Privacy Policy

1. Who we are

PropPal ("PropPal", "we", "us") is an AI-assisted aviation maintenance information service operated by [Legal Entity Name], registered in [Jurisdiction]. For any privacy question, contact us at contact@proppal.com.

2. Information we collect

We collect only what we need to provide and operate the service:

• Account data — name, email, password hash (via Firebase Auth), and optional profile details such as certification type, aircraft, or role.
• Usage data — the questions you ask, the packs you query, timestamps, device and browser metadata, IP address, and basic diagnostic logs.
• Billing data — subscription plan, purchase history, and a customer ID from our payment processor (Stripe). We do not store your full card number or CVV — Stripe handles that directly.
• Support content — any message, screenshot, or attachment you send us when asking for help.
• Cookies and local storage — used to keep you signed in, remember preferences, and measure aggregate usage. No third-party advertising trackers.

3. How we use your information

• Run the service: authenticate you, answer your questions, deliver pack content, and maintain your query history.
• Bill you accurately and process subscriptions, upgrades, and cancellations.
• Improve PropPal — debug failures, monitor quality, and tune retrieval and ranking. Internal quality review only; see §5.
• Communicate with you about your account, billing, security, and material product changes.
• Prevent abuse, enforce our Terms of Service, and protect the platform and other users.
• Comply with legal obligations.

4. Legal bases (GDPR / UK GDPR)

Where applicable, we rely on: contract (to provide the service you signed up for), legitimate interests (to secure, debug, and improve PropPal), consent (for any optional communications), and legal obligation (to meet tax, accounting, and regulatory requirements).

5. AI models and training

Your questions are sent to third-party large language model providers (for example, Google Gemini and OpenAI) so they can generate answers. These providers process your prompts under their own privacy and data-use terms, and we configure them to not use your content for training their foundation models where that option is available.

We do not sell your questions, and we do not use them to train public or third-party models. We may review a small sample of queries internally, in aggregated or de-identified form, to debug retrieval issues and improve answer quality.

6. Who we share data with

We share personal data only with service providers that help us operate PropPal, and only to the extent necessary:

• Firebase / Google Cloud — authentication and hosting.
• MongoDB Atlas — primary application database.
• Pinecone — vector search over manual content.
• OpenAI, Google Gemini — LLM and embedding providers used to generate answers.
• Stripe — subscription billing and payment processing.
• Email / support tooling — to deliver transactional email and handle support tickets.

We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, or property of PropPal, our users, or the public. We do not sell personal information, and we do not share it with advertisers.

7. How long we keep data

• Account data — while your account is active, plus a short period afterward for dispute resolution and legal compliance.
• Chat history — retained for 90 days after cancellation, then deleted, as described in our Terms.
• Diagnostic traces — request traces auto-delete after 7 days.
• Billing records — retained as long as required by tax and accounting law (typically 7 years).
• Backups — residual copies may persist in encrypted backups for a limited time before being overwritten.

8. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your account and associated data;
• Object to or restrict certain processing;
• Export your data in a portable format;
• Withdraw consent for any optional processing;
• Lodge a complaint with your local data protection authority.

You can exercise most of these rights directly from your Account page, or by emailing contact@proppal.com.

9. Security

We use industry-standard safeguards including TLS in transit, encryption at rest with our cloud providers, scoped access controls, and audit logging. No system is perfectly secure, so we can't guarantee absolute security — but if we ever discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

10. International data transfers

PropPal and its service providers operate globally, which means your data may be processed in countries outside your own, including the United States. Where required, we rely on standard contractual clauses or equivalent safeguards to protect your data during these transfers.

11. Children

PropPal is not directed at children. You must be at least 18 years old, or the age of majority in your jurisdiction, to create an account. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If a change is material, we will notify active users by email or in-app notice at least 14 days before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.

13. Contact

Questions about this Privacy Policy or how we handle your data? Write to us at contact@proppal.com.