1. Who we are
[[LEGAL_ENTITY]] operates Fletaris. For account and website data we are the controller. For personal data contained in the Aircraft Data our customers upload, we act as their processor under the Data Processing Addendum. EU representative: [[EU_REPRESENTATIVE]].
2. What we collect
- •Account data: name, email address, organisation, role, sign-in events (via our authentication provider).
- •Aircraft Data: primarily technical, not personal, data. It may incidentally include names or licence references of engineers, inspectors or signatories within records and findings.
- •Usage and security data: IP address, browser/user-agent, timestamps, and an audit trail of every create/update/delete action (who, when, what changed).
- •Support data: messages you send us.
- •Waitlist data: if you request early access on fletaris.com, your work email and fleet size (required) and, if you choose to give them, your name and company.
- •Website data: fletaris.com is served by Cloudflare, which processes your IP address and browser details to deliver the site and protect it from abuse, including a Cloudflare Turnstile check on the waitlist form. We count visits with Cloudflare Web Analytics, which does not use cookies. The website currently loads its fonts from Google Fonts, which receives your IP address.
- •We do not use advertising or analytics cookies. We use only essential cookies needed for sign-in and security.
3. Why we use it (and our legal bases)
To provide the Service under our contract with your organisation; to secure it, prevent abuse and keep audit records (legitimate interests, legal obligation); to send service and alert notifications you have opted into (contract / consent); to respond to you (legitimate interests); to contact you about early access if you joined our waitlist, and to keep the website secure (legitimate interests). We never sell personal data.
4. AI features
Some features send the minimum necessary data to our AI provider (Anthropic) to answer a question or extract data from a document you upload. That provider processes it under commercial terms that prohibit using it to train their models. AI-generated content is labelled, and extracted data is always reviewed by a person before it is saved.
6. Where it is stored and international transfers
Our production database and hosting are currently located in the United States. Where personal data from the EU/UK/EEA is transferred to the US, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (and the UK Addendum), or on a provider's certification under an applicable data-privacy framework. Waitlist entries are stored in Notion, which may hold them in the United States; the same safeguards apply. We plan to offer EU hosting and will update this policy when it is available.
7. How long we keep it
For the life of your organisation's subscription; after termination, 30 days for export, then deletion from active systems. Backups roll off within our backup retention period. Audit records are kept as long as needed for security and legal obligations.
Waitlist entries: up to 12 months from your request, then deleted, unless you become a customer (the rules above then apply) or ask us to delete them sooner.
8. Security
Encryption in transit (TLS); encryption at rest provided by our database host; strict per-organisation data isolation enforced on every query; role-based access; immutable audit trail; automated dependency and secret scanning.
9. Your rights
Depending on where you are, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to data portability. Where your data is part of a customer's Aircraft Data, we will pass your request to that customer (the controller) and assist them. Contact [[PRIVACY_EMAIL]]. We respond within one month. You may also complain to your data-protection authority.
10. Children
The Service is for business use and not directed at anyone under 16.
11. Changes
We will post updates here with a new version number and date, and notify account Owners of material changes.
12. Contact
[[PRIVACY_EMAIL]] · [[LEGAL_ENTITY]], [[REGISTERED_ADDRESS]].