Privacy Policy

Heru Aviation, LLC
Effective October 18, 2026

This policy explains how Heru Aviation, LLC ("Heru Aviation," "we," "us") collects, uses, shares and protects personal information when you visit our website, flyheru.com, or send us its contact form; use the Ascend by HERU app (on iPhone, Android and on the web at ascend.flyheru.com, where this policy is published); receive our text messages; or travel on a flight we arrange. Heru Aviation is an air charter broker based in New York. We arrange private flights on aircraft operated by FAA Part 135 certificated operators.

1. Information we collect

Information you give us

Contact details: your name, email address, phone numbers, postal address and company, when you contact us, fill in the contact form on flyheru.com, open an account or book a trip.
Trip details: routes, dates and times, aircraft preferences, number of passengers, bags, pets, catering and ground transportation requests, and other special requests.
Passenger information for manifests: each traveller's full legal name, date of birth, gender as shown on their travel document, nationality, and passport or other government ID details (number, issuing country and expiry date), and, where an aircraft's weight limits require it, approximate weight. Operators, airports and U.S. Customs and Border Protection (CBP) require this information, especially for international flights. When you add another person as a passenger, you confirm that you are allowed to give us their information.
Payment information: card details are entered with, and processed by, our payment processor. We keep a record of payments and the last digits of the card, not the full card number.
Account information: your sign-in email, the people you authorize to manage your trips (such as family members or an assistant), and your app settings.
Sign-in: we send your 6-digit sign-in code by email or, once you have verified your mobile number and opted in to texts, by text. If you add a passkey, Amazon Cognito, our sign-in provider, stores its public key and the date you added it. Face ID, Touch ID or your device PIN is checked on your device; biometric data never leaves it.
Communications: messages, emails, calls and texts with our team, and your text-message consent records.

Information collected automatically

Websites (flyheru.com and ascend.flyheru.com): our hosting provider records standard server logs (IP address, browser type, the page requested and the time) to deliver the sites and keep them secure. Neither website uses analytics, advertising cookies or third-party trackers. On ascend.flyheru.com your browser keeps your sign-in and your Day or Night choice in its own storage, only so the site works for you.
App: device type, operating system and app version, error reports, and, if you allow notifications, a push-notification token. If you turn on app lock, Face ID, Touch ID or your fingerprint is checked by your device; we never receive biometric data.
Location, only if you turn it on: if you turn on location sharing in the app, we use your precise location only to coordinate your arrival at the airport for your flight. It is off unless you choose it, and you can turn it off at any time. How it works is explained in the app.

Information from others

People who book or manage trips for you, such as a family member or an assistant you have authorized.
Operators, private terminals (FBOs) and other vendors, for example flight status, schedule changes and trip costs.
Public flight-tracking data about aircraft (not about you), which we use to check that your aircraft is in position.

2. How we use information

To answer inquiries, prepare quotes and arrange, book and support your trips.
To send itineraries, trip updates, schedule changes and alerts by email, push notification and, if you opt in, text message.
To prepare passenger manifests and meet legal, security and customs requirements.
To process payments, keep accounting and tax records, and prevent fraud.
To run, secure and improve the website and app, and to provide customer support.
To comply with the law, enforce our terms and protect the rights and safety of our clients, our team and others.

We do not use your information for automated decisions that have legal or similarly significant effects on you.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:

To perform your trip: with the aircraft operator, private terminals (FBOs), ground transportation, caterers and other vendors, and only the information each needs to serve you (for example, the operator receives the passenger manifest; a car service receives the pickup name, time and phone number).
Government authorities: passenger information that the operator or we must provide to CBP, the TSA, foreign border authorities or airports for a flight.
Service providers who work for us under contracts that limit their use of the information: cloud hosting, email, text-message delivery, payment processing, and app distribution and notifications (Apple and Google).
People you authorize, such as family members or an assistant you allow to manage your trips.
For legal reasons: when required by law or legal process, or to protect rights, property and safety.
Business transfers: if Heru Aviation is involved in a merger, acquisition or sale of assets, subject to this policy.

