Privacy policy
Last updated 10 November 2026
This policy explains what [Legal business name] ("we") collects when you use CPDLC Ai, why, and what you can do about it.
What we collect
| Data | Why |
|---|---|
| Name, email, phone number, password (stored only as a secure hash) | To create and secure your account and contact you about it |
| Audio from your microphone while a flight is listening | Sent to our speech-to-text provider to produce the transcript. We don't keep the audio after it is transcribed. |
| Transcripts, flight names, callsigns and settings | To show your live feed, alerts and flight history |
| Usage (audio length, number of requests, flights used) | To count flights against your plan, prevent abuse and plan capacity |
| IP address, a random device ID, browser type, sign-in times | Security, fraud prevention and detecting duplicate accounts used to claim more than one free trial |
| Payment records (plan, amount, status, Razorpay order/payment IDs) | Receipts, accounting, tax and refunds. Card, UPI and bank details are handled by Razorpay, never by us. |
Who we share it with
- Speech-to-text provider ([e.g. Groq, Inc.]): audio for transcription.
- Razorpay: payment processing. Their privacy policy applies to what you enter at checkout.
- Email provider ([e.g. Resend]): password reset and account emails.
- Hosting and database providers that store the Service's data for us.
- Authorities, where the law requires it.
We don't sell your personal data and don't use it for advertising.
Cookies and local storage
We use one essential cookie to keep you signed in, and your browser's local storage to remember app settings and a device ID. We don't use advertising or tracking cookies.
How long we keep it
Account data and flight history are kept while your account is open. Payment records are kept as long as tax law requires (typically 8 years in India). Security logs are kept for up to 12 months.
Your choices
- Export your flights at any time from the app.
- Correct your profile in Settings.
- Ask us to delete your account and data by emailing [support@yourdomain.com]. We'll do so within 30 days, except records we must keep by law.
Security
Connections are encrypted with HTTPS, passwords are hashed, and access to production data is limited to people who need it.
Changes
If we change this policy in a meaningful way we'll update the date above and tell you in the app or by email.
Contact
Privacy questions: [support@yourdomain.com]. Grievance officer: [Name of grievance officer]. [Legal business name], [Registered business address].