIAA", "we", "us", "our"), collects, uses, shares, and protects personal information when you:

  • Visit www.aiaviationacademy.com
  • Access our student portal at sms.aiaviationacademy.com
  • Use our flight scheduling and student account areas
  • Browse our online store or access our mobile application (collectively, the "Site")
  • Submit online forms, contact us via WhatsApp, engage with our digital advertisements, or apply for flight training.

AIAA is an FAA Part 141 certified flight school and SEVP-certified M-1 school located at 6273 Freeport Blvd, Sacramento, California 95822, USA (Sacramento Executive Airport). We act as the "business" and "data controller" (or "data fiduciary" under Indian law) for the information described herein.

We collaborate with an affiliated entity in India, Advanced International Aviation Academy (India) Private Limited (in incorporation), which manages student inquiries, counseling, and preliminary admissions for applicants based in India. Where this policy refers to "we", it includes this affiliate regarding India-based applicants.

This policy applies to prospective and enrolled students, Discovery Flight and store customers, aircraft renters, pilots undergoing flight reviews, employment applicants, and visitors responding to our marketing campaigns. Following enrollment, your educational and flight training records are also subject to your Student Training Agreement and institutional policies.

2. Information We Collect

A. Information You Provide Directly

  • Contact and Identity Details: Full name, email address, telephone/WhatsApp number, residential address (city, state, country), date of birth, and nationality.
  • Inquiry and Application Data: Training program of interest (Private Pilot License - PPL, Instrument Rating - IR, Commercial Pilot License - CPL, Multi-Engine Rating, Time-Building), target start date, educational background, prior aviation flight experience, English language proficiency, and referral source.
  • Admission and Visa Documentation (Applicants): Passport bio page details, academic transcripts, financial verification documents required for issuing the Form I-20, aviation medical certificate details, and associated consular processing records.
  • Payment Information: Online payment processing (debit/credit cards and PayPal) is handled directly by external PCI-DSS compliant payment gateways (e.g. PayPal). We do not store complete payment card numbers or CVVs on our servers. We also process check and direct bank wire transfers.
  • Communications: Contents of electronic mail, telephone discussions, WhatsApp messaging conversations, and form inquiries.
  • Account Credentials: Username and password credentials for the student portal, flight scheduling system, flight booking logs, flight cancellation records, and student account financial ledgers.
  • Merchandise & Gift Bookings: Billing and shipping address, purchased flight gear, Discovery Flight gift certificates, and recipient contact information provided by you.
  • Financing & Veteran Benefits: Information submitted when applying for aviation student loans, institutional installment payment plans, scholarship applications, GI Bill / veteran educational benefits, or vocational rehabilitation funding.
  • Security & Regulatory Clearances: Proof of United States citizenship, or data submitted for the TSA Flight Training Security Program (FTSP) clearance for non-US citizens, and the mandatory student arrival identification photograph transmitted to the TSA upon course commencement. (Note: Fingerprint collection is administered directly by TSA-authorized collection centers, not by AIAA).
  • Aviation Health & Insurance: FAA Medical Certificate details and mandatory international student health insurance policy enrollment documentation.
  • Airman & Flight Records: Pilot certificate credentials, flight logbook entries, syllabus progression sheets, stage-check assessments, and FAA practical checkride results (including records for independent aircraft renters and biennial flight reviews).
  • Employment Applications: Curriculum vitae (CV), professional work history, pilot licenses/ratings, flight instructor credentials, and references submitted via our careers portal.
  • Media (Photographs & Video): Visual media captured at our flight center, utilized in marketing galleries, student spotlight testimonials, or official social media channels exclusively with your affirmative consent.

B. Information Collected Automatically

  • Device & Technical Telemetry: IP address, operating system, browser type and version, device hardware specifications, pages visited, dwell time, and referring/exit URLs.
  • Tracking Identifiers: Cookies, web beacons, pixel tags, and advertising platform identifiers (detailed in Section 3).
  • Geolocation: Approximate geographical location approximated through your IP address.

C. Information Received from Third Parties

  • Advertising Channels: Data submitted through Meta (Facebook/Instagram) Lead Ads or Google Lead Form extensions.
  • Educational Partners: Inquiries forwarded by authorized overseas educational counseling agencies and flight training referral partners with your consent.
  • Aviation Registries: Public verification through the FAA Airmen Certification Branch regarding current certificate and medical ratings.

We do not intentionally gather sensitive personal categories beyond what is mandated by aviation regulatory bodies, visa compliance, and FAA flight training standards.

3. Cookies, Pixels, and Advertising Technologies

We and our approved advertising partners deploy cookies, tracking pixels, scripts, and server-side APIs to ensure operational stability, evaluate traffic volume, and deliver relevant advertisements across external networks.

