The short version: Your school's data lives entirely in your own Google Drive. CabinOS and HEXA Crew Tools never store, access, or process your students' or instructors' personal data. We have no servers. We see nothing.
1. Who we are
CabinOS is a cabin crew training management application developed by HEXA Crew Tools. It runs entirely as a Google Apps Script Web App inside your Google Workspace environment.
Contact: support@hexacrewtools.com
2. How CabinOS stores data
CabinOS does not operate any external servers or databases. All data you enter — students, instructors, training records, certifications, documents, payments — is written directly to a Google Spreadsheet and Google Drive folder in your own Google account.
This means:
- You own your data at all times.
- You can open, edit, export, or delete your spreadsheet at any time, independently of CabinOS.
- If you stop using CabinOS, your data remains in your Google Drive untouched.
- HEXA Crew Tools has no access to your spreadsheet or Drive folder.
3. What CabinOS stores centrally
The only information stored centrally (in Google Apps Script's shared properties) is a school code registry — a mapping from your school's unique code to your spreadsheet ID. This contains no personal data. It is used solely to allow your staff members to link their Google account to your school's workspace.
4. Google account access
CabinOS requests access to your Google account to:
- Read your email address — to identify you and match you to your school's user list.
- Create and edit Google Spreadsheets and Drive folders — to set up and operate your school's workspace.
These permissions are used only to operate the application on your behalf. No data is sent to any third party.
5. Personal data we process
CabinOS processes personal data that you enter about your students and instructors (names, email addresses, dates of birth, passport numbers, nationalities, etc.). This data is processed solely within your Google Drive and is governed by Google's Privacy Policy.
As the school administrator, you are the data controller for this information. HEXA Crew Tools acts only as the software provider and has no access to it.
6. GDPR
CabinOS is designed with data sovereignty in mind. Because all personal data is stored in your own Google account, you retain full control and are able to fulfil data subject requests (access, rectification, erasure) directly in your Google Drive at any time.
Google LLC acts as a data processor for the storage of your data and is GDPR-compliant. See Google Cloud GDPR.
7. Data retention
CabinOS retains no data on its own. Retention of your school's data is entirely governed by your Google account settings and your own retention policies.
8. Cookies
CabinOS does not use cookies. Google may set cookies as part of the authentication process — this is governed by Google's own cookie policy.
9. Children's data
CabinOS is intended for use by aviation training schools managing adult learners (18+). If student data relating to minors is entered, the school administrator is responsible for ensuring appropriate legal basis for processing.
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect the latest revision. Continued use of CabinOS after changes constitutes acceptance.
11. Contact
For any privacy-related questions: support@hexacrewtools.com