What we collect, why, and who ever sees it

Drone Flight Station is a compliance advisor and CRM for drone pilots. To do its job it stores the following, all keyed to your account:

• Account & contact. Name, email, password hash, phone, billing address, and company profile you enter (logo, bio, service area).
• Drone operation data. The mission descriptions, locations, dates, altitudes, and Part 107 waiver assessments you generate — plus any notes, checklists, and photos you attach. This is your operational record; we never sell it or share it with third parties for marketing.
• CRM & client data. Client contacts, quotes, invoices, projects, and e-signature records that you or your clients enter through the client portal. Signed contracts are stored with the signer's IP address, a timestamp, and a snapshot of the terms — those are legally required to make e-signatures enforceable.
• Team & forum activity. Team member invitations, seat permissions, forum posts, replies, and support messages you send us.
• Payment history. Subscription status, transaction IDs, dates, and amounts — not the card itself (see §3).
• Basic technical logs. IP address, browser, and request timestamps for security, rate-limiting, and debugging. Rotated on a rolling 30-day window.

When you subscribe or when a client pays an invoice, your card details are entered directly into Authorize.Net's Accept.js hosted card form. That form runs in your browser, tokenizes the card at Authorize.Net, and only a one-time opaque token is ever sent to us. We do not see, log, or store the card number, CVV, or expiration.

For recurring billing we store the Authorize.Net customer and subscription IDs so we can charge the profile you authorized. You can cancel from Account → Subscription at any time.

We only share data with vendors that are needed to make the product work. Nobody on this list uses your data for their own advertising or resale:

• Authorize.Net — processes subscription payments and, if you enable it, client-portal card payments. Receives your name, billing address, email, and tokenized card.
• Resend — sends transactional email (password resets, invoice notifications, contract copies). Receives recipient email + the content of that specific message.
• OpenAI / Anthropic — power the AI compliance advisor. Receives the operation description you submit for analysis. We do not send your name, email, or client data with those prompts.
• AviationWeather.gov & FAA public data feeds — we fetch airspace, weather, TFR, and NOTAM data from these public APIs using the coordinates you provide. No account data is sent.

We do not sell your data. Ever. We won't hand it over to law enforcement without a valid subpoena or court order, and we'll fight over-broad ones.

We use a single first-party auth token stored in your browser so you stay signed in between visits. There are no third-party ad trackers, no analytics pixels, no session recorders, no fingerprinting. Public pages (your review links and public company pages) do not set any tracking cookies for visitors.

You control your data. At any time you can:

• See it — every assessment, invoice, project, and contract is visible in the app under your account.
• Export it — reports and invoices download as PDF; revenue and expenses export as CSV from the Revenue page.
• Delete it — email us via the Help page with the subject "Delete my account." We'll wipe your account, drone-ops data, and client records within 30 days. Signed contracts required for legal compliance (with IP + timestamp) may be retained in an archival store for up to 7 years, as needed to defend against disputes.

Cancelling your subscription does not delete data — your account switches to read-only and you can reactivate later. To fully wipe, send a deletion request.

Drone Flight Station is a professional tool for FAA-certificated remote pilots and their clients. It is not directed to children under 16, and we do not knowingly collect data from anyone under 16.

If we materially change what we collect or who we share it with, we'll post the new version here and email active subscribers before it takes effect.

Questions, deletion requests, or anything else — reach us through the Help page. A real person will read it.