Privacy Policy

Applies to: Pronteer website, web application, iOS and Android applications
Related documents: Pronteer SaaS Terms of Service & End User Licence Agreement; Data Processing Agreement (where applicable).

1. Who we are

This Privacy Notice explains how PRONTEER COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE DESIGN - FZCO (trade licence 30906), trading as Pronteer (“Pronteer”, “we”, “our”), handles personal information through www.pronteer.com, the Pronteer web application and its iOS and Android applications (collectively, the “Services”). We are registered in Dubai Silicon Oasis, Dubai, United Arab Emirates. For privacy questions, contact ops@pronteer.com.

2. Who this Notice covers and our role

Pronteer provides business-to-business software to private aviation operators and related organisations (“Customers”). This Notice covers website visitors, customer contacts, account administrators, authorised crew and other users, and individuals whose information is entered into the Services, including passengers. When we manage our own website, accounts, billing, support and security, we generally decide why and how relevant personal data is processed. When a Customer enters passenger, crew, trip or other operational data for its own purposes, the Customer generally determines those purposes and Pronteer processes that information on its behalf, subject to the applicable customer agreement and Data Processing Agreement (“DPA”). The roles depend on the particular activity and applicable law. Passengers generally do not have Pronteer accounts.

3. Information we process

Depending on how the Services are used, personal data may include: (a) names, business contact details, employer, job title, account identifiers and access permissions; (b) login, authentication, IP address, device, browser, diagnostic and security information; (c) passenger and crew names, dates of birth, nationalities, passport and visa details or copies, other identity and travel documents and their expiry dates; (d) trip records, flight routes, origin and destination, aircraft-related information, supplier arrangements, passenger preferences, operational communications, inventory records and uploaded files where these identify individuals; (e) customer enquiries, support communications and feedback; and (f) subscription plan, billing contact, transaction status and payment-related records. We do not intend to collect full payment-card numbers directly through Pronteer when checkout is processed by payment providers. The Services do not currently offer continuous GPS tracking of users. Customers should upload only information necessary for their legitimate operational purposes, especially where documents concern children or contain sensitive information.

4. Sources of information

We receive information directly from people using or contacting Pronteer; from Customers and their authorised administrators, crew and other users; from customer-directed suppliers or integrations; from our technical systems when people access the Services; and from payment and service providers in connection with account administration. Customers are responsible for ensuring they have an appropriate basis to supply information about passengers, crew and other individuals.

5. Why we use information

We use information, as relevant, to provide and administer accounts and subscriptions; deliver customer-requested aviation coordination and document-management features; authenticate users and manage permissions; respond to support enquiries; maintain system security, investigate misuse and prevent fraud; process and reconcile payments; send essential service notices; comply with applicable legal obligations; protect our rights; and maintain and improve the Services. Where we act as a controller, we rely on the legal grounds available for the specific processing under applicable data protection law, which may include the relevant person's consent where required, performance of a contract, legal obligations and other lawful grounds recognised by applicable law. Where we act on behalf of a Customer, that Customer is responsible for identifying its lawful basis and providing required notices to affected individuals. Marketing messages are subject to applicable requirements and available opt-out rights.

6. Payment and subscription providers

Pronteer uses RevenueCat for subscription management and Stripe for payment processing in its direct payment flow. Those providers may process transaction, payment and account information according to their roles, applicable agreements and privacy notices. Depending on the purchase channel, payments made through Apple App Store or Google Play may also be subject to those platforms' payment and privacy arrangements. Pronteer may receive payment confirmations, subscription status, transaction references and limited billing information rather than full card details. Refunds and cancellation terms are set out in our SaaS Terms of Service & End User Licence Agreement.

7. Sharing of information

We may disclose information to the relevant Customer and its authorised users; hosting and technology suppliers; payment and subscription providers; mapping and customer-requested integration providers; customer support and professional advisers; and public authorities where disclosure is required or permitted by law.

Pronteer uses third-party service providers to support its Platform, including Railway for application hosting and storage, Supabase Auth for authentication, Convex for real-time communications, Resend for transactional emails, RevenueCat for subscription management, Stripe for relevant payment processing, Sentry for error monitoring and PostHog for product analytics.

