Privacy Notice

Last updated: 2026-05-05 · Fulcrum 360, Inc. (Utah)

A. Introduction

This Privacy Notice describes how Fulcrum 360, Inc. ("Fulcrum 360," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information in connection with our website, software platform, mobile applications, APIs, and related services (collectively, the "Service"). Fulcrum 360 is a Utah corporation providing aviation parts research and reference data to aviation industry professionals.

The Service is intended for use by aviation industry professionals acting in a business capacity. Individuals located in Utah, California, the EEA, the UK, Switzerland, or other jurisdictions with applicable privacy laws may have certain rights — see Section H below.

B. Personal Information We Collect

B.1 Information You Provide Directly

Identity and contact information — name, business email address, business phone, postal address, job title, department, country.
Account credentials — username and password.
Account preferences — display preferences, notification settings, saved searches.
Payment information — billing contact, billing email, payment method. Card numbers are processed by our payment processor (Stripe) and not retained by Fulcrum 360.
Support and communications — content of any email, helpdesk ticket, chat message, or other communication.

B.2 Company and Organization Information

Company name, CAGE/NCAGE registry data (where applicable), business contact information, industry classification, fleet size, certifications, and capabilities you provide during signup.

B.3 Information Automatically Collected

Device and connection data — IP address, device type, browser, operating system, time zone.
Usage data — pages and features accessed, searches performed, parts viewed, click paths, session duration, timestamps.
Diagnostic data — error logs and crash reports.
Cookies and similar technologies — see Section I.

B.4 Information from Third Parties

Government and public sources (FAA, DLA, CAGE/NCAGE), industry data partners, and service providers (Stripe, email provider, analytics).

C. How We Use Personal Information

To create, maintain, and authenticate your account (performance of contract).
To provide and improve the Service, including aggregating and presenting aviation parts data (performance of contract; legitimate interest).
To process payments, manage subscriptions, and prevent fraud (performance of contract; legal obligation).
To communicate with you about the Service (performance of contract; legitimate interest).
To send marketing communications where permitted, with the right to opt out (legitimate interest; consent where required).
To analyze trends and usage to improve the Service (legitimate interest).
To detect, prevent, and respond to security incidents, fraud, or abuse (legitimate interest; legal obligation).
To comply with legal obligations and enforce our rights (legal obligation; legitimate interest).
To verify compliance with export-control, sanctions, and similar regulations including ITAR, EAR, and OFAC (legal obligation).
In connection with a corporate transaction such as a merger or acquisition (legitimate interest).

We may aggregate, de-identify, or anonymize personal information and use such aggregated information for any purpose.

D. How We Share Personal Information

We do not sell personal information. We share personal information only as described:

Service providers — Stripe (payment processing), Resend (transactional email), hosting and infrastructure providers, analytics providers, customer support tools, and Anthropic (AI chat assistance, where you use the AI chat feature).
Affiliates — if we form or acquire affiliates in the future.
Where required by law — law enforcement, courts, government authorities.
Corporate transactions — successors or acquirers in a merger, sale, or similar transaction.
With your consent or at your direction.

E. Data Retention

We retain personal information for as long as is reasonably necessary for the purposes in this Notice. Account information is retained for the life of your account and up to seven (7) years after termination. Billing records are retained per tax and accounting requirements (typically seven years). Support communications are retained up to five (5) years. Security logs are retained up to two (2) years. Aggregate or de-identified data may be retained indefinitely.

F. Information Security

We implement reasonable physical, technical, and organizational safeguards to protect personal information. No information system is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

G. International Data Transfers

Fulcrum 360 is based in the United States. If you access the Service from outside the U.S., your personal information will be transferred to and processed in the U.S. Where required, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses.

H. Your Privacy Rights

Depending on your location, you may have the following rights:

Right of access — to request a copy of personal information we hold.
Right of correction — to request correction of inaccurate information.
Right of deletion — subject to legal exceptions.
Right to restrict or object to processing.
Right of portability.
Right to withdraw consent where processing is based on consent.
Right to opt out of marketing via the unsubscribe link in marketing emails.
Right to lodge a complaint with a data protection authority.

To exercise any of these rights, please contact us at the address in Section L. We may need to verify your identity before responding.

H.1 Utah Residents (UCPA)

Utah residents may exercise the rights above to the extent the Utah Consumer Privacy Act applies.

H.2 California Residents (CCPA/CPRA)

California residents have rights of access, deletion, correction, and opt-out of "sale" or "sharing." Fulcrum 360 does not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising these rights.

H.3 EU, UK, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, the GDPR and similar laws may apply. Fulcrum 360 is the controller of personal information collected through the Service. Legal bases for our processing are set forth in Section C. You have the right to lodge a complaint with the supervisory authority in your jurisdiction.

I. Cookies and Similar Technologies

We use cookies to operate the Service, remember preferences, authenticate sessions, and analyze usage. You can control cookies through your browser settings; disabling certain cookies may affect functionality. We do not currently respond to "Do Not Track" signals.

J. Children's Privacy

The Service is not intended for use by children. We do not knowingly collect personal information from anyone under 18.

K. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. When material changes occur, we will indicate the "Last updated" date and, where required by law, provide additional notice. Continued use of the Service after the effective date constitutes acceptance.

L. Contact Us

Fulcrum 360, Inc.
Email: sales@fulcrum360.com