Privacy Policy

1. Introduction

Seavion (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service. By using Seavion, you agree to the practices described in this policy.

2. Information We Collect

Account information

When an account is created for you, we store your email address, account creation date, and subscription tier. Accounts are currently created by administrators; there is no public self-registration.

Usage data

We may collect information about how you use the Service, including pages visited, map interactions, and API requests. This data is used to improve the Service and diagnose issues.

Location data

If you use the “My Location” feature, your device's location is used locally within the map to show your position. We do not store or transmit your location to our servers.

Contact enquiries

If you contact us via the operator enquiry form or email, we retain the information you provide to respond to your request.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Authenticate your account and enforce subscription tier access
• Respond to your enquiries and support requests
• Send transactional emails (account creation, password resets)
• Monitor and improve the performance and security of the Service
• Comply with legal obligations

We do not sell your personal information to third parties.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL), hosted in the Singapore region. Authentication is handled by Supabase Auth. We use session-based authentication with server-verified tokens; we do not rely on unverified client-side session data for access control.

The Service is hosted on Vercel in the Singapore region. We implement reasonable technical and organisational measures to protect your data, but no system is completely secure. You are responsible for keeping your login credentials confidential.

5. Third-Party Services

The Service uses the following third-party services, each with their own privacy practices:

• Supabase — database and authentication (supabase.com)
• Vercel — hosting and edge network (vercel.com)
• Mapbox — map tile rendering (mapbox.com) — only basemap tiles are loaded; your aerodrome data is served from our own API
• Open-Meteo — weather data (open-meteo.com)
• Cloudflare — weather data ingestion worker (cloudflare.com)

6. Cookies and Session Storage

We use cookies to maintain your authenticated session. These are session cookies required for the Service to function; we do not use tracking or advertising cookies. Your browser's local storage may be used to persist UI preferences such as sidebar state.

7. Data Retention

We retain your account data for as long as your account is active. If your account is deleted, your personal information is removed from our systems within 30 days, except where retention is required by law or legitimate business interest (such as billing records).

8. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at hello@seavion.app. We will respond to requests within a reasonable timeframe.

9. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by email or via the Service. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

For questions about this Privacy Policy or your personal data, contact us at hello@seavion.app.