Privacy Policy

Vantagr Technologies, Inc. ("Vantagr," "we," "us," or "our") operates the Vantagr drone operations marketplace at vantagr.com and associated mobile applications (collectively, the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding that data.

By using the Platform you agree to the practices described in this policy. If you do not agree, please do not use the Platform.

2.1 Information You Provide Directly

• Account data: first name, last name, email address, password (hashed), company name, user role (Client or Pilot)
• Pilot profile data: bio, FAA certificate number, equipment list, expertise areas, coverage radius, certifications, profile photo
• Mission data: mission title, area of interest (geographic polygon or point), use cases, deliverable types, preferred dates, budget range, notes
• Payment data: billing details collected and stored by Stripe (we do not store full card numbers); payout banking information collected by Stripe Connect
• Communications: messages, support tickets, and feedback you send to us

2.2 Information Collected Automatically

• Usage data: pages visited, features used, session duration, click patterns
• Device and browser data: IP address, browser type, operating system, device identifiers
• Location data: approximate location derived from IP address; precise coordinates only when you draw a mission area on the map
• Log data: server access logs including timestamps, request paths, and response codes
• Authentication tokens: access and refresh tokens stored in your browser's local storage for session management

2.3 Information From Third Parties

• Stripe: payment confirmation, payout status, and fraud signals
• Mapbox: geocoding results when you search for locations
• Firebase/FCM: push notification delivery tokens for mobile devices

We use collected data to:

• Provide the Platform: create and manage your account, process mission requests, run the matching algorithm, facilitate payments via escrow
• Match Clients and Pilots: your location, expertise, equipment, and ratings are used by our scoring algorithm to surface relevant missions and pilots
• Process payments: collect mission fees from Clients, hold funds in escrow, and release payouts to Pilots via Stripe Connect
• Send notifications: mission status updates, offer notifications, chat messages, and service announcements via email and push notifications
• Improve the Platform: analyze usage patterns, diagnose errors, and develop new features using aggregated and anonymized data
• Ensure safety and compliance: verify Pilot certifications, detect fraudulent activity, enforce our Terms of Service
• Legal obligations: respond to lawful requests from government authorities, comply with tax reporting requirements

We do not sell your personal data. We share data only in the following circumstances:

4.1 Between Platform Users

When a Client submits a mission, the mission's general location (region/area), use case, and budget range are shared with matched Pilots so they can evaluate the opportunity. A Pilot's name, rating, bio, expertise areas, and equipment list are visible to Clients during the matching step. Full contact information is only shared after a mission is confirmed.

4.2 Service Providers

4.3 Legal Requirements

We may disclose your data if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, prevent fraud, or protect the safety of any person.

4.4 Business Transfers

If Vantagr is acquired by or merges with another company, your data may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform before your data becomes subject to a different privacy policy.

We retain your data for as long as your account is active or as needed to provide services:

• Account data: retained until you close your account, plus 90 days for backup purposes
• Mission data and deliverables: retained for 3 years after mission completion for dispute resolution and legal compliance
• Payment records: retained for 7 years as required by tax and financial regulations
• Server logs: retained for 90 days
• Deleted accounts: personal identifiers are removed within 30 days of deletion; anonymized aggregated data may be retained indefinitely

We use browser local storage (not cookies) to store your authentication tokens (accessToken,refreshToken,user) for session management. These are not transmitted to third parties.

We may use third-party analytics tools that set cookies to measure Platform usage. You may disable cookies in your browser settings; however, this may impact Platform functionality.

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, short-lived JWT access tokens (15-minute expiry) with rotating refresh tokens, and role-based access control at the API level.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data and you use the Platform at your own risk. Please notify us immediately at hello@vantagr.comif you suspect unauthorized access to your account.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (subject to legal retention requirements)
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing of your data for direct marketing purposes
• Withdrawal of consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, email hello@vantagr.com. We will respond within 30 days. We may require identity verification before fulfilling requests.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To submit a CCPA request, contact hello@vantagr.com.

EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, our legal basis for processing your data is (a) performance of a contract (providing the Platform services), (b) legitimate interests (fraud prevention, Platform improvement), or (c) legal obligation. You may lodge a complaint with your local data protection authority.

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact hello@vantagr.com and we will delete it promptly.

Vantagr operates from Canada. If you access the Platform from outside Canada, your data may be transferred to, stored, and processed in Canada and other jurisdictions where our service providers operate. By using the Platform, you consent to this transfer.

We may update this Privacy Policy periodically. When we do, we will update the effective date above and notify registered users by email at least 14 days before material changes take effect. Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated policy.

For privacy-related questions, requests, or concerns: