CUSTOMER POLICY · VERSION 2026-09-26
How AirCME collects, uses, shares, retains, and protects account information.
Effective September 26, 2026. This version applies only when AirCME presents it for acceptance. Policy changes that require new consent will be presented before the affected paid service or optional messages continue.
Your account can include professional details, learning goals, dates, destinations, plans, daily entries and uploaded documents. These support planning and recordkeeping.
Daily entries record what you report. GPS is optional and starts off; you choose whether to include precise coordinates in a report.
Clerk handles sign-in. The application runs on Cloudflare Workers, with account records in Neon through Hyperdrive and private files in Cloudflare R2.
Automated planning uses OpenAI to process the conference and professional details needed for suggestions. Certificate extraction runs within isolated application processing services. Destination lookup uses a bundled city index; search text is not sent to an address provider.
Daily reminders can be delivered by email, SMS, or WhatsApp according to your preferences.
Your Records are accessed through your signed-in account. AirCME does not grant another person access solely because they are associated with your employer or another organization.
Review suggested activities and extracted certificate details. Correct mistakes and keep the original provider-issued documents.
Update your profile, GPS and reminder preferences in your account. Download important records. Archiving removes a certificate from active totals; it does not erase the original file.
Visit Account & privacy or contact AirCME for access, correction, retention, or removal requests.
Information is disclosed only as needed to operate the service, comply with law, protect users and the service, or complete a transaction you request. Current processors support identity, hosting, databases, private file storage, automated planning, certificate processing, payment, and opted-in delivery. AirCME does not sell professional records or precise location data.
AirCME does not share mobile numbers or messaging opt-in and consent information with third parties or affiliates for their marketing or promotional purposes. AirCME may disclose that information only to service providers that help deliver AirCME messages, or when required by law.
AirCME uses Resend, a United States-based email provider, to deliver transactional email, acting as a processor under its data processing agreement. Resend receives the recipient email address, the content of transactional email messages, and delivery events. The tags AirCME attaches to these emails are opaque identifiers that contain no names or clinical content, and open and click tracking are turned off for AirCME's sending domain. Resend's published terms state that email and log data is retained for 30 days and that remaining customer data is deleted within 90 days after a Resend account ends — those are Resend's stated terms, not a guarantee by AirCME. AirCME deletes its own copies of this data by the account-cancellation deletion deadline described in Retention and deletion. Resend does not offer a way to delete an individual sent email early, so any copy Resend still holds expires under Resend's own terms, which AirCME does not control. If a message bounces or is reported as spam, Resend may keep the address on its suppression list for a period it does not publish.
When you confirm a conference or finish its record, AirCME emails you the document as a PDF attachment. The completion and combined PDFs include your final study notes. Resend processes the attachment as part of the message under the terms above. Copies delivered to your mailbox, and any you save or forward, are outside AirCME's control and are not removed when AirCME deletes your account data. Copies in Records follow AirCME's retention and deletion policy.
For a private conference pilot's schedule proposal, AirCME uses OpenAI, a United States-based automated planning provider, acting as a processor under its API Data Processing Addendum. That request contains only interest labels and, for each source, its PubMed Central identifier, title, citation fields (such as journal, year, authors), and numeric bounds; it does not include your name, precise location, dates, venue, or other free text. Requests are sent with storage disabled (store: false), so OpenAI does not persist the call as retrievable conversation state. OpenAI's published terms state it may still retain API inputs and outputs for up to 30 days for abuse monitoring — that is OpenAI's stated term, not an AirCME guarantee, and any copy OpenAI still holds expires under OpenAI's own terms, which AirCME does not control.
Active accounts retain accepted conference evidence, accepted original sources, and collected precise location for seven calendar years under Retention Policy 2026-09-25. An accepted account cancellation starts a 30-day deletion period that overrides ordinary active-account retention. Limited transaction, consent, suppression, security, and deletion evidence may remain where necessary, without preserving hidden copies of conference content.
For a private conference pilot with scheduled study days, AirCME stores, for each day: your check-in and checkout times, the location evidence AirCME collected at check-in or your self-attested location if it could not be verified, your self-attested attendance minutes, and, if that day's check-in was late, your attestation of the schedule change. At conference closeout AirCME stores one required reflection note (what you learned and how it will affect your practice).
This supports your per-day record and your conference report. Only you can see this information through your signed-in account, and it appears in the report generated for your own conference record. AirCME does not verify attendance and does not certify hours or CME credit from this information.
This information follows the report-bound retention deadline described above: it is kept for seven calendar years from the applicable anchor, with account cancellation plus 720 hours applying instead if that is earlier. If you do not submit the required reflection note, the conference record closes as incomplete 30 days after your last session, and no report issues. This information is deleted or erased on the same schedule as the rest of your conference record, described in Retention and deletion above and in the account-deletion request described in Your choices.
Do not include patient names, dates of birth, record numbers, or other information that could identify a patient in your reflection note or any other study-day entry. Your note is stored with your AirCME record and included in your conference report.
You may request access, correction, export, or deletion and may update optional GPS and messaging choices. Applicable law may provide additional appeal or complaint rights. Identity verification may be required before fulfilling a request.
Questions or requests: contact AirCME. Keep a copy of the version shown when you accept.
Keep patient information out of uploads. Use AirCME for professional learning records, not patient-identifiable information or clinical records.