Privacy Policy
Last updated 2 July 2026
AvLink is a job platform that connects pilots with aviation operators. This policy explains what personal data we collect, why, who we share it with, and the choices and rights you have.
Who we are
AvLink is operated by an independent sole trader based in Australia. We ("AvLink", "we", "us") run the platform at avlinkjobs.com. For privacy questions or to exercise your rights, contact us at privacy@avlinkjobs.com.
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where other data-protection laws apply to you, AvLink is the controller of the personal data described below.
Information we collect
We collect the following, most of which you provide directly:
- Account data — your email address. We sign you in with a one-time magic link, so we do not create or store account passwords.
- Pilot profile — your name, location, licensing country, logbook hours, licences and ratings, type ratings, availability, role preferences, and an optional contact phone number you choose to add.
- Operator profile — company name, contact email, location, operation types, fleet, website, and the job listings you publish.
- Applications — the roles you apply to, any note you include, and a qualification match score we compute from your profile.
- Saved jobs and preferences — roles you bookmark and your theme choice, stored locally in your browser.
- Usage data — we run our own privacy-preserving page-view measurement without cookies: the page visited, your country, how you reached us (the referring site, classified as e.g. search or social), and a salted, truncated hash used in place of your IP address. This built-in measurement never stores your IP address. If you accept optional cookies, we also load Vercel analytics (cookieless) and Google Analytics, which uses cookies to measure how the site is used; these only run with your consent (see our Cookie Policy).
How we use your information
- To run the core service: matching you with roles you are qualified for, and showing operators the pilots who apply to their listings.
- To compute qualification matches, including cross-border licence equivalency.
- To send transactional emails (application confirmations, applicant notifications, and status updates) and the job alerts you opt into.
- To operate, secure, debug, and improve the platform.
- To take payment for paid subscriptions.
- We do not sell your personal data.
Legal bases (where GDPR/UK GDPR applies)
- Performance of a contract — to provide the platform and the features you request.
- Legitimate interests — to secure and improve the service and to notify operators of applicants to their roles.
- Consent — for optional job-alert emails, which you can withdraw at any time.
- Legal obligation — to comply with applicable law, including tax and accounting.
Sharing and service providers
Your pilot profile is shared with an operator when you apply to their role. In addition, if your availability is set to anything other than "Not looking", your profile is listed in our pilot directory, where operators on a paid Premium or Unlimited plan can view your full profile and your contact details — your account email and any phone number you add — so they can approach you about roles. Operators without a paid plan, and the general public, cannot see your contact details. If you do not want operators to find or contact you this way, turn off "List me in the operator talent pool" in your profile preferences — you can keep applying to jobs and being matched while staying hidden from operator browsing. Setting your availability to "Not looking" also removes you from the directory.
We also use trusted service providers (sub-processors) who process data on our behalf under contract:
- Supabase — authentication and database hosting (your account and profile data).
- Vercel — application hosting and privacy-friendly, cookieless web analytics.
- Google — Google Analytics 4, which measures how visitors use the site. It loads only if you accept optional cookies, and processes usage data under Google's own terms; we do not send it your account or profile data.
- Stripe — payment processing for subscriptions. Stripe handles your card details directly; we never see or store full card numbers.
- Resend — delivery of transactional and job-alert emails.
- ImprovMX — forwards messages sent to our @avlinkjobs.com addresses to our inbox.
- Sentry — error monitoring, so we can find and fix faults; our configuration excludes personal data from error reports.
- Job-aggregation sources (Adzuna, Jooble, USAJOBS) — we query their APIs for public aviation listings; we do not send them your personal data.
International transfers
Our providers may process data outside your country, including in the United States. Where required, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.
Data retention
We keep your data while your account is active and for a reasonable period afterwards to meet legal, tax, and operational obligations, then delete or anonymise it. You can request deletion of your account at any time.
Security
Access to your data is protected by row-level security, so signed-in users can only reach their own records. We use reputable infrastructure providers and encryption in transit. No system is perfectly secure, but we work to protect your information.
Your rights
You have the right to access the personal information we hold about you and to ask us to correct it. Depending on where you live, you may also have rights to export, delete, or restrict use of your data, to object to certain processing, and to withdraw consent (for example under the EU/UK GDPR or California law).
You can edit most of your data directly in your profile. Every job-alert email tells you how to stop them — email privacy@avlinkjobs.com and we'll switch alerts off for your account. Contact the same address for anything else. If you're in Australia and aren't satisfied with how we handle a privacy concern, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC); elsewhere, with your local data-protection authority.
Children
AvLink is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes & contact
We may update this policy; we'll revise the date above and, for material changes, notify you. Questions or requests: privacy@avlinkjobs.com.

