Privacy Policy
Effective Date: February 10, 2026
This Privacy Policy describes how the Cirrus Owners & Pilots Association (“COPA,” “we,” “us,” or “our”) collects, uses, and shares information when you use copa.fyi, commander.copa.fyi, and answers.copa.fyi (collectively, the “Services”). This policy supplements the COPA Privacy Policy .
1. Information We Collect
Account Information
When you sign in, we receive your name and email address from our identity provider (IDRamp). We also verify your COPA membership status through our membership platform (Maxio).
Conversation Data
When you use Commander, your questions and the AI-generated responses are stored and associated with your account. This data is used to provide conversation history and improve the Service.
Questions and Answers
Questions submitted through COPA U and associated expert answers are stored and may be displayed publicly on the answers platform.
Usage Analytics
We use PostHog to collect anonymized usage data, including pages visited, browser type, device information, and general interaction patterns. Analytics data is routed through our own servers (via /ingest/* endpoints) rather than third-party domains.
Cookies
We use the following types of cookies:
- Authentication cookies — Set on the
.copa.fyidomain to maintain your signed-in session across copa.fyi, commander.copa.fyi, and answers.copa.fyi. - Analytics cookies — Used by PostHog to understand aggregate usage patterns.
- Preference cookies — Used to remember your settings such as theme preferences.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Services
- Authenticate your identity and manage your session across apps
- Store and display your conversation history in Commander
- Process and display COPA U questions and expert answers
- Analyze usage patterns to improve the user experience
- Communicate with you about the Services
3. How We Share Your Information
We share information with the following service providers, who process data on our behalf:
| Provider | Purpose |
|---|---|
| IDRamp | Identity and authentication |
| OpenAI | Processes your Commander questions to generate AI responses |
| Neon | PostgreSQL database hosting |
| PostHog | Usage analytics |
| Vercel | Application hosting |
| Maxio | Membership verification |
We do not sell your personal information. We may disclose information if required by law or to protect the rights and safety of COPA and its members.
4. Data Retention
- Conversation data is retained until you request deletion.
- COPA U questions and answers are retained as part of the public knowledge base.
- Analytics data is retained according to PostHog’s default retention policies.
- Account information is retained as long as you maintain an account with COPA.
5. Your Rights
You may:
- Access your data by reviewing your conversation history in Commander or your submissions in COPA U.
- Request deletion of your conversation data or account by contacting us through the support widget on any copa.fyi page.
- Opt out of analytics by enabling Do Not Track in your browser, which PostHog respects by default.
6. Security
We implement reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), secure authentication, and access controls on our databases.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the effective date at the top of this page. Continued use of the Services after changes constitutes acceptance of the updated policy.
8. Contact
For questions about this Privacy Policy or to make a data request, please contact us through the support widget on any copa.fyi page or via cirruspilots.org .