Tracking technologies used on the Site
TechnologyProviderPurposePrivacy Reference
Essential CookiesAIAA / Cloud InfrastructureCore platform security, user authentication, session state, checkout basket, and cookie consent preferences.Always active
Google Analytics 4Google LLCAudience measurement, engagement metrics, and interaction tracking.Google Privacy Policy
Google Ads Conversion & RemarketingGoogle LLCMeasurement of ad campaign efficiency and delivery of retargeting ads to prior visitors.Google Partner Data Usage
Google Tag ManagerGoogle LLCCentralized container tag orchestration.Included in Google Privacy
Meta Pixel & Conversions API (CAPI)Meta Platforms, Inc.Advertising performance attribution, custom audience generation, and remarketing on Facebook & Instagram.Meta Privacy Policy
Embedded Media (YouTube)Google LLCPlayback of flight training demonstrations and campus videos.Google Privacy Policy

Advanced Ad Measurement: The Meta Conversions API and Google Enhanced Conversions may transmit hashed (SHA-256 one-way encryption) email addresses or phone numbers to match form submissions with ad interactions. This data is utilized solely for campaign attribution and performance optimization.

Managing Your Preferences

  • Consent Banner: Use our cookie settings banner or the “Cookie Settings” link located in the site footer to customize or decline non-essential cookies. Visitors located in the EEA, UK, and Switzerland will not have performance or marketing cookies deployed without prior opt-in consent, managed through Google Consent Mode v2.
  • Personalized Advertising Opt-Out: You may opt out of personalized ad targeting via Google Ad Settings, Meta Ad Preferences, the Digital Advertising Alliance (DAA), and the Network Advertising Initiative (NAI).
  • Google Analytics: Install the official Google Analytics Opt-out Browser Add-on.
  • Global Privacy Control (GPC): Our systems recognize and honor the Global Privacy Control signal as an affirmative opt-out request regarding the sale or sharing of data.

4. How We Use Your Information

We process personal information for the following operational and educational purposes:

  1. Responding to student inquiries, coordinating Discovery Flights, and providing pilot career counseling.
  2. Evaluating admissions applications, issuing SEVP Form I-20 Certificates of Eligibility, and supporting M-1 student visa compliance.
  3. Scheduling aircraft, flight simulator sessions, and ground school instructors, as well as preserving FAA Part 141 training syllabus records.
  4. Coordinating housing accommodations, airport arrivals, and local ground transport requested by students.
  5. Processing payments, store orders, student financial accounts, tuition installments, flight scholarship applications, and veteran/rehabilitation benefit claims.
  6. Dispatching academy announcements, flight safety bulletins, upcoming cohort schedules, and promotional events (with opt-out capabilities).
  7. Managing, testing, and optimizing digital ad campaigns on Google, Meta, and partner channels.
  8. Administering platform security, conducting system diagnostics, assessing employment applications, and preventing fraudulent transactions.
  9. Satisfying statutory duties enforced by the Federal Aviation Administration (FAA), Department of Homeland Security (DHS/SEVP), Transportation Security Administration (TSA), and taxation authorities.

Legal Bases (EEA / UK / GDPR Compliance):

  • Contractual Performance: Fulfilling flight training enrollment agreements or processing pre-enrollment applications.
  • Legitimate Interests: Operating, marketing, and securing our aviation training academy.
  • Legal Obligations: Complying with mandatory FAA airman records and US immigration regulations.
  • Consent: Where consent is explicitly obtained (e.g. promotional newsletters or tracking cookies), which may be revoked at any time.

5. How We Share Your Information

We do not sell personal data for monetary compensation. Information is disclosed solely in the following operational scenarios:

  • Affiliated Entities: Our Indian affiliate and designated regional student counselors to facilitate local counseling and document coordination.
  • Contracted Service Vendors: Third-party providers operating under confidentiality and data protection agreements, including cloud hosting, student portal software, flight scheduling databases, CRM infrastructure, transactional email dispatchers, WhatsApp Business APIs, and payment processors (PayPal).
  • Advertising and Analytics Networks: Google and Meta, as outlined in Section 3. Under California regulations, cross-context behavioral ad tracking may be classified as "sharing" or "selling" (see Section 9 for opt-out instructions).
  • Regulatory & Federal Agencies: Mandatory disclosures to the Department of Homeland Security (SEVP/SEVIS), the Transportation Security Administration (FTSP), the Federal Aviation Administration (FAA), the Department of Veterans Affairs, and judicial bodies pursuant to valid legal process.
  • Professional Advisors: External legal counsel, certified public accountants, regulatory auditors, and insurance underwriters.
  • Corporate Restructuring: Prospective purchasers or successors in the event of an institutional merger, acquisition, or asset transfer.
  • Third Parties at Your Direction: Aviation lenders, student financing companies, health insurance underwriters, or prospective airline employers requesting pilot training verification or references.

6. International Data Transfers

AIAA maintains primary flight operations and server infrastructure in the United States. Furthermore, our Indian corporate affiliate and technological service providers operate across India and other jurisdictions. Consequently, personal data may be transferred to, stored, and processed outside your home country.

