Privacy policy

2. Information we collect

We collect information in three ways: information you provide to us directly, information we collect automatically when you use our website or platform, and information we receive from third parties.

a) Information you provide directly

• Contact information (name, email, phone number, company, and job title) when you book a demo, request information, or contact us.
• Account information when you sign up for AVIR platform access.
• Communications you send us, including emails, support requests, and feedback.
• Payment and billing information for customers.

b) Information collected automatically

• Log data, including IP address, browser type, pages visited, and timestamps.
• Device information, including operating system, device type, and screen size.
• Cookies and similar tracking technologies, limited to essential and analytics purposes; we do not use cookies for advertising.
• Usage data within the AVIR platform, including features used, session duration, and actions taken.

c) Information from third parties

• Data from OAuth providers if you choose to sign in with Google or Microsoft.
• Business contact data obtained from lawful commercial databases used for outreach.
• Referral information when you are introduced to us by an existing customer or partner.

3. How we use information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the AVIR platform and our services.
• To communicate with you about your account, our services, and important updates.
• To respond to your inquiries and provide customer support.
• To personalize your experience and offer relevant recommendations.
• To detect, prevent, and address technical issues, fraud, and security threats.
• To comply with our legal obligations and to enforce our terms.
• For business analytics and product improvement, using aggregated and de-identified data.

We do not use your operational aerospace data to train AI models for other customers. The data you process through AVIR belongs to you, and it is not repurposed for the benefit of any other party.

4. Legal basis for processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we rely on one or more of the following legal bases to process your personal information:

• Contract performance, to deliver the services you have contracted for.
• Legitimate interests, such as improving our platform and maintaining security.
• Consent, for marketing communications and optional features.
• Legal obligations, such as tax and regulatory compliance.

5. How we share information

We share personal information only in the limited circumstances described below:

• With service providers, including cloud hosting, analytics, and payment processing partners, under strict data processing agreements.
• In connection with business transfers, such as a merger, acquisition, or sale of assets.
• To meet legal requirements, including court orders and regulatory requests.
• With your explicit consent, for any other purpose you approve.

We do not sell personal information to any third party.

6. Data storage, location, and security

We take the security of your information seriously and apply industry-standard safeguards:

• Data is held in encrypted environments, using AES-256 encryption at rest and TLS 1.3 in transit.
• Primary hosting regions include the EU (Frankfurt) and the US, depending on customer requirements.
• Data residency options are available for EU customers under the GDPR.
• We enforce access controls, multi-factor authentication, audit logging, and regular security reviews.
• We maintain incident response procedures and provide breach notification within 72 hours where required under the GDPR.

7. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy or to meet legal requirements:

• Contact information is retained while the relationship is active, plus 3 years.
• Platform usage data is retained for the duration of the contract, plus 90 days after termination.
• Legal and financial records are retained for 7 years, as required by law.
• Deletion procedures are available on request.

8. Your rights

Depending on your location, you have rights over the personal information we hold about you. In all cases, you may exercise the following core rights:

• Access, correction, and deletion of your personal data.
• Data portability, including export in a machine-readable format.
• Objection to processing and withdrawal of consent.
• Complaint to a supervisory authority.

EU residents

If you are located in the European Union, you have the full set of rights under the GDPR, including the rights of access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with your local data protection authority.

California residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As noted above, we do not sell personal information.

9. International data transfers

Because we operate globally, your information may be transferred to and processed in countries other than the one in which you reside. Where we transfer personal information across borders, we apply appropriate safeguards:

• Standard Contractual Clauses (SCCs) for transfers from the EU to the US.
• Adequacy decisions, where applicable.
• Additional safeguards for sensitive data.

10. Cookies and tracking

We use cookies and similar technologies to operate our website and understand how it is used:

• Types of cookies used, including essential, functional, and analytics cookies.
• You can control cookies through your browser settings, including blocking or deleting them.
• Third-party tools, such as Google Analytics where used, may set their own cookies.
• We honor Do Not Track signals where technically feasible and do not track you across third-party sites for advertising.

11. Children's privacy

Our website and services are not directed at individuals under the age of 18, and we do not knowingly collect personal information from minors. If we become aware that we have collected personal information from someone under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at privacy@avir.space.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the effective date on this page and, where appropriate, by email or through the platform. Each update takes effect on the effective date shown at the top of this policy. Historical versions of this policy are available on request via privacy@avir.space.

13. Contact us

If you have questions about this policy or wish to exercise your rights, please contact our Privacy Contact and Data Protection Officer at privacy@avir.space.

Lansar Industries, Inc., 1511 3rd Ave, Suite 1002-1044, Seattle, WA 98101, United States.

For EU residents, our EU representative details are available on request via privacy@avir.space.