Privacy Policy
MeteoDecid Drone

Last updated: 19 August 2026

This policy explains in plain English what data MeteoDecid Drone uses, why it is needed, how long it is kept, and what rights you have.

1. Scope of this policy

This policy applies to the MeteoDecid Drone web application, its weather-decision interface, and any account, contact, or payment features if and when they are enabled.

2. Data we process

• Location: coordinates selected by searching for a place or supplied when you voluntarily use device location. They are used to identify the country and local time zone, open the relevant official aviation guidance, request the weather forecast, and prepare a decision for the planned flight.
• Analysis parameters: aircraft profile, planned start, flight duration, altitude, and an optional manufacturer wind limit.
• Limited decision record: coordinates rounded to two decimal places, selected profile and plan time, outcome, risk, confidence, main factor, and engine and rules versions. We do not store the place name, exact route, full weather timeline, full manufacturer-limit value, or a device identifier in this record.
• Technical data: IP address, request time, response code, and standard server logs needed for security and fault diagnosis.
• Account and contact data — only if these features are enabled: email address, account identifier, access entitlement, and messages sent to support.
• Payment and order data: purchases are processed by Paddle, which acts as Merchant of Record. MeteoDecid may receive limited order, transaction, customer, and access information needed to activate and support purchased access. MeteoDecid does not store full card or bank-account details.

3. Purposes and legal bases

4. Retention

• Limited decision records: no longer than 30 days and no more than the 2,000 most recent records.
• Technical logs: for the period set in the hosting security configuration, and no longer than needed for diagnosis, service protection, or legal claims.
• Account and access data, if enabled: while the service is used, then only as long as needed for settlement, claims, and legal obligations.
• Order and accounting records, after sales are enabled: for the period required by tax and accounting law.
• Support messages: until the matter is closed, then for the period needed to protect against claims.

5. Recipients

Data may be entrusted or disclosed only to the extent necessary to operate the service:

• hosting and technical-infrastructure providers;
• NOAA/NCEP, for the coordinate area needed to retrieve the GFS forecast;
• OpenStreetMap Foundation / Nominatim, for a place-search query or GPS coordinates you submit to identify the place, country, and local time zone;
• login, email, or customer-support providers, only if the relevant feature is active;
• Paddle, acting as Merchant of Record for purchases, together with payment, banking, tax, and accounting providers involved in completing and administering a transaction;
• public authorities where disclosure is required by law.

We do not sell personal data or disclose it to third parties for their own marketing.

6. Transfers outside the European Economic Area

Some infrastructure or external-service providers may operate outside the EEA. Where personal data is transferred outside the EEA, the controller uses a transfer mechanism required by the GDPR, such as an adequacy decision or Standard Contractual Clauses, as applicable. You may ask the privacy contact for information about the safeguard used in a specific case.

7. Cookies and browser storage

The current release does not use advertising cookies or profiling. Current analysis settings and the fact that the welcome briefing has been shown may be stored in page or browser storage. If an account later requires a technical session identifier, it will be used only for login, security, and access continuity. Consent-based analytics or marketing will not be activated without separate information and a consent mechanism.

8. Your rights

Depending on the legal basis and circumstances, you may have the right to:

• access your data and receive a copy;
• correct inaccurate data;
• request erasure;
• restrict processing;
• receive or transfer data where the portability right applies;
• object to processing based on GDPR Article 6(1)(f);
• withdraw consent where processing is based on consent, without affecting earlier lawful processing;
• lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, or another competent EEA supervisory authority.

Send a request to cranforce.ai@gmail.com. To protect your data, the controller may ask for information needed to confirm your identity or identify a decision record.

9. Nature of the MeteoDecid result

The application analyses a weather forecast and mission parameters, then reports “you can fly”, “wait”, “do not risk it”, or “no reliable decision”. This is not an automated decision producing legal or similarly significant effects within the meaning of GDPR Article 22. It is planning information. It does not replace the aircraft manual, remote-pilot judgement, airspace checks, legal permissions, or on-site observations.

10. Is providing data mandatory?

Providing a location and plan parameters is voluntary, but a tailored analysis cannot be performed without them. Access and order data are needed when you choose to purchase or maintain paid access. Device-location permission is voluntary; you can search for a place instead.

11. Policy updates

We may update this policy when the service, data use, law, or service providers change. The current revision date is always shown at the top. Paid sales are processed through Paddle as Merchant of Record. Payment and refund arrangements are described in the Terms & Conditions and Refund Policy.

In short: MeteoDecid uses data to perform the requested analysis and operate the service safely. It does not use your flight location to track you.