Privacy Policy

UAV Operations Systems, LLC ("we," "us," or "our") operates uavopsys.com, ayna.com, skyrelay.us, uavcrew.ai, aynasite.com, skybook.us, and all associated subdomains, applications, and services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of the Services.

1. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Organization name (if applicable)
• Google account information (if you sign up via Google OAuth)

Pilot and Operational Data

When you use the Services, you may provide:

• FAA certifications and registration numbers
• Drone and equipment information
• Flight logs, mission records, and checklists
• Maintenance records and inspection data
• Service listings and storefront content
• Client and booking information
• GNSS position data from your device, transmitted to our correction-service provider when you use the Network RTK add-on

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers on our servers. Stripe collects and processes payment information according to their privacy policy. We receive limited transaction details (amounts, dates, last four digits) for your records.

Usage Data

We automatically collect:

• Pages visited and features used
• Browser type, device, and operating system
• IP address and general location
• Referring website

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Services
• Process your subscription and payments
• Power AI features across the Services (such as compliance tracking, maintenance alerts, and scheduling)
• Display your storefront to potential clients
• Send service notifications (certification renewals, maintenance due dates)
• Respond to support requests
• Comply with legal obligations

AI Processing and Third-Party AI Providers

AI features in the Services, including our AI agents, process your data to provide operational features such as compliance alerts, maintenance recommendations, and scheduling coordination. This processing happens in real time to serve your requests — it is not used to train AI models.

We use third-party AI platforms (such as large language model providers) to power AI features in the Services. We select providers whose terms prohibit using customer inputs and outputs to train their models. Your operational data — flight logs, client information, certifications, maintenance records — is never used as training data by us or our AI providers.

We may use anonymized interaction patterns (for example, which agent features are used most often, or how questions are typically phrased) to improve how our agents respond and behave. This is about improving the agent experience, not learning your business data.

Aggregated and De-Identified Data

We may create aggregated, anonymized, or de-identified data from your use of the Services — for example, operational trends, usage patterns, or safety insights. This data cannot be used to identify you or any individual. We may use this aggregated data to improve the Services, develop new features, conduct safety research, and produce industry insights. This use continues even after you delete your account, because the data is no longer personally identifiable.

3. How We Share Your Information

We do not sell your personal information. We share data only with:

• Stripe — for payment processing and subscription billing
• Google — if you use Google OAuth for authentication
• AI service providers — to power AI features in the Services, your data is sent for real-time processing to large language model services, including DigitalOcean, Anthropic, Google, OpenAI, and xAI. Where a provider runs open-weight models on its own infrastructure, the companies that developed those models do not receive your data. These providers' terms prohibit using your data to train their models. They may briefly retain requests as their terms allow (for example, for abuse monitoring)
• Cloud infrastructure providers — for hosting, computing, and file storage (including S3-compatible object storage)
• RTKdata (Kansi Solutions GmbH, Germany) — to activate and operate Network RTK, we share your name, email, company, and country, and your device's live GNSS position data (the "GGA" messages the correction network requires to select reference stations). This data is processed on servers in the EU and other regions (such as APAC), so it is transferred internationally
• Law enforcement — when required by law or valid legal process

Your Storefront

If you create a storefront, the information you add (services, coverage area, portfolio, certifications) is publicly visible to potential clients. You control what appears on your storefront.

4. Data Ownership

Your data is yours. Flight logs, maintenance records, client information, certifications, and all other operational data you enter into the Services belongs to you. You can export your data at any time.

5. Data Retention

We retain your account and operational data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain records for legal or regulatory purposes.

6. Cookies

We use cookies for:

• Essential cookies — session management, authentication, CSRF protection
• Functional cookies — remembering your preferences

We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but some platform features may not work correctly.

7. Security

We use industry-standard security measures including encrypted connections (TLS/SSL), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of non-essential communications

California residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of sale of personal information (we do not sell personal information).

EU/EEA residents (GDPR): You have additional rights including the right to restrict processing and the right to data portability. Our legal basis for processing is contract performance (providing the service you signed up for) and legitimate interest (improving the platform).

9. Children's Privacy

The Services are not intended for children under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: [email protected]
Phone: +1 (828) 222-7971
Company: UAV Operations Systems, LLC