TRUST CENTER

Data & Compliance.

Effective and last updated: September 19, 2026

This page summarizes the controls LITS uses to manage personal information and support legal obligations. It should be read with the Privacy Policy and Terms of Use. It is a transparency statement, not a claim that LITS holds a certification or that every law applies in every location.

18+ only

Adult confirmation is required at registration.

No data sales

We do not sell personal information.

Private layovers

Mutual list permission is required for alerts.

Self-service control

Members can edit and delete website accounts.

1. Governance principles

Purpose limitation: collect and use information for stated service, security, support and legal purposes.
Data minimization: request only information reasonably needed for a feature or legal obligation.
Access control: restrict personal information to authorized members, administrators and service providers based on need.
Member control: provide ways to edit profiles, manage account connections, change credentials, unsubscribe and request deletion.
Retention discipline: keep records only while reasonably needed, subject to security, dispute, transaction and legal requirements.
Transparency: describe material practices and update notices when those practices change.

2. Current product controls

Area	Current control
Account credentials	Passwords are stored as protected hashes rather than readable passwords; members can change passwords and revoke other sessions.
Sessions	Authenticated sessions expire, use essential cookies and may record IP address and browser information for security.
Abuse prevention	Rate limits, input validation, same-origin checks and membership-status checks protect sensitive actions.
Administration	Administrative access is restricted to the designated owner; membership and verification actions are recorded for accountability.
App connection	Both accounts must be authenticated. App passwords and one-time codes are not stored by the website. Account linking and profile changes use controlled service requests.
Verification gating	Pending members can browse, but both incoming and outgoing interactions remain blocked until approval.
Layover privacy	Only a matched pair who each adds the other to a private layover list can receive schedule alerts; either person can end access.
Website deletion	A member can permanently remove the website account, private profile and sessions after disconnecting the mobile-app account.
Tracking	The website currently uses essential cookies and device storage only; no advertising or analytics cookies are installed.
Payments	Mobile-app payment details are handled by the applicable marketplace or payment provider; the website receives only the membership information it needs.

3. Privacy rights support

LITS accepts verified requests to access, correct or delete information and honors additional rights required where a member lives. These may include portability, restriction, objection, withdrawal of consent, appeal, and information about categories, sources, purposes and recipients.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service when exercising a protected right. LITS does not currently sell personal information or share it for cross-context behavioral advertising. People in the EEA or other jurisdictions may have additional data-subject rights and the right to complain to a supervisory authority.

Submit a request to info@blackrocketdigital.com with the subject “LITS Data Request.” State the account email and the request type, but do not send a password or identity document unless we provide a secure method. We may take proportionate steps to verify identity or an authorized agent.

4. Data lifecycle

Collection: information comes from the member, device, connected LITS app, marketplace, affiliate referral or support interaction.
Use: it is applied to the requested feature, security control, communication or legal purpose.
Disclosure: it is made available only to the member, permitted matches, authorized operators or service providers as described in the Privacy Policy.
Retention: it remains while needed for the account, feature, security, transaction or lawful obligation.
Deletion or de-identification: it is removed, aggregated or de-identified when no longer reasonably needed, subject to limited backups and required records.

5. Service providers and international data

LITS depends on providers for hosting, infrastructure, authentication, app distribution, payment processing, communications and support. We limit information provided to what is reasonably needed for those services. Information may be processed outside a member’s country; where required, we use recognized safeguards for international transfers.

6. Security and incident response

No service can guarantee absolute security. LITS uses layered safeguards appropriate to the information and current service, reviews reports, contains suspected issues, preserves relevant evidence, restores safe operation and provides notices when required by applicable law. Report a suspected security issue to info@blackrocketdigital.com with the subject “LITS Security Report.” Do not publicly expose member data or continue testing after confirming a vulnerability.

7. Age, safety and verification

LITS is limited to adults 18 and older. Airline verification is an access-control measure, not a background check or safety guarantee. Verification documents should be submitted only through the approved in-app workflow, where access can be limited to authorized reviewers. Members remain responsible for safe interactions and for complying with employer and travel obligations.

8. Compliance boundaries

LITS seeks to follow privacy, consumer-protection, intellectual-property and electronic-communications requirements that apply to its operations. Specific duties depend on the operator, service, location, scale and information involved. LITS does not currently claim SOC 2, ISO 27001, PCI DSS, HIPAA or similar certification through this page. App stores, payment processors and other independent services maintain their own compliance programs.

9. Questions and complaints

Contact info@blackrocketdigital.com for privacy, data-protection or compliance questions. You may also contact the regulator or consumer-protection authority available in your jurisdiction.

Getting things ready…