Privacy Policy
What we collect, why, where it goes and how long we keep it.
Who we are
Aero Innovations LLC, United Arab Emirates, operating DronOps. Contact: hello@aironov.com.
Two different relationships
For your account — the people you invite, billing contacts, sign-in records — we are the controller. For the operational data you put into DronOps — flight records, crew details, maintenance history, documents — we are a processor acting on your instructions. You remain the controller of that data. The Data Processing Agreement governs it.
What we collect
You give us
- Account and profile details: name, email, organisation, role.
- Operational data: aircraft, batteries and equipment records; personnel and certifications; projects, missions and flight logs; documents you upload; operating areas and coordinates.
- Billing contact details. Card details go to Stripe and never reach our systems.
Generated by use
- An audit record of operational changes — who changed what and when. This is a product feature; it is what makes your operation auditable.
- Technical logs: IP address, browser, timestamps.
Why
- To provide the service you asked for (performance of a contract).
- To keep it secure and to investigate problems (legitimate interests).
- To bill you (contract, and legal obligation for tax records).
Who else processes it
Named individually in the sub-processor register, with what each can see. We do not sell personal data and we do not use your operational data to advertise to you.
AI features
Where AI features are enabled, the content of your question and relevant document text are sent to the configured provider to produce an answer. AI features can be disabled for your account, in which case nothing is sent.
[CONFIRM] State explicitly whether providers exclude customer content from training, verified against their current terms.
Where it is held
The database and all uploaded files are held in the European Union (Frankfurt, Germany). That is where your operational records, your documents and your flight logs live at rest.
Storage is not the whole picture, and we would rather say so than let you discover it later. Some of the services listed in our sub-processor register process data outside the EU regardless of where storage sits: our hosting provider serves requests from the network location nearest you, so request metadata and IP addresses are handled close to you rather than in Frankfurt; the AI assistant, if you enable it, sends prompt contents to providers operating in the United States; and the map, weather, terrain and flight-log-decryption services are each reached where they run. A statement that named only the storage region would be accurate and still misleading.
How long
For as long as your account is active. Deletions inside the product are reversible by design — records are archived, not destroyed — because operators are frequently required to retain them.
You can also request permanent erasure. It runs after a 30-day grace window during which you can cancel, and it removes files, accounts and history. One summary record of the erasure itself is retained so the act remains provable.
[CONFIRM] Statutory minimum retention for billing and tax records in the UAE, which may exceed the above.
Your rights
Access, correction, erasure, export and objection. Write to hello@aironov.com. If your request concerns operational data held on behalf of an operator, we will direct you to them as controller.
Security
Described in detail on the security page.
Changes
Material changes will be notified before they take effect.