Privacy Policy

1. Information we collect

We may collect account and contact details such as your name, email address, telephone number, organisation, role and authentication information. The service also stores customer-controlled aerodrome operational records, which may include inspection records, defects, wildlife reports, controlled documents, compliance evidence, asset records, photographs, location coordinates, audit records and the identity of users who create or update records.

We may also collect technical and security information such as device, browser, IP, authentication, error and service logs where generated by the application or its infrastructure providers.

2. How we collect information

Information is collected when you provide it directly, create or update records in the service, upload files or photographs, use device features such as location or camera access, contact Sterling Aviation Services, or complete billing through our payment provider. Some technical information is generated automatically when the service is used.

3. Why we use information

We use information to provide and secure Sterling Aerodrome Manager, authenticate users, maintain tenant and role access controls, operate inspections and compliance workflows, provide support, send service and trial communications, process subscriptions, investigate faults or security events, maintain audit trails, improve reliability and meet applicable legal or contractual obligations.

4. Payments

Subscription checkout and customer billing are provided through Stripe. Sterling Aerodrome Manager does not store full payment-card numbers in its application database. Stripe may receive billing, payment and transaction information in order to process subscriptions and provide billing services.

5. Service providers and overseas processing

We use specialist providers for application hosting, database and file storage, authentication, payment processing and transactional email, including Supabase, Vercel, Stripe and Resend. The core Sterling Aerodrome Manager Supabase project is configured in the Sydney, Australia region. Some service providers operate globally and information may be processed or accessed from outside Australia, including the United States and other locations used by those providers.

We take reasonable steps appropriate to the service and the information involved when engaging providers and configuring access, security and data handling.

6. Security

We use measures including authenticated access, role-based permissions, row-level database security, private file storage, secure transport, multi-factor authentication for privileged workflows, audit records and production monitoring. No online service can guarantee absolute security, so users must also protect account credentials and devices and promptly report suspected unauthorised access.

7. Retention and deletion

We retain information for as long as it is reasonably required to provide the service, support customer record-keeping, meet contractual or legal requirements, resolve disputes and maintain security or audit records. Operational aviation records can have specific minimum retention requirements. Our current retention approach is described in the Data Retention Policy. When information is no longer required, we will take reasonable steps to delete or de-identify it where appropriate and lawful.

8. Access and correction

You may request access to, or correction of, personal information we hold about you. Some information can be reviewed or corrected through the service itself. For other requests, contact admin@sterlingaviationservices.com.au. We may need to verify identity before providing access or making changes.

9. Privacy complaints

If you have a privacy concern, contact admin@sterlingaviationservices.com.au with enough information for us to understand and investigate the issue. We will review the matter and respond within a reasonable period. If Australian privacy law gives you a right to complain to the Office of the Australian Information Commissioner, that right is not limited by this policy.

10. Data breaches

We maintain an incident-response process for suspected security and privacy incidents. Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will assess and notify affected individuals and the relevant regulator as required.

11. Changes to this policy

We may update this policy when the service, providers, legal requirements or information-handling practices change. The effective date at the top of this page identifies the current version.

12. Contact

Privacy enquiries: admin@sterlingaviationservices.com.au