Privacy Policy

Vortilon LLC – “U.S. Agent Compliance Service”
Last updated: 21 May 2025

This policy explains how Vortilon LLC (“Vortilon,” “we,” “our,” “us”) collects, uses, and protects personal information for visitors and customers of vortilon.com (including /compliance, /airmail, or any other sub-pages that market or deliver our FAA-related services).
By using our site or services you accept the practices described below.

Account data – name, email, password hash, postal address, phone (you provide).
FAA compliance data – FAA certificate numbers, foreign address, scanned FAA correspondence (from you or from mail we receive on your behalf).
Payment data – last four digits of card, tokenised Stripe/PayPal ID, billing address (from our payment processors; we never store full card numbers).
Usage data – IP address, device type, pages visited, cookies, analytics identifiers (collected automatically).

• Provide the service – issue your compliant U.S. address, scan/store/forward FAA documents, maintain your private portal.
   
• Billing & renewals – process payments, send renewal reminders, handle refunds.
   
• Security & compliance – verify identity, detect fraud, and meet FAA Advisory Circular 3-1 obligations.
   
• Support & notifications – respond to requests and alert you to new FAA mail or service changes.
   
• Marketing (minimal) – with your consent, send product updates (you can opt out at any time).
   

Legal bases (U.S./Virginia): contract performance, legitimate interests (security, compliance), consent (marketing/cookies), and legal obligations.

We do not sell personal data. We share only with:

• Service providers (Stripe/PayPal, hosting, email, courier) bound by confidentiality.
   
• Government authorities when legally required or to protect rights, safety, or prevent fraud.
   
• Successor entities in a merger or acquisition, provided the new entity honours this policy.
   

We operate in Virginia, USA. If you reside outside the U.S., your data will be processed here. Where required, we rely on Standard Contractual Clauses or similar safeguards.

• FAA scans & originals: kept for the period in your plan (3–12 months) then securely shredded or returned.
   
• Account & billing records: retained for the life of the account plus up to 7 years for tax/audit purposes.
   
• Analytics logs: typically held 26 months, then aggregated or deleted.
   

We use HTTPS/TLS encryption, least-privilege access, multi-factor authentication for staff, and regular audits. No method is 100 % secure, but we follow industry best practices.

You may:

• Access or export your data
   
• Correct inaccuracies
   
• Request deletion
   
• Opt out of targeted advertising or sale (we do neither)
   
• Appeal any refusal within 45 days
   

Submit requests via the contact details below; identity verification is required.

We use first-party cookies for login sessions and Google Analytics for aggregate traffic metrics. Disabling cookies may limit functionality.

Our site is not directed to children under 13; we do not knowingly collect their data.

Material changes will be posted here with an updated date and emailed to active customers at least 30 days before taking effect.

Vortilon LLC – Privacy Officer

Email: info@vortilon.com
Phone: +1-434-851-9168

Vortilon LLC is a private compliance service and is not affiliated with the Federal Aviation Administration. All services are designed to meet the requirements of FAA Advisory Circular 3-1 (see the official text at https://www.federalregister.gov/documents/2024/10/08/2024-21500).