Privacy Policy

1. Introduction

NyxAerial ("NyxAerial," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information gathered through the NyxAerial CRM Platform ("Platform").

This Platform is an internal business operations tool. Access is restricted to authorized administrators, contracted pilots, and approved clients only.

2. Information We Collect

Account Information

• Full name, email address, and role (admin, pilot, or client)
• Encrypted password credentials
• Account creation and last-login timestamps

Pilot Information

• FAA Part 107 certificate number and expiration date
• Insurance certificates (COI) and policy details
• W-9 tax documentation status
• Geographic service markets (state and city)
• Equipment inventory (make, model, serial numbers)
• Biography, contact details, and availability status
• Payment history and payout records

Client Information

• Company name, contact name, phone, and email
• Billing address and company type (agency, commercial, real estate)
• Project history and invoice records

Job & Project Data

• Job titles, descriptions, locations (city/state), and scheduled dates
• Pilot assignment records
• Deliverable files (photos, videos, reports)
• Internal notes and communication logs
• Pricing and invoice data

Technical Information

• Session tokens for authentication (stored securely, not shared)
• Browser type and device information for security purposes

3. How We Use Your Information

We use the information collected solely to:

• Operate and manage the NyxAerial pilot dispatch network
• Assign and track drone service jobs
• Process client billing and pilot payments
• Maintain FAA regulatory compliance documentation
• Communicate with pilots and clients about active projects
• Improve platform functionality and internal operations
• Comply with applicable laws and regulations

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties.

We may share information only in the following limited circumstances:

• Within the Platform: Pilot information is visible to administrators. Client-specific job and invoice data is visible to the respective client only.
• Service providers: Trusted hosting and infrastructure providers (e.g., Vercel, Railway) who process data solely on our behalf and are bound by confidentiality obligations.
• Legal requirements: When disclosure is required by law, court order, or government authority.
• Business transfer: In the event of a merger, acquisition, or sale of NyxAerial's business assets, with appropriate confidentiality protections.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• bcrypt password hashing (salted, 12 rounds)
• JWT-based authentication with secure session tokens
• HTTPS encryption for all data in transit
• Role-based access controls limiting data visibility by user type
• Database access restricted to authorized application services only

No security system is impenetrable. In the event of a data breach, we will notify affected users promptly in accordance with applicable law.

6. Data Retention

We retain your information for as long as your account is active or as needed to fulfill the purposes described in this policy. Pilot compliance and payment records may be retained for up to 7 years to satisfy tax and regulatory obligations. You may request deletion of your account data by contacting us directly.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data (subject to legal retention obligations)
• Object to or restrict certain data processing activities

To exercise any of these rights, contact us at ops@nyxaerial.com.

8. Cookies & Session Storage

This Platform uses essential session cookies solely for authentication purposes. We do not use advertising cookies, tracking pixels, or third-party analytics services that collect personally identifiable information.

9. Children's Privacy

This Platform is intended for business use by adults only. We do not knowingly collect information from individuals under the age of 18. If you believe a minor has provided information through our Platform, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted within the Platform with a revised effective date. Your continued use of the Platform constitutes acceptance of the updated policy.

11. Contact Us

For questions, concerns, or requests regarding this Privacy Policy: