Privacy Policy

Last updated January 2025

1. Who We Are

FlightStratix is an aviation operations platform providing flight planning, crew scheduling, maintenance tracking, operations management, and related aviation software services. For privacy enquiries, contact us at [email protected].

2. Information We Collect

We collect information required to operate the platform, manage accounts, improve performance, and provide support. This includes account and identity information (name, email, company details, billing), operational data (flight records, crew details, maintenance logs, uploaded documents), and platform analytics (IP address, session activity, device data, and cookies).

3. How We Use Your Information

We use your information to provide and maintain the FlightStratix platform, process billing and account administration, improve security and system performance, respond to support requests, send product updates and service notifications, detect fraud or unauthorised activity, and comply with legal and regulatory obligations.

4. Legal Basis For Processing

We process your data on the following legal bases: contractual necessity to deliver the platform and fulfil our agreement with you; legitimate interests including security, fraud prevention, and service improvements; consent for marketing communications and optional tracking technologies; and legal obligations under applicable aviation, tax, and data protection regulations.

5. Data Storage & Security

All data is hosted on Amazon Web Services infrastructure located in the United Kingdom. We apply industry-standard security controls including TLS encryption for data in transit, role-based access controls, and 24/7 monitoring and incident response.

6. Data Sharing

We do not sell operational or personal data. Information is shared only where necessary to deliver the service or comply with legal obligations -- with infrastructure and hosting providers, payment processors, analytics services, regulatory or governmental authorities when required by law, successor entities in the event of a merger or acquisition, and third parties explicitly approved by you.

7. GDPR Rights

If you are based in the UK or EEA, you have the right to access and receive a copy of your personal data, correct inaccurate records, request deletion of eligible data, restrict or object to certain processing activities, and withdraw consent where processing is based on consent. To exercise any of these rights, contact [email protected].