1. Information We Collect

To provide our flight surveillance, automated reporting, and analytics services, we collect:

• Account & Identity Information: Name, work email address, organization affiliation, and authentication identifiers managed via our secure authentication provider (e.g., Zitadel / OAuth 2.0).
• Operational & Telemetry Data: Flight paths, aircraft registrations, timestamps, altitude, GPS coordinates, and mission-related sensor data transmitted to or captured by the platform.
• System Usage & Technical Logs: IP addresses, browser types, audit logs, and diagnostic telemetry used to ensure system stability, security, and performance.

2. How We Use Your Information

We process collected information solely for genuine operational and business purposes, including:

• Delivering real-time flight tracking, situational awareness, and interactive maps.
• Generating automated flight logs, environmental compliance metrics, and CO2 emissions reports.
• Authenticating authorized user sessions and maintaining organizational access controls.
• Monitoring platform reliability, diagnosing technical faults, and preventing fraudulent or unauthorized access.

3. Data Confidentiality & Sharing

Your organization's client-specific flight analytics, operational metrics, and proprietary business records remain strictly confidential.

• No Sale of Personal Data: We never sell, rent, or trade your personal or operational data to third parties or advertisers.
• Trusted Service Subprocessors: We only engage vetted enterprise infrastructure providers (such as cloud hosting, identity/auth, and logging providers) who comply with rigorous security and GDPR data processing agreements.
• Legal Obligations: We will only disclose information if required by applicable statutory law or legitimate aviation regulatory directives.

4. Data Security & Retention

We deploy modern enterprise-grade security practices—including encrypted data transit (TLS/HTTPS), hardened OAuth 2.0 PKCE authentication flows, role-based access control (RBAC), and continuous monitoring.

We retain account and operational information for as long as your organization maintains an active subscription or as necessary to fulfill statutory audit, aviation reporting, and legal retention obligations.

5. Your Data Protection Rights (GDPR)

Under applicable European data protection legislation (GDPR), you and your users have the right to:

• Request access to personal data held by AviTrakk.
• Request rectification of inaccurate or outdated personal details.
• Request erasure of personal information or restriction of processing, subject to statutory retention obligations.
• Request data portability where technically feasible.

6. Cookies & Session Storage

Our application strictly uses essential authentication tokens, session cookies, and local configuration preferences (such as UI themes and map state) required for the platform to function securely. We do not use third-party behavioral advertising trackers.