Privacy Policy

Welcome to Air4.Media. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines what data we collect, how we use it, and your rights regarding your information.

SMS / Text Messaging Communications

Mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes. All other categories of personal information exclude text messaging originator opt-in data and consent; this information is not shared with any third parties.

Air4 Media operates an opt-in SMS messaging program (the "Air4 Media SMS Program") through which we send event-related text messages — including photo delivery from event booths, post-event follow-up, and brief conversational outreach — to recipients who explicitly opt in. End users opt in by checking an optional SMS consent checkbox on our public Pocket Card form at https://air4.media/forms/f26c3cf6394b2efd. The SMS consent checkbox is not required to submit the form; the form processes whether or not the box is checked.

• Categories of mobile information collected — mobile phone number, opt-in timestamp, the consent text shown to the user at opt-in, and (post opt-in) message history and delivery status for support purposes.
• How mobile information is used — solely to operate the Air4 Media SMS Program (deliver opted-in messages, honor opt-out requests, and respond to HELP keyword).
• Sharing of mobile information — Mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes. We do not sell, rent, or share mobile phone numbers or opt-in records with any third party for any purpose other than delivering the SMS service the user opted in to, except as required by law.
• Message frequency — Message frequency varies based on the event attended and recipient engagement.
• Message and data rates — Standard message and data rates may apply. Air4 Media does not charge for SMS.
• How to opt out — Reply STOP to any message at any time. You will receive a single opt-out confirmation and no further SMS.
• How to get help — Reply HELP to any message, or email support@air4.media.
• Carrier disclaimer — Mobile carriers (including T-Mobile, AT&T, Verizon, and their affiliates) are not liable for delayed or undelivered messages.
• Retention — Opt-in records (number, timestamp, source form, consent text shown) are retained as a compliance audit trail for as long as legally required.

For SMS-specific questions or to opt out via support, contact privacy@air4.media.

Information We Collect

We collect information that you provide directly to us when you create an account, submit a request, or otherwise interact with the site. The types of information we may collect include:

• Personal Information (name, email address, etc.)
• Media Files (photos, videos, and other assets)
• Technical Information (IP address, browser type, etc.)

How We Use Your Information

We use the information we collect for various purposes, including:

• Providing, operating, and maintaining our services
• Improving, personalizing, and expanding our services
• Communicating with you, either directly or through one of our partners
• Processing your transactions and managing your account

Google API Services & Email Integration

Air4.Media uses the Gmail API to enable users to send business emails (such as invoices and quotes) directly from their connected Google account. Our use of Gmail API data is limited to the following:

• gmail.send — Used solely to send outgoing emails on behalf of the authenticated user (e.g., invoices, quotes, and client communications). We do not read, store, or process the content of sent emails beyond delivery confirmation.
• gmail.readonly — Used solely to verify email delivery status and retrieve basic metadata (e.g., sent confirmation) to update records within the platform. We do not read, index, or retain email body content.

Air4.Media's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We do not use Gmail data to serve advertisements.
• We do not allow humans to read your Gmail data unless you have given us explicit permission or it is required for security purposes.
• We do not use or transfer Gmail data for AI or machine learning model training.
• We do not share Gmail data with third parties except as necessary to deliver the service or as required by law.

Meta Platform Data (Facebook & Instagram)

Air4.Media uses Meta's Graph API to let Operators publish content from Pilot's AirSocial module to Facebook Pages and Instagram Business accounts they administer. Our use of Meta Platform Data is limited to the following OAuth permissions, each granted solely for the purpose stated:

• pages_manage_posts — Publish posts the Operator authored to their Facebook Pages.
• pages_read_engagement — Display post-performance insights for posts published via AirSocial.
• pages_show_list — Let the Operator pick which Page to publish to.
• instagram_basic — Identify the Instagram Business account linked to the chosen Page.
• instagram_content_publish — Publish IG feed posts, Reels, and Carousels the Operator authored.
• instagram_manage_insights — Display IG post-performance insights for posts published via AirSocial.
• business_management — Enumerate Pages and IG accounts the Operator administers across Business Portfolios.

Air4.Media's use of Meta Platform Data adheres to the Meta Platform Terms and Developer Policies, including Limited Use principles. Specifically Air4.Media:

• Uses Meta data only to deliver the AirSocial publishing features the Operator requested.
• Does not sell Meta data, and does not transfer it except as required for service operation.
• Does not use Meta data for advertising.
• Does not use Meta data for AI or machine learning model training.
• Does not allow humans to read Meta data except (a) with the Operator's explicit consent, (b) for security purposes, (c) to comply with applicable law, or (d) in aggregated or anonymized form.

Operators can revoke Air4.Media's access at any time via facebook.com/settings → Apps and Websites, or by disconnecting in Pilot → AirSocial → Destinations. Air4.Media's Data Deletion Callback URL is https://air4.media/data-deletion. Revocation or a data-deletion request triggers purge of OAuth tokens, destination records, and stored insights within 24 hours.

Meta OAuth tokens are encrypted at rest under the same controls described in the “Encryption at Rest” bullet below.

Pinterest Platform Data

Air4.Media uses the Pinterest API to let Operators publish content from Pilot's AirSocial module to Pinterest boards on accounts they own or administer. Our use of Pinterest data is limited to the following OAuth scopes, each granted solely for the purpose stated:

• user_accounts:read — Identify the connected Pinterest account so AirSocial can display the correct destination name.
• boards:read — List the Operator's boards so they can choose where a Pin is published.
• boards:write — Required by Pinterest's API to publish a Pin to the selected board (Pinterest's create-Pin endpoint requires this scope).
• pins:read — Read back Pins created through AirSocial to confirm publishing status.
• pins:write — Create Pins the Operator authored on the board they selected.

