Privacy Policy

Information We Collect

When you make a reservation, contact us, or use our services, we may collect the following information:

• Identity & Contact: name, email address, phone number, and organization or company name.
• Reservation & Order Data: product configuration, use case, deployment type, reservation status, and order history.
• Payment Metadata: payment confirmation status, amount, and currency. Full card details are processed by Stripe and are not stored by Air Signal Labs.
• Usage Data: IP address, browser type, device type, pages visited, diagnostic logs, and account activity.
• Site & Deployment Data: deployment location, site type, configured frequencies, node configuration, and customer deployment notes.
• Signal & Operational Records: audio captured from configured channels, transcripts, timestamps, and frequency metadata generated by customer-deployed hardware. These records belong to the customer.
• Device Telemetry: node status, uptime, connectivity, firmware version, and error logs.

How We Use Your Information

We use collected information to process your reservation, fulfill orders, send transactional and marketing email updates (via Resend), provide customer support, operate and improve the service, and comply with legal obligations.

Third-Party Service Providers

We share information with the following service providers who process data on our behalf:

• Stripe — payment processing and billing. Card details are processed directly by Stripe under their privacy policy.
• Supabase — database and authentication infrastructure. Your account data and reservation records are stored in Supabase-hosted databases.
• Vercel — website hosting and edge delivery.
• Resend — transactional and marketing email delivery.
• PostHog — product analytics. Usage data such as page views and feature interactions may be tracked.

We do not sell your personal data to third parties.

Four-Tier Data Rights Framework

To protect customer privacy and operational sovereignty, we process and store operational data under a strict four-tier framework:

• Tier 1: Service & Performance Data. Diagnostic telemetry, hardware performance metrics, error logs, and system uptime data collected to maintain and improve system reliability. Tier 1 diagnostic data excludes all voice transcripts, raw audio, tail numbers, and site callsigns.
• Tier 2: Customer-Directed Export. Operational Records (captured audio, voice transcripts, frequency logs, timestamps, and correlated identifiers) are never shared with or exported to third parties, including government agencies (such as the FAA, local port authorities, or state regulators), except at the customer's express direction and configuration.
• Tier 3: Aggregated Statistics. Aggregated, de-identified statistical datasets (e.g., total radio activity trends across regions) may be compiled subject to a strict anonymity threshold of a minimum of five (5) active node deployments in the reporting region. Aggregated statistics will never include aircraft tail numbers, precise identifiers, or fine-grained timestamps. Customers may opt out of Tier 3 aggregation at any time through their account settings.
• Tier 4: Proactive Sharing Prohibited. Proactive or automated pipeline integration of Operational Records to regulatory bodies, enforcement agencies, or government entities is strictly prohibited sitewide. We do not construct or maintain any pipeline piping operational data to regulators.

Legal Process and Subpoena Notification

If Air Signal Labs is served with a subpoena, warrant, or other legal order seeking the disclosure of any Operational Records or customer data, Air Signal Labs will provide the customer with prompt written notice of the request (unless prohibited by law) before complying. This notice is intended to afford the customer a reasonable opportunity to object, seek a protective order, or take appropriate legal action to defend their data ownership rights.

Model Training

Air Signal Labs does not use customer audio, transcripts, receiver location, deployment configuration, or site identity to train models or improve services unless the customer expressly opts in, or the data has been de-identified in a manner reasonably designed to prevent association with a specific customer, person, or site.

Data Retention and Deletion Policy

We adhere to strict data minimization principles:

• Transcripts and Metadata: Retained for the duration of the customer's active subscription tier, or as configured by the customer.
• Raw Audio: Purged within thirty (30) days of capture unless local compliance requirements demand otherwise and the customer configures an override.
• Deletion-on-Demand: Customers can purge raw audio, transcripts, or complete site timelines at any time through the dashboard. Purges are permanent and unrecoverable.
• Deletion-on-Termination: Upon cancellation or termination of services, all raw audio, transcripts, and operational metadata will be permanently deleted from Air Signal Labs' cloud infrastructure within thirty (30) days.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you, to opt out of marketing communications, or to request a copy of your data. To exercise these rights, contact us at contact@airsignallabs.com.

Sensitive Deployments

Government, public safety, defense, airport, critical infrastructure, and other sensitive deployments may require separate written terms, data handling restrictions, or local-only configurations. Contact us to discuss deployment-specific requirements.

Data Security

We implement commercially reasonable security measures to protect your data. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Contact

For questions about this Privacy Policy, data deletion requests, or privacy inquiries, contact us at: contact@airsignallabs.com