PrivacyPolicy

Operator details will be published upon commercial launch.

Further provider information is available in our Imprint.

This Privacy Policy explains how personal data is processed when you visit or use Aviation Compliance AI. The platform supports aviation organisations with compliance manual creation, review, regulatory workflows and related services.

When you create or use an account, information such as your name, email address, authentication identifiers, organisation membership and security-related account information may be processed.

Authentication functionality is provided using Clerk. Clerk processes information necessary for account creation, authentication, session management and account security.

If you choose to sign in using Google, Aviation Compliance AI uses Google OAuth only for authentication. The application requests the standard OpenID, email and profile scopes.

Through this sign-in process, we may receive your Google account identifier, email address and basic profile information such as your name and profile image where made available by Google.

We use this information to authenticate you, create or identify your Aviation Compliance AI account, associate your sign-in with that account and protect access to the platform.

Aviation Compliance AI does not request access through this Google sign-in connection to your Gmail messages, Google Drive files, Google Calendar data or other unrelated Google account content.

When the platform is used, we may process organisation data, company membership information, roles and permissions, compliance workflow information, manual content, audit data and other information submitted through platform features.

Technical data may be processed to operate and secure the service. This can include IP addresses, timestamps, request information, browser or device information, authentication events, security events and diagnostic information.

Where paid subscriptions are used, billing and payment-related information may be processed. Payment processing is provided through Stripe. Aviation Compliance AI does not need to store complete payment-card details itself.

We use service providers required to operate and secure the platform. These may include providers for hosting, authentication, database infrastructure, rate limiting, private object storage, payment processing and security services.

Such providers receive personal data only to the extent necessary to provide the relevant service and subject to applicable contractual and data-protection requirements.

Where AI-assisted functionality is enabled, information submitted for that feature may be transmitted to an AI service provider as necessary to generate the requested result. Customers should not submit personal data to AI features unless it is necessary and they are authorised to do so.

Personal data is processed to provide the platform, authenticate users, administer organisations and permissions, provide requested functionality, protect accounts and systems, administer subscriptions, prevent misuse, maintain auditability and fulfil legal obligations.

Personal data is retained only for as long as necessary for the purposes for which it was collected, for the provision of the service, for contractual or security requirements, or to comply with applicable legal obligations.

Technical and organisational measures are used to protect information against unauthorised access, alteration, disclosure and loss. No internet-based system can guarantee absolute security.

Subject to applicable data-protection law, you may have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may also have the right to lodge a complaint with a competent data protection supervisory authority.