Privacy Policy
This Privacy Policy explains how Espectralview LTD ("SkyDispatch," "we," "us," or "our") collects, uses, shares, and protects personal information in connection with the SkyDispatch platform, our websites, and related services (collectively, the "Service").
Please read this policy together with our Terms of Use, Disclaimer, and, where applicable, any Data Processing Addendum ("DPA") entered into with operators who use the Service.
1. Our role and who this policy covers
SkyDispatch is a booking-and-dispatch platform for drone operators. Because of how the Service works, we handle personal information in two different roles:
As a controller. For information about the operators and individual team members who use the Service, for billing, and for our websites and marketing, we decide how and why the information is processed. This policy governs that processing.
As a processor. When an operator's end-customer submits a job request through that operator's booking link, the operator decides how that information is used. We process it on the operator's behalf and under the operator's instructions. The operator is the controller of that information, and the operator's own privacy notice — not this one — governs it.
If you are an end-customer who booked a drone job: the drone operator you booked with is responsible for your information. Please direct privacy questions or requests to that operator. We will assist them as their processor, but we generally cannot act on your request directly without their authorization.
This policy applies to:
- Operators — businesses and individuals who hold a SkyDispatch account (the paying tenant).
- Team members / pilots — individuals invited to an operator's account.
- Website visitors — anyone who visits our marketing site or sign-in pages.
- End-customers — individuals who submit a booking request through an operator's link (subject to the processor limitation described above).
2. Information we collect
2.1 Information you provide directly
Account and identity information. When an operator's owner signs up, we receive basic profile information from their Google account through Google sign-in (such as name and email address). Invited team members provide a name and email address and set a password.
Operator/business information. Business name, availability and configuration settings, equipment catalogs, and preflight checklists you create.
Billing information. Subscription plan and billing status. Payment card details are collected and processed by our payment processor (see Section 5); we do not store full payment card numbers on our systems.
Job and mission content. Information you enter when creating or editing jobs, including job titles, instructions, scheduling, and related notes.
Communications. Information you provide when you contact us for support or otherwise correspond with us.
2.2 Information submitted through operators' booking links
When an operator shares a booking link, the end-customer may submit information such as their name, phone number, email address, the job site location, scheduling details, and job/arrival instructions. As described in Section 1, we process this information as the operator's processor.
2.3 Location and geospatial information
The Service is map-based, so we process location data that you or end-customers provide, including:
- Addresses entered or searched;
- Work-area geometry such as drawn polygons, point markers, and uploaded KML files, and derived values such as acreage;
- Device location if you use the "locate me" feature in your browser. We only access your precise device location with your permission, which you can revoke through your browser settings.
2.4 Information collected automatically
When you use the Service, we and our providers may automatically collect:
- Log and usage data — actions taken in the Service, timestamps, and similar usage information;
- Device and connection data — IP address, browser type, device identifiers, and similar technical information;
- Cookies and similar technologies — see Section 4.
2.5 Information from third parties
Google sign-in. When an owner authenticates with Google, we receive basic profile information as described above.
Airspace and mapping data. We display airspace overlays and map data sourced from third parties (including FAA airspace data). This is reference data about airspace, not personal information about you.
3. How we use information
We use information to:
- Provide, operate, and maintain the Service, including authentication, booking intake, dispatch, mapping, airspace overlays, checklists, and equipment management;
- Process subscriptions and payments;
- Communicate with you, including service, security, and transactional messages (for example, account invitations and password-reset emails);
- Provide customer support and respond to your requests;
- Monitor, secure, troubleshoot, and improve the Service, and develop new features;
- Detect, prevent, and address fraud, abuse, security incidents, and technical issues;
- Comply with legal obligations and enforce our terms.
Where required by law, we rely on the following legal bases: performance of our contract with you; your consent (for example, for precise device location or certain cookies); our legitimate interests in operating and improving the Service; and compliance with legal obligations.
4. Cookies and similar technologies
We use cookies and similar technologies to operate and secure the Service. These include:
- Strictly necessary / authentication cookies, which keep you signed in and protect your session. The Service relies on these to function.
- We do not currently use analytics or performance cookies. If we introduce them in the future, we will update this policy and, where required, obtain consent before using non-essential cookies.
You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Service from working.
5. How we share information
We do not sell your personal information, and we do not share personal information for cross-context behavioral advertising. We share information only as described below:
Service providers and sub-processors. We use trusted third parties to provide the Service, including:
- Authentication and cloud infrastructure — Google Firebase / Google Identity Platform;
- Maps and geocoding — Google Maps Platform;
- Payment processing — Lemon Squeezy;
- Email and transactional messaging — Google Identity Platform (Firebase Authentication) for account invitations, password resets, and authentication-related emails; Lemon Squeezy for subscription and billing-related communications;
- Hosting and related infrastructure — DigitalOcean.
These providers may process information only to provide services to us and are bound by confidentiality and data-protection obligations. A current list of sub-processors is set out above. Our Data Processing Addendum (DPA) is available on request.
Between operators and their customers. The Service is designed to share booking and job information between an operator and the end-customer who submitted it — that exchange is the core function of the Service.
Legal and safety. We may disclose information where we believe it is reasonably necessary to comply with law or legal process, enforce our terms, or protect the rights, property, or safety of SkyDispatch, our users, or others.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
6. International data transfers
The Service is operated by Espectralview LTD. Personal information may be processed in countries where we or our service providers operate, including Israel, the United States, and countries in the European Union. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Data retention
We retain personal information for as long as needed to provide the Service and for the purposes described in this policy. Account data and job records are retained for as long as the account is active and until the user deletes them; backups are retained on our standard backup rotation and are then deleted or overwritten. We also retain information as required to comply with legal obligations, resolve disputes, and enforce our agreements.
When we act as a processor on an operator's behalf, we retain and delete end-customer information in accordance with the operator's instructions and our agreement with that operator.
8. Security
We use technical and organizational measures designed to protect personal information, including encryption of data in transit and access controls, and strict multi-tenant separation so that one operator's account data, job records, and end-customer information are logically isolated from other operators' data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access to the information we hold about you;
- Correction of inaccurate information;
- Deletion of your information;
- Portability of certain information;
- Objection to or restriction of certain processing;
- Withdrawal of consent where processing is based on consent.
EEA/UK residents. You may exercise the rights above and have the right to lodge a complaint with your local data-protection authority.
California residents. Subject to the California Consumer Privacy Act (CCPA), as amended by the CPRA, you may have the right to know, access, correct, and delete your personal information, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.
To exercise your rights, contact us using the details in Section 14. We may need to verify your identity before acting on a request. If you are an end-customer who submitted a booking, please contact the operator you booked with, as they control that information.
You can opt out of non-essential marketing communications at any time using the unsubscribe link in those emails. Service and transactional messages are not optional while you have an account.
10. Children's privacy
The Service is a business tool intended for drone operators, their teams, and their business customers — it is not directed to, marketed to, or intended for use by children. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
11. Third-party links and services
The Service may link to or display content from third parties (for example, mapping providers, airspace data sources, and operators' own websites). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.
12. For operators: your responsibilities
If you are an operator using the Service, you are the controller of your end-customers' personal information. You are responsible for having an appropriate legal basis and privacy notice for collecting and sharing that information through the Service, and for responding to your customers' privacy requests. Depending on your jurisdiction, you may need to enter into a Data Processing Addendum with us — contact us at baraktls@gmail.com.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.
14. Contact us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Espectralview LTD
Privacy contact email: baraktls@gmail.com