Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, organization, job title
• Profile Data: Professional credentials, certifications, licensing information
• Communications: Messages, support requests, feedback you send us
• Payment Information: Billing address, payment method details (processed by secure third-party providers)
• User Content: Documents, queries, and data you upload or input into our services

1.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Cookies: Session cookies, preference cookies, analytics cookies
• Log Data: Access times, error logs, referring URLs

1.3 Information from Third Parties

• OAuth Providers: Google account information (name, email, profile picture) when you sign in with Google
• Partners: Information from aviation industry partners for service fulfillment

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Create and manage your account
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Personalize your experience and deliver relevant content
• Analyze usage patterns to improve our platform
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations
• Train and improve our AI models (using anonymized data only)

3. Data Sharing and Disclosure

We may share your information with:

3.1 Service Providers

Third-party vendors who perform services on our behalf, including cloud hosting (Vercel, Supabase), payment processing (Stripe), email delivery, and analytics.

3.2 Business Partners

Aviation suppliers, MROs, and training providers when necessary to fulfill your service requests (e.g., parts sourcing, job applications). We will notify you before sharing.

3.3 Legal Requirements

When required by law, legal process, or government request, or to protect the rights, property, or safety of AvionLogic, our users, or the public.

3.4 Business Transfers

In connection with any merger, acquisition, or sale of assets, your information may be transferred as a business asset. We will notify you before your data is subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Secure authentication with hashed passwords and OAuth 2.0
• Regular security audits and penetration testing
• Access controls and employee training
• Incident response procedures

While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

5. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes described in this policy. After account deletion, we may retain anonymized data for analytics and certain data for legal compliance. Specific retention periods:

• Account Data: Until account deletion + 30 days
• Transaction Records: 7 years (legal requirement)
• Usage Analytics: 24 months (anonymized)
• Support Communications: 3 years

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Request limitation of data processing
• Object: Object to certain data processing activities

To exercise these rights, contact us at privacy@avionlogic.com.

7. International Data Transfers

AvionLogic is based in Canada and processes data in Canada and the United States. If you access our services from outside these regions, your data may be transferred internationally. We ensure appropriate safeguards are in place, including:

• Compliance with PIPEDA (Canada)
• Standard Contractual Clauses for EU/EEA transfers
• Select service providers certified under recognized frameworks

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our platform. Your continued use after such changes constitutes acceptance of the updated policy.

11. Contact Us