This DPA supplements the Terms of Service when a Customer requires contractual data protection assurances. It describes roles, processing instructions, confidentiality, security measures, sub-processor management, international transfers, and data subject rights assistance.
Customer is the data controller (or equivalent) of Customer Data. Honor Flight App acts as data processor (or equivalent) and will process Customer Data only on documented instructions from Customer and as necessary to provide the Services.
The Services may process sensitive operational information to coordinate safe and effective flights (e.g., mobility accommodations, logistics, coordination details). This information is not intended to be medical or health information (PHI). We apply heightened security and access controls, least-privilege access, logging, and regular reviews to protect such data.
We engage trusted sub-processors (e.g., cloud, authentication, email, cache, SMS). Our current core sub-processors include Amazon Web Services, Inc. (AWS), Upstash, Inc. (serverless Redis), Google LLC, GitHub, Inc., Apple Inc., Twilio Inc., and Resend, Inc.. An up-to-date list is published at /sub-processors. For Upstash, caching is transient (TTL-based) and minimized; we do not store message content long-term in cache. We will notify Customers of material changes as required. Customer may object to a new sub-processor on reasonable grounds.
Where applicable, we support lawful transfer mechanisms (e.g., SCCs) for international transfers and will cooperate with Customer to implement appropriate safeguards.
We will assist Customer, to the extent reasonably possible, in responding to data subject requests and in meeting obligations under applicable privacy laws. Customer is responsible for authenticating requesters and determining appropriate responses.
Upon termination of Services, we will delete or return Customer Data in accordance with the Terms and Customer instructions, subject to legal retention requirements.
To request a countersigned DPA, please contact info@honorflight.app.