Privacy Policy

At FantomAero, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you interact with our website, pre-order system, member portal, and Fantom X eVTOL aircraft.

This policy applies to all FantomAero services, including our website, mobile applications, aircraft systems, and customer communications. By using our services, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Personal Information

We collect personal information that you provide directly to us, including:

• Contact Information: Name, email address, phone number, mailing address
• Account Credentials: Username, password, security questions for member portal access
• Payment Information: Credit card details, billing address, cryptocurrency wallet addresses
• Identification Documents: Pilot license, government-issued ID, aviation certifications
• Pre-Order Details: Vehicle configuration preferences, deposit information, delivery preferences

1.2 Aircraft Operational Data

Our Fantom X aircraft collects operational and telemetry data, including:

• Flight Data: GPS coordinates, altitude, speed, flight duration, route information
• Performance Metrics: Battery consumption, motor performance, system diagnostics
• Safety Systems: Collision avoidance logs, emergency procedure activations, system alerts
• Maintenance Data: Component usage hours, service alerts, diagnostic codes
• Environmental Conditions: Weather data, air quality, wind conditions during flights

1.3 Automatically Collected Information

When you use our website and services, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, navigation patterns, click data
• Cookies & Tracking: Session cookies, preference cookies, analytics cookies
• Location Data: Approximate location based on IP address or GPS (with your permission)

1.4 Member Portal Data

Our member portal collects and stores:

• Order History: Pre-order status, payment history, configuration changes
• Communication Logs: Support tickets, email correspondence, chat transcripts
• Preferences: Communication preferences, notification settings, dashboard customizations
• Documents: Uploaded pilot certifications, insurance documents, training records

2. How We Use Your Information

2.1 Service Delivery

• Processing and fulfilling pre-orders and aircraft purchases
• Managing member portal accounts and authentication
• Providing customer support and responding to inquiries
• Scheduling deliveries and coordinating training programs
• Processing payments and managing billing

2.2 Aircraft Safety & Performance

• Monitoring aircraft performance and identifying potential issues
• Providing predictive maintenance alerts and recommendations
• Improving safety systems and emergency response protocols
• Conducting safety investigations when required by regulators
• Developing software updates and performance enhancements

2.3 Communication & Marketing

• Sending order confirmations, delivery updates, and service notifications
• Providing marketing communications about new products and features (with consent)
• Sending safety alerts, recalls, and regulatory updates
• Conducting customer surveys and collecting feedback

2.4 Legal & Regulatory Compliance

• Complying with aviation regulations and safety reporting requirements
• Verifying pilot credentials and aviation certifications
• Responding to legal requests and government inquiries
• Preventing fraud, security threats, and illegal activities
• Enforcing our Terms of Service and protecting our rights

3. Data Storage & Security

3.1 Storage Infrastructure

3.2 Data Retention

• Pre-Order Data: Retained for 7 years after transaction completion for tax and legal purposes
• Aircraft Telemetry: Retained for 10 years to support safety investigations and warranty claims
• Account Information: Retained while your account is active, plus 2 years after account closure
• Marketing Communications: Retained until you unsubscribe or withdraw consent
• Legal Records: Retained as required by aviation regulations and legal obligations

3.3 Payment Security

4. Data Sharing & Third Parties

4.1 Service Providers

We share data with trusted third-party service providers who assist with:

• Payment Processing: Stripe, PayPal, and cryptocurrency payment gateways
• Cloud Infrastructure: Supabase, AWS, or Google Cloud for data storage and hosting
• Communication Services: Email delivery, SMS notifications, customer support platforms
• Analytics: Google Analytics for website usage analysis (anonymized where possible)
• Shipping & Logistics: Delivery partners for aircraft transportation

4.2 Regulatory Authorities

We may share data with aviation regulators when required:

• Federal Aviation Administration (FAA) for safety investigations
• European Union Aviation Safety Agency (EASA) for certification compliance
• National Transportation Safety Board (NTSB) for accident investigations
• Local aviation authorities in your jurisdiction

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

4.4 Legal Requirements

We may disclose information when required by law, including responding to subpoenas, court orders, or government requests, and when necessary to protect our rights, safety, or property.

