Privacy Policy
Complifly ("we", "us", or "our") is committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and mobile app (collectively, the "Service").
1. Information We Collect
We collect the following types of information:
- Account information: Name, email address, password (hashed), and profile details you provide when registering.
- Professional information: Pilot certificates (Basic/Advanced RPAS), SFOC numbers, expiry dates, and Transport Canada credentials you upload.
- Flight & operational data: Flight routes, waypoints, job details, client records, location data, aircraft information, and checklists you create within the Service.
- Location data: GPS coordinates when you use flight planning features or grant location permission in the mobile app. We do not track your location in the background.
- Payment information: Billing is processed by Stripe. We do not store credit card numbers. We retain subscription status, plan type, and billing history.
- Usage data: Pages visited, features used, and error logs collected to improve the Service.
- Device information: Device type, operating system, and app version when using the mobile app.
2. How We Use Your Information
- Provide, operate, and maintain the Service
- Manage your account, subscription, and team members
- Process payments and send billing receipts via Stripe
- Send compliance alerts, certificate expiry reminders, and weather notifications
- Respond to support requests and inquiries
- Improve and develop new features based on usage patterns
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We share data only with trusted third-party service providers necessary to operate the Service:
- Supabase – Database and authentication hosting (servers in Canada/US)
- Stripe – Payment processing
- Google Maps Platform – Map rendering and airspace visualization
- Cloudflare – Application hosting and CDN
We may also disclose information if required by law, court order, or to protect the rights and safety of our users.
4. Organization & Team Data
If you are part of an organization workspace, your administrator (owner/admin role) can view your profile, assigned jobs, and operational data within that workspace. Contractors can only access data for jobs they are assigned to.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. Some data may be retained for legal or compliance purposes for up to 7 years.
6. Data Security
We implement industry-standard security measures including:
- Encrypted data transmission (TLS/HTTPS)
- Row-level security (RLS) policies on all database tables
- Hashed passwords via Supabase Auth
- Role-based access controls
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.
7. Your Rights (PIPEDA)
Under Canadian privacy law, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent for non-essential data processing
- Request deletion of your account and data
- File a complaint with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, contact us at [email protected].
8. Children's Privacy
The Service is intended for professional drone operators and is not directed at children under the age of 13. We do not knowingly collect personal information from children.
9. Push Notifications
The mobile app may send push notifications for compliance alerts, weather checks, and job reminders. You can disable notifications at any time through your device settings.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Website: https://complifly.co