Depending on the relevant functionality and configuration, these providers may process limited personal information necessary to deliver their services.

Pronteer does not sell passenger or crew personal data to advertisers.

Access by external suppliers is limited to what is appropriate for their role and subject to relevant contractual and legal safeguards. We do not sell passenger or crew personal data to advertisers. We may disclose information in connection with a legitimate business restructuring or sale, subject to applicable law.

8. Hosting and international transfers

Pronteer's primary application infrastructure includes Railway in California, United States, for application hosting, customer databases, uploaded documents and backups; Supabase Auth in London, United Kingdom, for authentication; and Convex in the United States for real-time communications and related functionality.

Additional processing may occur in other jurisdictions where authorised service providers or support personnel operate.

Personal data may therefore be processed outside the United Arab Emirates and outside the country in which the relevant individual resides.

Where applicable data protection laws require specific safeguards for international transfers, Pronteer will establish and maintain the relevant contractual or other legally recognised arrangements.

Customers with specific data residency or international-transfer requirements should contact Pronteer before uploading restricted information.

9. Retention and account closure

Pronteer retains personal information for as long as reasonably necessary to provide its Services and fulfil applicable contractual, security and legal obligations.

Cancellation or expiration of a Customer subscription does not automatically result in deletion of Customer Data. Customer Data may remain stored following cancellation to support export, account reactivation and other legitimate purposes, subject to applicable retention requirements.

The authorised organisation owner may export available Customer Data or request its deletion through the Platform.

Following receipt and verification of a valid deletion request, Customer Data will be removed from active systems within twenty-four (24) hours, except where retention is required or permitted by law.

Residual database backups may retain copies for up to thirty (30) days before expiry.

Certain billing, security, support and legally required records may be retained separately for appropriate periods.

Pronteer will apply retention periods or objective retention criteria appropriate to the relevant categories of personal data and will not retain personal information longer than necessary.

10. Security

We apply technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration and disclosure, taking account of the nature of the data and the Services. Measures may include controlled account access, authentication, cloud security configurations, access management and monitoring. No online service or transmission method is completely secure. Customers are responsible for administering their own authorised users, protecting credentials and using the Services appropriately.

11. Your privacy rights

Depending on applicable law, your location, the type of information and our role, you may have rights to request information about processing, access or correction, deletion, restriction, objection, portability, or withdrawal of consent where processing relies on consent. Contact ops@pronteer.com to make a request. We may need to verify identity and may be legally required or permitted to retain some records. Where information was provided by a Customer acting as controller, we may direct your request to that Customer or assist it in responding.

12. Passenger information and minors

Pronteer is designed for professional aviation operations, not for children to create independent accounts. Customers may enter passenger information relating to minors when needed for legitimate travel and aviation arrangements. Customers should ensure appropriate authority, notices and safeguards for such information, and should avoid entering unnecessary sensitive details.

13. Cookies, analytics and device technologies

Our website and applications may use technologies necessary for functionality, security, authentication and session management. Additional analytics, diagnostic, advertising or similar technologies, if enabled, may collect device or usage information and may require additional notice or consent depending on applicable law. We will provide further information and choices where required. The precise technologies in use may change as the Services evolve.

14. Marketing communications

We may contact business representatives about Pronteer where permitted by applicable law. Recipients can opt out of promotional messages using the unsubscribe method provided or by contacting ops@pronteer.com. Essential account, billing, service and security communications may continue where appropriate.

15. Changes to this Notice

We may revise this Notice to reflect changes to the Services, our practices or applicable law. We will update the effective date and provide additional notice where required. Continued use of the Services does not override consent or other legal requirements that may apply to a change.

16. Contact and complaints

For privacy questions, requests or concerns, contact ops@pronteer.com. Company: PRONTEER COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE DESIGN - FZCO, Dubai Silicon Oasis, Dubai, United Arab Emirates. You may also have the right to complain to an appropriate data-protection authority under applicable law.