5. GDPR Compliance & European User Rights

5.1 Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill pre-orders and deliver aircraft
• Consent: Marketing communications, optional data collection (can be withdrawn)
• Legal Obligation: Compliance with aviation regulations and safety requirements
• Legitimate Interest: Improving products, fraud prevention, business operations

5.2 Your GDPR Rights

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Limit how we process your data in certain circumstances
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Opt out of processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Revoke consent for optional data processing at any time

5.3 Exercising Your Rights

To exercise any GDPR rights, contact us at:

5.4 Data Protection Officer

Our Data Protection Officer can be reached at:

5.5 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have violated GDPR regulations. We encourage you to contact us first so we can address your concerns directly.

6. Your Privacy Choices & Controls

6.1 Member Portal Settings

Through your member portal, you can:

• Update your contact information and preferences
• Manage communication subscriptions (marketing emails, SMS notifications)
• Control aircraft data sharing settings
• Download your personal data in portable format
• Request account deletion (subject to legal retention requirements)

6.2 Marketing Communications

• Unsubscribe from marketing emails using the link in any email
• Opt out of SMS marketing by replying "STOP" to any message
• Manage preferences in your member portal settings
• Note: You cannot opt out of transactional emails related to your order

6.3 Cookies & Tracking

Control cookie preferences through:

• Browser settings to block or delete cookies
• Our cookie consent banner on first visit
• Opting out of Google Analytics tracking
• Using "Do Not Track" browser settings (we honor these signals)

6.4 Aircraft Data Controls

You can manage aircraft data collection through your vehicle's settings dashboard. However, certain safety-critical data collection cannot be disabled as it is required for regulatory compliance and warranty coverage.

7. Children's Privacy

FantomAero services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@fantomaero.com so we can delete it.

Aircraft operation requires valid pilot certification, which is only available to adults meeting age and training requirements set by aviation regulators.

8. International Data Transfers

8.1 Cross-Border Transfers

FantomAero is based in the United States. If you are located outside the US, your data may be transferred to and processed in the United States or other countries where our service providers operate.

8.2 Safeguards

We implement appropriate safeguards for international data transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all third-party processors
• Compliance with EU-US Data Privacy Framework principles
• Technical and organizational security measures

8.3 Data Localization

Where required by local laws (e.g., China, Russia), we may store certain data within the country to comply with data localization requirements. Such data remains subject to this Privacy Policy.

9. California Privacy Rights (CCPA/CPRA)

9.1 Information for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request details about the personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information (with exceptions)
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information
• Right to Limit: Limit use of sensitive personal information
• Non-Discrimination: Exercise rights without discriminatory treatment

9.2 Sale of Personal Information

FantomAero does not "sell" personal information as defined by CCPA. We do not exchange your data for monetary consideration. Data shared with service providers is strictly for business purposes under contractual protections.

9.3 Submitting CCPA Requests

To exercise your California privacy rights:

9.4 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We require written authorization from you and verification of the agent's identity before processing such requests.

10. Data Breach Notification

10.1 Our Commitment

In the unlikely event of a data breach that compromises your personal information, we will notify you as required by applicable laws. Notifications will be sent via email within 72 hours of discovering the breach (as required by GDPR) and will include:

• Description of the breach and types of data affected
• Potential consequences and risks to your privacy
• Steps we are taking to mitigate harm
• Recommendations for protecting yourself
• Contact information for questions and support

10.2 Regulatory Notification

We will also notify relevant data protection authorities and aviation regulators as required by law, ensuring full transparency and compliance with reporting obligations.

11. Updates to This Privacy Policy

12. Contact Us