Privacy Policy
1. Who we are
AIRVLO is provided by the AIRVLO team, which is responsible for your personal data under Indonesia’s Personal Data Protection Law (UU No. 27 Tahun 2022). Contact: your AIRVLO administrator.
2. What we collect
- Account: name, email address, password (stored only as a secure hash), role, and when you agreed to these documents.
- Projects: the networks, versions and files you create, and who you share them with.
- Technical: sign-in sessions (cookie), failed sign-in attempts, email delivery records, and server error logs. When you use the AIRVLO domain, Cloudflare sees your IP address (see section 5).
- Feedback: if you use the feedback button inside the app, what you send, which may include a screenshot of your screen.
3. Why we use it
To create and secure your account, store and share your projects, send account emails (verification, password reset, invitations), keep the service running and safe, and answer your feedback. We do not use your data for advertising and we do not sell it.
4. Legal basis
Performing our agreement with you (Terms of Service), your consent where asked (for example when you sign up), and our legitimate interest in keeping the service secure.
5. Who else processes data
We use these services to run AIRVLO:
- Resend — sending emails (your email address and the message).
- Cloudflare — secure connection to the AIRVLO domain (traffic passes through Cloudflare).
- Userback — the in-app feedback button, only after you sign in.
- Google — only if you choose “Continue with Google”.
- Map and location services, contacted by AIRVLO when you use those features: Esri / ArcGIS (satellite basemap), Photon by komoot with OpenStreetMap data (place search), Badan Informasi Geospasial (administrative boundaries), Copernicus DEM on Amazon Web Services (elevation). These receive map areas or search terms, not your account details.
6. Where it is stored
On AIRVLO’s server in Indonesia. Some of the services above may process data outside Indonesia.
7. How long we keep it
Account data while your account exists. Projects until you delete them; deleted projects stay in Trash for 30 days, then are removed. Saved versions follow the version limits shown in the app. Email delivery records for up to 12 months; failed sign-in records are cleared when you next sign in successfully. Database backups are kept for 30 days.
8. Your rights
You can ask to access, correct or delete your personal data, or withdraw consent, by contacting your AIRVLO administrator. Deleting your account removes your projects that are not shared with others; projects you own and share will be handed over or deleted as agreed with you.
9. Security
Passwords are hashed, connections over the domain use HTTPS, access to projects is checked on every request, and the database is backed up regularly. No system is perfectly secure; tell us at once if you suspect a problem.
11. Changes
If we change this policy in a meaningful way we will update the version and ask you to agree again when you next sign in.