Privacy Policy

1. Who We Are

CurvAero, Inc. ("CurvAero", "we") operates the website at curvaero.com, the CurvAero applications and the CurvAero API. This policy describes the personal data we collect through them, why we collect it, who we share it with and the choices you have.

2. Information We Collect

Contact form

When you use the contact form on this website we receive the name, email address, organization, inquiry type and message you enter. The submission is stored as a support record addressed to support@curvaero.com so that we can reply to you.

Account registration

When an organization registers for the CurvAero applications we collect the organization name, the full name and email address of the person registering, an optional phone number, and the password they choose. Passwords are held by our sign-in (identity) service and are never visible to CurvAero staff.

Use of the applications and API

The applications record the work you do in them: the analyses, studies, filings, flight plans and data requests you create, the API keys you generate, and usage meters that count that activity against your plan’s limits. These records are stored under your organization’s account.

Invoicing

For paid plans we keep invoices for your organization: the plan, add-ons, usage and amounts for each billing period, and a record of when and by what method each invoice was paid, as entered by CurvAero staff. We do not collect or store payment card numbers or bank account details on the platform.

Technical logs

Our hosting provider (Microsoft Azure) and our API gateway keep standard request logs, which include your IP address, browser type, the pages or API routes requested and the time of each request. We use them to keep the service running, to apply rate limits and to investigate abuse.

3. Public Aviation Records

The datasets we distribute are built from public records published by the FAA and other government agencies, and from open data such as OpenStreetMap and OurAirports. Some of those records, for example FAA obstruction filings, identify the persons or organizations that filed them. We make that information available as the publishing agency released it and do not combine it with your account data.

4. How We Use Your Information

We use personal data to reply to your inquiries; to provide and operate the applications and API for your organization; to apply plan limits and issue invoices; to keep the service secure, apply rate limits and investigate abuse; to send the service notifications you or your organization configure; and to meet our legal obligations. We do not use your data for advertising and we do not sell it.

5. Data Sharing

We share personal data only with the providers that host or deliver the service on our behalf: Microsoft Azure, which hosts the applications, databases, storage and the API gateway, and Google, which serves the font files for this website (see the Cookie Policy). Sign-in is handled by the Zitadel identity software, which stores your credentials and session. We may also disclose data where the law requires it or to protect the rights and safety of CurvAero, its customers or others. We do not sell personal data.

6. Data Retention

Contact-form submissions are kept as support records. Account data is kept for as long as your organization’s account is active, and invoices are kept afterwards for as long as accounting rules require. Technical logs are kept for a limited period under our hosting provider’s retention settings. You can ask us to delete your personal data at any time; see Your Rights below.

7. Data Storage and Security

Traffic to the website, the applications and the API is encrypted in transit with TLS. Data is hosted on Microsoft Azure, whose managed database and storage services encrypt data at rest. Using the applications requires signing in through the identity service, and administrative functions are restricted to CurvAero staff accounts.

8. Your Rights

You can ask to see, correct or delete the personal data we hold about you, or object to how we use it, by emailing support@curvaero.com from the address on your account or the one you used in the contact form. We will confirm your request and respond without undue delay.

9. Children

The website and applications are intended for aviation professionals and organizations. They are not directed at children, and we do not knowingly collect personal data from anyone under 16.

10. Changes and Contact

We may update this policy; the date at the top shows the current version. For privacy-related inquiries, contact us at support@curvaero.com.