Privacy Policy

This Privacy Policy explains how VirtualDispatch ("VirtualDispatch", "we", "us") collects, uses and protects personal data when you use the service at virtualdispatch.app (the "Service").

1. Data controller

VirtualDispatch is currently operated by an individual based in Italy, not yet through a registered company. For the purposes of the EU General Data Protection Regulation (GDPR), the operator of virtualdispatch.app acts as the data controller for personal data processed through the Service. You can contact us at privacy@virtualdispatch.app for any privacy-related request.

2. What data we collect

• Account data: the email address and password you provide when creating an account. Passwords are never stored by us in readable form — account authentication is handled by our identity provider, Supabase Auth, which stores only a salted hash.
• Profile data: optional profile fields you choose to fill in (first name, last name, birth date, nationality, SimBrief username).
• Service usage data: the PIREPs you file, your generation settings (which delay/MEL/LMC categories are enabled), and derived flying statistics — all tied to your account and visible only to you.
• Technical data: standard web server logs (IP address, browser user agent, request timestamps) collected automatically by our hosting provider for security and reliability purposes.
• Cookies: see our Cookie Policy for details.

3. Why we process your data

• To create and manage your account, and to provide the core functionality of the Service (contract performance).
• To send you account-related emails: email verification, password reset, and important service notices (contract performance / legitimate interest).
• To maintain the security and integrity of the Service, including preventing abuse (legitimate interest).
• With your consent, to understand how the Service is used through analytics, where enabled (consent — see our Cookie Policy).

4. Who we share data with

We use the following sub-processors to operate the Service. Each processes data on our behalf under their own data processing terms:

• Supabase — hosts our database and provides account authentication/email verification.
• Render — hosts the application itself.
• Resend — delivers transactional account emails (verification, password reset).

These providers may process data on infrastructure located outside the European Economic Area. Where this is the case, they provide appropriate safeguards (such as Standard Contractual Clauses) for the transfer. We do not sell your personal data to third parties, and we do not share it for third-party advertising purposes.

5. How long we keep your data

We keep your account and associated data for as long as your account remains active. If you delete your account (or ask us to), we will delete your associated data within a reasonable time, except where we are required to retain certain records by law.

6. Your rights

Under the GDPR, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise any of these rights, contact us at privacy@virtualdispatch.app. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with your own country's supervisory authority.

7. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do. Continued use of the Service after a change constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Reach us at privacy@virtualdispatch.app.