Privacy Policy

Effective date: 7 September 2026 · Contact: [email protected]

1. Who is responsible for your data

DronePoint ("DronePoint", "we", "us") operates the website and service at dronepoint.app and is the controller of the personal data described in this policy. DronePoint is operated from Israel. You can reach us about any privacy matter at [email protected].

DronePoint offers its service to users in the EU, the UK, and elsewhere. Where the EU General Data Protection Regulation (GDPR), the UK GDPR, the Israeli Privacy Protection Law, or another applicable privacy law gives you rights, we honour them regardless of where we are based.

2. Summary

This section is a plain-language overview. The numbered sections below are the full policy.

DronePoint collects as little personal data as practical. Most people can plan and export missions without an account, and we do not store those missions. If you use a team plan, we store an account and the missions your team chooses to save. We use limited technical logs to operate the service, and rely on Lemon Squeezy for paid checkout and payment records. Optional analytics and advertising cookies are used only with your consent — see our Cookie Policy.

3. Information We Process

• Mission data: coordinates, polygons, waypoints, takeoff point, altitude, overlap, camera, terrain, and export settings submitted to generate a mission file. This is processed to build your file and is not stored, unless you explicitly save a mission to a team library (below).
• Saved missions (Pro and team plans): if you save a mission, we store its name, its full settings, and when it was saved. On a team plan we also store who saved it. On Pro (up to 5 missions) the library is linked to a one-way hash of your licence key, never the key itself. Saved missions remain until you or your team delete them.
• Account data (team plans only): your email address, an identifier from our payment provider, your team and role within it, and sign-in sessions. We create an account from the email attached to your licence when you first sign in.
• Feedback: anything you write in the feedback form, and the email address you optionally supply so we can reply. The form asks you to confirm consent before it is sent.
• Location search: place searches sent through our server to a geocoding provider.
• Browser location: if you permit geolocation, your browser may use your location to center the map. This is controlled by your browser permission and can be revoked there at any time.
• Technical logs: IP address, user agent, timestamps, request paths, error data, and security diagnostics.
• Analytics & advertising (consent-based): if you accept optional cookies, Google Analytics and Google Ads process usage and ad-measurement data as described in the Cookie Policy. If you decline, these do not run. Cookieless Umami analytics collect only aggregate, non-identifying traffic data.
• Payment/customer data: name, email, country, tax information, invoices, subscription status, refunds, and payment metadata handled by Lemon Squeezy and shared with us as needed to provide paid access.
• Support messages: information you send when contacting support.

4. How We Use Information

We use information to generate mission files, provide support, secure and debug the service, maintain paid access, comply with legal obligations, process refunds, prevent abuse, measure our advertising (only with consent), and improve reliability. We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Legal Bases (GDPR / UK GDPR)

• Performance of a contract — generating mission files you request, providing paid access, running team accounts and the shared library.
• Legitimate interests — operating, securing, and debugging DronePoint; preventing abuse and fraud; keeping short technical logs; using cookieless aggregate analytics. We balance these against your rights.
• Consent — optional analytics and advertising cookies, and processing feedback you submit through the feedback form. You can withdraw consent at any time (cookie settings; for feedback, by contacting us).
• Legal obligation — tax, accounting, and responding to lawful requests.

6. Retention

Mission data submitted for export is transient: it is used to build your file and is not kept. Generated download files remain briefly on the server for delivery and are deleted automatically within about an hour.

Saved missions are different. If you save a mission to your Pro library, it is stored until you delete it. If you save a mission to a team library, it is stored until you or another member of your team deletes it, or the account is closed. Deleting a mission removes it; closing an account deletes that account, its sessions, and — if you own the team — the team and all of its saved missions.

If a team subscription ends, saved missions remain available for a short grace period so a lapsed renewal does not interrupt work in progress, after which the team's access ends. Feedback is kept while it remains useful for improving the product. Technical logs are typically retained for up to 30 days unless needed longer for security, debugging, fraud prevention, legal compliance, or dispute handling. Payment and tax records are retained by Lemon Squeezy and may be retained by us as required for accounting and legal obligations. Cookie-based analytics data is retained per the periods in the Cookie Policy.

7. Sharing and Service Providers

Within your team. If you are on a team plan, the missions you save are visible to every other member of that team, along with your email address and the fact that you saved them. The team owner can see the members of the team, invite people, and remove them. Do not save anything to a shared library that you would not want your teammates to see.

We share information with the processors and providers below only as needed to run DronePoint. We do not sell personal data or share it for cross-context behavioural advertising. We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer.

8. Cookies and Local Storage

DronePoint uses browser localStorage for strictly necessary things — remembering UI settings, your paid access key, a team session token, and your cookie choice. Clearing your browser storage signs you out and resets preferences. Optional Google Analytics and Google Ads cookies load only if you accept them in the cookie banner; you can change or withdraw that choice any time via cookie settings. Full detail, including cookie names and lifetimes, is in the Cookie Policy.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. Where we rely on legitimate interests, you may object at any time. If you have an account, you can delete individual saved missions yourself at any time. To delete your account entirely, or to request a copy of your data, email [email protected]; we will respond within the time your law requires (generally one month under the GDPR/UK GDPR). Deleting an account removes the account, its sessions, and any team and saved missions you own. For payment data, you may also need to use Lemon Squeezy's customer portal or support channels. We do not charge for a first, reasonable request and will not discriminate against you for exercising these rights.

10. Right to Complain

If you are in the EU or UK, you may lodge a complaint with your local data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). In Israel it is the Privacy Protection Authority. We would appreciate the chance to address your concern first at [email protected].

11. International Transfers

DronePoint is operated from Israel, and our providers may process data in the United States, the EU, and elsewhere. Israel has an EU adequacy decision for personal data transfers. Where data goes to a country without an adequacy decision (for example, transfers to Google in the United States), our providers rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and, for Google, the EU–US Data Privacy Framework, as applicable.

12. Security

We use reasonable technical and organisational measures — including transport encryption (HTTPS), access controls, and short log retention — to protect personal data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

13. Children

DronePoint is not directed to children. You must be at least 16 (or the minimum age of digital consent in your country, or older where drone law requires) to use DronePoint. We do not knowingly collect personal data from children below that age; if you believe a child has provided us data, contact us and we will delete it.

14. Changes

We may update this policy. Material changes will be reflected in the effective date above and, where the change concerns optional cookies, we will ask for your consent again. Continued use after an update means you have read the current version.

15. Contact

Privacy questions can be sent to [email protected].