1. Who We Are

FlightDeckIQ ("we", "us", "our") operates the website flightdeckiq.com and the application at app.flightdeckiq.com. For privacy enquiries, contact us at support@flightdeckiq.com.

2. What Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, and password (hashed) provided at registration
• Profile data: Information you provide during onboarding (e.g. target airline, current licence type)
• Usage data: Assessment results, session history, scores, and progress through the platform
• Payment data: Billing information processed by Paddle (our Merchant of Record) — we do not store card details
• Device data: Browser type, IP address, device fingerprint (used for trial abuse prevention via FingerprintJS)
• Communications: Any messages you send to our support team

3. How We Use Your Data

We use your data to:

• Provide, operate, and improve the FlightDeckIQ platform
• Process payments and manage your subscription
• Personalise your experience and track your progress
• Detect and prevent fraud, trial abuse, and unauthorised access
• Send transactional emails (account confirmation, payment receipts)
• Respond to support requests
• Comply with legal obligations

We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

Where GDPR applies (EU/UK users), we process your data under the following legal bases:

• Contract performance: To deliver the service you purchased
• Legitimate interests: Platform security, fraud prevention, and service improvement
• Legal obligation: Where required by applicable law
• Consent: Where you have explicitly opted in (e.g. marketing communications)

5. Data Sharing

We share data only with the following third parties, and only to the extent necessary:

• Paddle: Payment processing and billing (Merchant of Record)
• Base44: Platform hosting and infrastructure
• FingerprintJS: Device fingerprinting for trial abuse prevention
• OpenAI / AI providers: Processing video and text responses for AI grading features

All third parties are contractually required to handle your data securely and in compliance with applicable privacy law.

6. Data Retention

We retain your account and usage data for as long as your account is active, plus up to 2 years after account closure for legal and audit purposes. Payment records are retained for 7 years as required by financial regulations. You may request earlier deletion — see Section 8.

7. Cookies

We use essential cookies to keep you logged in and maintain your session. We do not use advertising or tracking cookies. Third-party services (Paddle, FingerprintJS) may set their own cookies — refer to their respective privacy policies for details.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at support@flightdeckiq.com. We will respond within 30 days.

9. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure — if you suspect unauthorised access to your account, contact us immediately.

10. International Transfers

Your data may be processed by third-party infrastructure providers in the EU, USA, or other jurisdictions. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international data transfers.

11. Children's Privacy

FlightDeckIQ is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email where possible. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact & Complaints

For privacy questions or to exercise your rights: support@flightdeckiq.com.

EU/UK users have the right to lodge a complaint with their local data protection authority if they believe their rights have been violated.