Privacy Policy

1. Data We Collect

AvPlot collects only the data required to operate your account and the tools you use:

• Account email address — used to create and identify your account and to communicate with you about the service.
• Password — handled entirely by Supabase Auth, our authentication provider. Your password is stored as a salted cryptographic hash; AvPlot never sees, stores, or has access to your plaintext password.
• Project data — the airport configurations, runway geometry inputs, and tool settings you choose to save to your account.

Aside from the optional anonymous usage analytics described in Section 4, that is the complete list. AvPlot does not collect names, phone numbers, payment card data (during the beta), location data, device fingerprints, or cross-site behavioral profiles.

2. How Data Is Stored

Account and project data are stored in a managed PostgreSQL database operated by Supabase, our authentication and storage provider. Data is encrypted in transit (TLS) and at rest under Supabase's managed-platform controls. Some tool preferences (for example, theme choice and per-tool input state) are stored locally in your own browser via localStorage and never leave your device.

3. Data Retention

Your account email and saved project data are retained for as long as your account is active. If you request account deletion, your account record and all associated project data are deleted. Routine database backups maintained by the storage provider age out on the provider's standard backup-rotation schedule.

4. Cookies, Browser Storage & Analytics

AvPlot uses no advertising cookies and no cross-site or third-party trackers. Browser storage falls into two categories, and you control the second:

• Essential (always on). Strictly-necessary storage the site cannot function without: your Supabase sign-in session token, your theme choice, and the per-tool inputs you enter. These live in your own browser (localStorage / sessionStorage), are never used to track you, and cannot be turned off because the product would not work.
• Analytics (opt-in, off by default). Only with your consent, AvPlot records anonymous, first-party usage events — for example, which tool you opened or exported — so we can understand how the tools are used and improve them. These events carry only an opaque, randomly-generated session identifier and the event type; they contain no name, email, or project content. Your IP address is hashed on our server and never stored in the clear, and the data is never sold or shared. AvPlot uses no Google Analytics, no advertising pixels, and no session recording.
• No selling or sharing. AvPlot does not sell, rent, trade, or share your personal data or project data with third parties. The only party that processes your data is Supabase, acting as our infrastructure provider.

On your first visit a consent notice lets you Accept analytics or choose Essential only; analytics stays off until you accept. You can revisit your choice at any time — manage cookie preferences.

5. Your Rights — Access, Export, and Deletion

You may at any time request a copy of the data associated with your account, ask that it be corrected, or request that your account and all of its data be permanently deleted. Send the request from your account email address to contact@avplot.com. Deletion requests are honored in full — there is no retention of personal data after a confirmed deletion beyond the backup rotation described in Section 3.

6. GDPR

For users in the European Economic Area and the United Kingdom:

• Controller. AvPlot is the data controller for account and project data; contact details are at the top of this policy.
• Lawful basis. Account and project data are processed on the basis of contract performance (operating the service you signed up for) under Art. 6(1)(b) GDPR. The optional usage analytics in Section 4 are processed only on the basis of your consent under Art. 6(1)(a) GDPR, which you may give or withdraw at any time via the cookie preferences.
• Your rights. You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. Exercise any of them by emailing the contact address above.
• Complaints. You also have the right to lodge a complaint with your local supervisory authority.

7. Changes to This Policy

If this policy changes in a way that affects how your data is collected or used, the effective date above will be updated and material changes will be communicated to the account email on file before they take effect.

8. Contact

Questions about this policy or your data: contact@avplot.com.