4. Text messages (SMS)

Heru Aviation alerts are trip, travel and operational text messages. We send them only to people who have agreed to receive them: clients and their travel contacts and passengers; Heru team members; and vendors who serve our trips: aircraft operators, ground transportation drivers and companies, private terminals (FBOs) and other trip service providers. You can see exactly how each group opts in on our SMS consent page, and the program terms in our Terms and our SMS Alerts Policy.

Mobile numbers and SMS opt-in data are never shared with or sold to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We share mobile numbers and message content only with the providers that deliver our texts (our SMS platform and wireless carriers), and only to send them.

We keep a record of each consent (the wording agreed to, when and where, and for vendors, how they agreed and which team member recorded it) and of messages sent and received. Message frequency varies. Msg & data rates may apply. Reply HELP for help, STOP to opt out. Opting out of texts does not affect your trips or your work with us; we will reach you by email or phone instead.

5. How long we keep information

Account, trip and payment records: while your account is open and then for as long as tax, accounting and aviation record-keeping rules require, generally seven years after the trip.
Passenger and passport details: on the passenger's profile so they can be reused on future trips, until you remove them or close your account, and in the records of past trips for the period above.
Website inquiries that do not lead to a trip: up to three years.
Location: deleted a day after your flight, and at once if you turn location sharing off.
Text-message consent and opt-out records: while you are enrolled and for at least four years after, to prove consent and honor opt-outs.
Server logs: up to one year.

When we no longer need information, we delete it or remove the details that identify you.

6. Security

We use administrative, technical and physical safeguards suited to the information we hold, including encryption in transit and at rest, access limited to the people who need it, multi-factor sign-in for our team, and monitoring. No system is completely secure; if a breach affects your information, we will notify you as the law requires.

7. The Ascend by HERU app

The app asks for permissions, such as notifications and location, only when a feature needs them, and you can change them at any time in your device settings. To close your app account and ask us to delete your information, use Help and FAQ in the app or email info@flyheru.com. We will delete or de-identify your information, except records we must keep by law (such as trip, payment and tax records), as described above.

8. Children

Our website and app are not directed to children under 13, and children may not open an account. We collect a child's information only as a passenger on a trip, from the parent, guardian or authorized adult booking it, and use it only to arrange and operate that trip.

9. Your privacy rights

Depending on where you live, including California (CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, New Jersey and other U.S. states, you may have the right to:

know what personal information we collect, use and disclose, and get a copy of it in a portable format;
correct inaccurate information;
delete your information, subject to legal exceptions;
opt out of the sale or sharing of personal information and of targeted advertising (we do neither);
limit the use of sensitive personal information (we use passport and similar details only to provide our services and meet legal requirements, and location only as described in section 1);
appeal our decision on your request; and
not be treated differently for exercising these rights.

To make a request, email info@flyheru.com or call +1 201-205-1200. We will verify your identity by matching information we already hold, and respond within 45 days (or as your state's law requires). An authorized agent may make a request for you with your signed permission. To appeal a decision, reply to our response with "Appeal" in the subject line.

California notice at collection. In the past 12 months we collected these categories of personal information: identifiers (name, email, phone, address, account details); customer records (payment records); characteristics (date of birth, gender as on a travel document, nationality); sensitive personal information (passport and government ID numbers, and, only from clients who turn on location sharing, precise location); commercial information (trips and purchases); internet activity (website server logs, app diagnostics); and communications. We collect them from the sources and for the purposes in sections 1 and 2, disclose them as described in section 3, keep them as described in section 5, and have not sold or shared them.

Global Privacy Control. Because we do not sell or share personal information or use targeted advertising, there is nothing to opt out of; we honor GPC signals in any case.

10. Changes to this policy

We may update this policy. We will post the new version here with its effective date and, for significant changes, tell account holders by email or in the app.

Contact us

Heru Aviation, LLC
150 Motor Parkway, Suite 401
Hauppauge, NY 11788
Email: info@flyheru.com
Phone: +1 201-205-1200

Your information is stored and processed in the United States.