Air4.Media's use of Pinterest data adheres to the Pinterest Developer Terms and Developer Guidelines. Specifically Air4.Media:

• Uses Pinterest data only to deliver the AirSocial publishing features the Operator requested.
• Does not sell, resell, redistribute, or otherwise transfer Pinterest content or data to any third party.
• Does not use Pinterest data for advertising, or for AI or machine learning model training.
• Is not endorsed by, sponsored by, or affiliated with Pinterest, Inc. “Pinterest” and the Pinterest logo are trademarks of Pinterest, Inc.

Operators can revoke Air4.Media's access at any time from Pinterest → Settings → Apps, or by disconnecting in Pilot → AirSocial → Destinations. On disconnect, account deletion, or a data-deletion request, Air4.Media purges the Pinterest OAuth token, the destination record, and any cached Pinterest account or board metadata within 24 hours. Air4.Media does not retain copies of published Pins or other Pinterest content. Pinterest OAuth tokens are encrypted at rest under the same controls described in the “Encryption at Rest” bullet below.

Business relationship. The AirSocial Pinterest integration is operated by Air4media LLC (air4.media). Air4media LLC and Coachella Party (coachellaparty.com) are affiliated and under common ownership, and the Pinterest developer application for this integration is registered under the Coachella Party account. The domains air4.media and coachellaparty.com are therefore related and operated by the same team.

Google Business Profile Platform Data

Air4.Media uses the Google Business Profile APIs to let an Operator publish content from Pilot's AirSocial module to a Google Business Profile (Business listing) that the Operator owns or administers. Our use of Google Business Profile data is limited to the following OAuth scope, granted solely for the purpose stated:

• https://www.googleapis.com/auth/business.manage — Read the connected business's accounts and locations so AirSocial can display the correct destination, and create local posts (updates, offers, and events, with an optional photo and call-to-action button) on the Operator's own verified Business Profile.

Air4.Media's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically Air4.Media:

• Uses Google Business Profile data only to deliver the AirSocial publishing features the Operator requested.
• Accesses only Business Profiles the Operator owns or administers, never profiles the Operator does not control.
• Does not sell, resell, redistribute, or transfer Google Business Profile data to any third party.
• Does not use Google Business Profile data for advertising, or to train AI or machine-learning models.
• Is not endorsed by, sponsored by, or affiliated with Google LLC.

Operators can revoke Air4.Media's access at any time from their Google Account → Third-party access settings, or by disconnecting in Pilot → AirSocial → Destinations. On disconnect, account deletion, or a data-deletion request, Air4.Media purges the Google OAuth token, the destination record, and any cached account or location metadata within 24 hours. Air4.Media does not retain copies of published posts. Google OAuth tokens are encrypted at rest under the same controls described elsewhere in this policy.

Business relationship. The AirSocial Google Business Profile integration is operated by Air4media LLC (air4.media) to manage the Google Business Profile of Coachella Party, a registered DBA of Air4media LLC (coachellaparty.com). Air4media LLC and Coachella Party are the same legal entity, and the Google Cloud OAuth project for this integration is registered to Air4media LLC.

Other AirSocial Social Connectors (LinkedIn & TikTok)

AirSocial also lets Operators connect LinkedIn and TikTok accounts they own or administer in order to publish content they authored. For each of these platforms, Air4.Media requests only the minimum OAuth scopes required to identify the connected account and publish on the Operator's behalf; uses the data solely to deliver the publishing features the Operator requested; does not sell, resell, or redistribute the data; does not use it for advertising or for AI or machine learning model training; and is not endorsed by or affiliated with those platforms. Operators may revoke access at any time from the respective platform's connected-apps settings or by disconnecting in Pilot → AirSocial → Destinations, after which the stored tokens and destination records are purged within 24 hours. All such tokens are encrypted at rest.

Data Protection Mechanisms

We implement the following technical and organizational measures to protect your sensitive data:

• Encryption in Transit — All data transmitted between your browser and our servers is encrypted using TLS (HTTPS). All API communications with Google are encrypted using industry-standard protocols.
• Encryption at Rest — OAuth tokens and sensitive credentials are stored in encrypted form in our database and are never exposed in logs or client-side code.
• Access Controls — Access to user data is restricted to authenticated and authorized users only. Administrative access is limited to verified personnel protected by multi-factor authentication (MFA).
• Minimal Data Retention — We retain only the data necessary to provide the service. OAuth refresh tokens are stored only as long as the integration is active. Email content is not stored on our servers beyond what is required for delivery.
• Token Security — Google OAuth tokens are scoped to the minimum permissions required (gmail.send and gmail.readonly) and can be revoked at any time from your Google Account settings.
• Audit Logging — Email send events are logged with metadata (recipient, subject, timestamp, status) for compliance purposes. Email body content is not retained in logs.

Sharing Your Information

We do not share or sell your personal information to third parties except in the following circumstances:

• When required by law or in response to legal processes
• To protect our rights, privacy, safety, or property
• With your consent or at your direction

Cookies

Air4.Media uses cookies to enhance the user experience. Cookies are small text files stored on your device by your web browser. These cookies help us remember your preferences and customize our site to your interests. By using Air4.Media, you consent to our use of cookies.

Your Rights

You have the right to access, correct, or delete your personal information at any time. You may also revoke any third-party integrations (including Google) at any time by visiting your account settings. To exercise these rights, please contact us at privacy@air4.media.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will notify you by revising the date at the bottom of this policy.

If you have any questions about this Privacy Policy, please contact us at privacy@air4.media.

This Privacy Policy was last updated on June 24, 2026.