Where applicable, we employ standard contractual safeguards (such as the European Commission's Standard Contractual Clauses) and adhere to cross-border transfer limitations mandated under Indian data privacy regulations.

7. Data Retention Schedule

We maintain personal records in accordance with the following criteria:

  • Prospective Student Inquiries: Retained for up to 24 months following the most recent interaction, after which records are deleted or anonymized.
  • Enrolled Student & Flight Training Files: Retained for the statutory duration required by FAA Part 141 regulations, SEVP guidelines, TSA mandates, and tax laws (typically a minimum of five to seven years post-completion).
  • Cookie Telemetry: Retained in compliance with consent preferences, typically expiring within 13 months.
  • Employment Applications: Retained for up to 24 months for unsuccessful applicants, or integrated into personnel records for hired employees.
  • Financial Transactions: Preserved for the duration mandated by federal and state accounting legislation.

8. Data Security Safeguards

We implement administrative, technical, and physical measures designed to protect information from unauthorized disclosure, loss, or manipulation:

  • Encrypted browser transmissions (HTTPS / TLS 1.3).
  • Role-based internal data access controls.
  • Secure credential management (passwords stored using industry-standard hashing algorithms).
  • Regular system audits and vendor confidentiality obligations.

Users are responsible for safeguarding student portal account passwords. In the event of a confirmed security incident affecting your personal data, we will provide notifications as mandated by law.

9. Your Privacy Rights

Depending on your geographical location and residency, you possess specific statutory rights regarding your personal records:

A. California Residents (CCPA / CPRA)

During the preceding 12-month period, we have collected the categories specified in Section 2 (identifiers, personal records, demographic characteristics, commercial history, online activity, geolocation, educational details, pilot qualifications, and photos).

You are entitled to:

  • Know and Access: Request confirmation of data collected, sources, and third-party disclosures.
  • Correction: Request rectification of inaccurate records.
  • Deletion: Request erasure of personal data, subject to statutory exceptions (such as mandatory FAA training log retention).
  • Opt-Out of Sale / Sharing: Direct us not to share your information for cross-context behavioral advertising using the footer link “Your Privacy Choices”, sending a Global Privacy Control (GPC) signal, or contacting us directly.
  • Non-Discrimination: We will not deny services, alter training rates, or offer disparate quality for exercising your privacy rights.

B. EEA, United Kingdom, and Switzerland (GDPR / UK GDPR)

You are entitled to request access to, rectification of, or erasure of your personal data; demand restriction of processing; object to legitimate-interest processing; and request data portability. Where processing rests on consent, you may withdraw it at any time. You may also lodge a complaint with your supervisory data protection authority.

C. India (Digital Personal Data Protection Act, 2023 - DPDPA)

You possess the right to obtain a summary of personal data processed, seek correction or completion of inaccurate information, request erasure, and withdraw consent. You may also nominate an individual to exercise these rights in the event of death or incapacity. Inquiries should be addressed to our India Grievance Officer; unresolved disputes may be escalated to the Data Protection Board of India.

Requests are processed within statutory timeframes (generally within 30 to 45 calendar days).

10. Marketing Communications (Email, SMS & WhatsApp)

Marketing communications are dispatched exclusively where authorized by law or upon your prior consent. You may opt out of promotional emails at any time by clicking the “Unsubscribe” link, replying “STOP” to SMS messages, or sending “STOP” on WhatsApp.

By selecting the communications consent box on our forms, you grant permission for AIAA and its Indian affiliate to contact you regarding flight programs via voice calls, SMS, and WhatsApp messaging at the telephone number provided, including through automated systems. Consent is not a prerequisite for admission or flight training enrollment. Standard message and carrier data rates may apply. We do not sell or transfer telephone numbers to third parties for their independent marketing.

11. Minor Policy & Training Age Requirements

FAA flight training certification requires students to be at least 17 years of age to hold a Private Pilot License. This Site is intended for individuals aged 16 and above. Discovery Flights or introductory programs for younger individuals must be coordinated directly by a parent or legal guardian. For applicants residing in India who are minors under local law, verifiable parental consent is required. We do not knowingly market to or solicit data from children under 16. If you believe a minor has provided information without consent, contact us immediately for deletion.

13. Revisions to this Privacy Policy

We may periodically revise this Privacy Policy to reflect procedural, regulatory, or operational enhancements. Updates will be published on this page displaying an updated “Effective Date”. Substantial amendments will be highlighted through website notices or direct communication where appropriate.

14. Contact & Regulatory Inquiries

For questions regarding this policy, to exercise your privacy rights, or to submit a formal inquiry:

United States Headquarters (Data Controller)

Advanced International Aviation Academy
6273 Freeport Blvd, Sacramento, California 95822, USA

India Inquiries & Grievance Officer (DPDPA 2023)

Dushyant Dahiya, Branding and Communication Lead
Advanced International Aviation Academy (India)
2079/39, Above We Language Institute, Kunnampilly Lane,
Nettipadam Road, Pallimukku, Kochi, Ernakulam, Kerala 682016, India