Privacy Policy
Last updated: [LAST UPDATED DATE]
This Privacy Policy explains what information CrosswindIQ (the "Service"), operated by [LEGAL ENTITY NAME], collects, how we use and store it, and the choices you have. By using the Service you agree to this policy.
1. Information we collect
- Account information: your name, email address, password (stored only as a secure hash), organization membership, and role.
- Aircraft and maintenance records: the aircraft, engine, inspection, airworthiness directive, oil analysis, compression, squawk, scheduling, and related data you enter.
- Uploaded files and images: documents and photos you upload, such as borescope images and maintenance attachments.
- Usage data: basic technical and usage information such as log data, device and browser information, and error diagnostics used to operate and improve the Service.
2. How we use information
We use the information to provide and operate the Service for your organization, including generating briefings, tracking airworthiness and maintenance status, producing the records and reports you request, authenticating you, securing accounts, providing support, and improving reliability. Access to your data is scoped to your organization.
3. How information is stored and the providers we use
We host the Service and store your data with third-party subprocessors that act on our behalf under their respective terms. We engage providers by role rather than relying on any single named vendor in this policy:
- Application hosting: a cloud application hosting and deployment provider.
- Database: a managed cloud Postgres database provider.
- File storage: a cloud object storage provider for uploaded files and images.
- Transactional email: an email delivery provider for account and notification messages.
- Supporting infrastructure: providers for rate limiting and error monitoring used to keep the Service secure and reliable.
These providers process data only to provide their services to us. Data may be stored and processed in the United States.
4. We do not sell your data
We do not sell your personal information, and we do not share it with third parties for their own marketing. We share data only with the subprocessors described above, when required by law, or to protect the rights, safety, and security of the Service and its users.
5. Cookies
We use cookies that are strictly necessary to authenticate you and keep you signed in (session and authentication cookies). We do not use these cookies for third-party advertising.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. Because the Service is in beta, data may be modified, migrated, or reset during the beta period. Keep your own authoritative records independently of the Service.
7. Your choices: export and deletion
You can request a copy (export) of your data or request deletion of your account and associated data at any time. To make a request, contact us at [LEGAL/PRIVACY CONTACT EMAIL]. We will respond within a reasonable period and may need to verify your identity before acting on a request. Some information may be retained where required by law.
8. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above.
9. Contact
Questions or requests about privacy: [LEGAL/PRIVACY CONTACT EMAIL].