Privacy Policy

1. Overview

Aegisky Inc. ("we", "us", "our") operates the B2B drone supply chain platform. This Privacy Policy describes how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

3. Personal Data We Collect

• Account Data: Name, email, company name, phone number, password (hashed)
• Order Data: Shipping/billing address, payment info (processed by Stripe; we never store full card numbers)
• RFQ Data: Product inquiries, quantities, specifications
• Technical Data: IP address, browser type, device information, cookies
• Communication: Emails, support tickets

4. Legal Basis (GDPR Article 6)

• Contract performance: Processing orders, delivering products
• Legitimate interest: Fraud prevention, security, service improvement
• Consent: Marketing communications (opt-out anytime)
• Legal obligation: Tax, accounting, regulatory compliance

5. Your GDPR Rights

Exercise rights at privacy@aegisky.com. Response within 30 days.

6. Data Retention

• Account data: While active, deleted within 12 months of closure
• Order data: 7 years (tax/legal requirements)
• Communication data: 3 years
• Technical/log data: 90 days

7. Processors & Transfers

• Stripe — Payment processing (PCI DSS)
• EasyPost/DHL/FedEx/UPS — Shipping
• Cloudflare — CDN & security

International transfers protected by EU Standard Contractual Clauses.

8. Security

TLS 1.3 encryption, 256-bit SSL, bcrypt password hashing, regular audits. Payment data processed exclusively through Stripe's PCI-compliant infrastructure.

9. Contact