Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account with PlaneDNA, we collect:

• Full name
• Email address
• Password (encrypted)
• Phone number (optional)
• Billing address

1.2 Aircraft and Maintenance Data

To provide our maintenance tracking services, we collect and process:

• Aircraft tail numbers and registration information
• Aircraft make, model, and serial numbers
• Maintenance records and logbook entries
• Airworthiness Directives (AD) compliance data
• Service bulletins and inspection records
• Component serial numbers and part information
• Maintenance event dates and descriptions

1.3 Uploaded Documents

• Scanned logbook pages
• Maintenance receipts and invoices
• Technical documents and manuals
• Photos of aircraft and components
• Any other files you upload to the Service

1.4 Usage Information

We automatically collect certain information when you use our Service:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and features used
• Time and date of access
• Referring website addresses
• Clickstream data

1.5 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences
• Analyze usage patterns and improve our Service
• Provide personalized experiences

You can control cookie preferences through your browser settings, but disabling cookies may limit functionality.

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery

• Provide, operate, and maintain the PlaneDNA platform
• Process and analyze uploaded maintenance documents
• Track aircraft maintenance history and compliance
• Generate reports and summaries
• Send notifications about maintenance due dates and compliance requirements

2.2 Account Management

• Create and manage your account
• Authenticate your identity
• Process payments and subscriptions
• Communicate with you about your account

2.3 Service Improvement

• Analyze usage patterns to improve functionality
• Develop new features and services
• Conduct research and analytics
• Test and troubleshoot technical issues

2.4 Communication

• Send service-related emails and notifications
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Provide updates about the Service

2.5 Legal and Security

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against fraud and abuse
• Ensure platform security

3. Data Storage and Security

3.1 Data Storage

Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the United States. We implement industry-standard security measures to protect your information.

3.2 Security Measures

We employ various security measures including:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Regular security audits and assessments
• Access controls and authentication protocols
• Secure backup procedures
• Employee confidentiality agreements

3.3 Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your data within 90 days, except where we are required to retain it for legal or regulatory purposes.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We may share information with third-party vendors who perform services on our behalf:

• Payment Processing: Stripe for billing and payment processing
• Cloud Storage: AWS S3 for document and data storage
• Email Services: Sendgrid for transactional emails
• Analytics: Google Analytics for usage analytics (anonymized data)

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

4.3 Business Transfers

If PlaneDNA is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share information for other purposes with your explicit consent.

5. Your Rights and Choices

5.1 Access and Correction

You have the right to:

• Access your personal information
• Correct inaccurate data
• Update your account information at any time

You can access and modify most information through your account dashboard.

5.2 Data Deletion

You may request deletion of your personal information by:

• Closing your account through account settings
• Contacting us at privacy@planedna.com

Please note that some information may be retained for legal or regulatory compliance.

5.3 Data Export

You have the right to request a copy of your data in a portable format. Contact us at privacy@planedna.com to request a data export.

5.4 Marketing Communications

You can opt out of marketing emails by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your email preferences in account settings
• Contacting us at privacy@planedna.com

Note: You will still receive essential service-related communications.

5.5 Cookie Preferences

You can control cookies through your browser settings. However, disabling cookies may affect Service functionality.

6. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about personal data we've collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Equal service regardless of privacy rights exercised

To exercise these rights, contact us at privacy@planedna.com.

7. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of data processing and access to your data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights or for questions about data processing, contact us at privacy@planedna.com.

Legal Basis for Processing

We process your data based on:

• Contract Performance: To provide services you've requested
• Legitimate Interests: To improve our Service and prevent fraud
• Consent: For marketing communications and optional features
• Legal Obligations: To comply with applicable laws

8. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on this page
• Update the "Last Updated" date
• Notify you via email for material changes
• Obtain consent if required by law

Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Aviation-Specific Data Considerations

10.1 FAA and Aviation Authority Data

While PlaneDNA helps you track and manage maintenance records, you remain responsible for:

• Maintaining official logbooks as required by aviation authorities
• Ensuring compliance with FAA regulations
• Keeping original documentation as mandated by law

PlaneDNA is a supplementary tracking tool and does not replace official recordkeeping requirements.

10.2 Aircraft Registration Data

Aircraft registration information (tail numbers, etc.) may be publicly available through FAA registries or other aviation authorities. Our platform does not create additional public disclosure of this information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Your Consent

By using PlaneDNA, you consent to this Privacy Policy and agree to its terms.