Privacy Policy - SkyQuote

1. Introduction

SkyQuote ("we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our platform at skyquote.io (the "Service").

By using SkyQuote, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, phone number, and password when you register
Profile Information: Business name, FAA Part 107 certification details, insurance information, service areas, and equipment details
Payment Information: Billing details processed through Stripe (we do not store credit card numbers directly)
Customer Data: Names, emails, phone numbers, and addresses of your customers that you enter into the platform
Quote & Job Data: Pricing rates, quote details, job postings, bids, deliverables, and scope of work documents
Communications: Messages sent through the platform messaging system, support tickets, and dispute records
Uploaded Content: Photos, documents, flight logs, KML files, and other files you upload to the platform

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, timestamps, and interaction patterns
Device Information: Browser type, operating system, screen resolution, and device identifiers
IP Address: Used for security, fraud prevention, and approximate location
Cookies: Session cookies for authentication and preferences (see Section 7)

2.3 Information from Third Parties

Stripe: Payment confirmation and payout status for connected accounts
Google reCAPTCHA: Bot detection scores during registration and login

3. How We Use Your Information

We use the information we collect to:

Provide the Service: Operate the marketplace, process quotes, facilitate job connections, and manage payments
Communicate: Send account notifications, quote links to your customers, job updates, and support responses
Improve the Platform: Analyze usage patterns to fix bugs, add features, and improve user experience
Security: Detect fraud, prevent abuse, and protect user accounts
Legal Compliance: Meet regulatory requirements and respond to legal requests
Billing: Process subscription payments and marketplace transaction fees

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. How We Share Your Information

We share your information only in the following circumstances:

4.1 With Other Users

Pilots: Your public profile (name, certifications, service area, ratings) is visible to clients browsing the pilot directory
Clients: Your name and contact information are shared with pilots you hire or who bid on your jobs
DSP Members: Team members within your DSP organization can see shared inspection data and documents

4.2 With Service Providers

Stripe: Payment processing and payouts (governed by Stripe's Privacy Policy)
Amazon SES: Email delivery for notifications and quote links
Google reCAPTCHA: Bot detection during authentication (governed by Google's Privacy Policy)
Cloudflare: CDN, DDoS protection, and SSL termination

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of SkyQuote, our users, or the public.

4.4 Business Transfers

If SkyQuote is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify users of any such change.

5. Data Storage and Security

5.1 Storage: Your data is stored on secure servers located in the United States. Database backups are encrypted and retained according to our backup policy.

5.2 Security Measures: We implement industry-standard security measures including:

HTTPS/TLS encryption for all data in transit
Encrypted database backups
Password hashing (bcrypt)
Firewall protection and intrusion detection
Regular security monitoring
CSRF protection on all forms

5.3 Payment Security: Credit card information is processed directly by Stripe and is never stored on our servers. Stripe is PCI DSS Level 1 certified.

5.4 Limitations: No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

Active Accounts: We retain your data for as long as your account is active
Closed Accounts: Upon account deletion, we remove your personal data within 30 days, except where retention is required for legal, tax, or dispute resolution purposes
Quote & Transaction Records: Financial records are retained for 7 years as required by tax regulations
Support Tickets: Retained for 2 years after resolution
Dispute Records: Retained for 3 years after resolution

7. Cookies

We use cookies for the following purposes:

Essential Cookies: Session management and authentication (required for the platform to function)
Preference Cookies: Theme selection (light/dark mode) and UI preferences
Referral Cookies: Tracking affiliate referral codes (90-day expiry)

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but this may prevent you from using certain features.

8. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Update or correct inaccurate information through your profile settings
Deletion: Request deletion of your account and associated data
Export: Download your quotes, customer data, and workspace communications
Opt-Out: Unsubscribe from non-essential email communications

To exercise any of these rights, contact us at team@skyquote.io.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by us
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

To make a request, email team@skyquote.io with the subject line "CCPA Request".

10. Children's Privacy

SkyQuote is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: team@skyquote.io
Subject: Privacy Inquiry