Privacy Policy
Effective date: 1 June 2025
This Privacy Policy describes how Pan Robotics Ltd. ("Tarmac", "we", "us", "our") collects, uses, and shares personal information when you use our services at tarmac-uav.com.
1. Information we collect
- Account data — name, email address, organisation details provided at sign-up via Clerk.
- Telemetry and drone data — flight data, logs, and diagnostics uploaded by your companion computers.
- Usage data — page views, API calls, and feature usage collected via structured logging (Axiom).
- Payment data — billing details handled entirely by Stripe; we never see raw card numbers.
- Cookies — session cookies issued by Clerk for authentication only. We do not use advertising cookies.
2. How we use your information
- Providing and operating the Tarmac service
- Processing payments and managing subscriptions
- Sending transactional emails (welcome, invitations, billing alerts)
- Diagnosing errors and improving performance
- Complying with legal obligations
3. Data retention
Telemetry and log data is retained according to your plan tier (7 days on Free, up to unlimited on Enterprise). Account data is retained until you request deletion. Stripe retains payment records per their own policy.
4. Third-party sub-processors
| Processor | Purpose | Location |
|---|---|---|
| Clerk | Authentication & identity | US |
| Stripe | Payment processing | US |
| Cloudflare R2 | Object storage | EU/US |
| PlanetScale / TiDB | Database | US |
| Railway | Hosting & compute | US |
| Axiom | Log analytics | US |
| Resend | Transactional email | US |
| Sentry | Error monitoring | US |
5. Your rights (GDPR)
If you are located in the EEA or UK, you have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. You may exercise these rights by emailing info@panrobotics.xyz or by using the self-service data export and account deletion features in the app.
6. Security
Data in transit is encrypted with TLS 1.3. Data at rest is encrypted by the storage provider. API keys are hashed before storage. We conduct periodic security reviews.
7. Contact
Data controller: Pan Robotics Ltd., registered in England & Wales. For privacy enquiries: info@panrobotics.xyz