Privacy Policy

ULMove — Contact: see form at bottom of page

This policy describes how ULMove collects, uses and protects your personal data, in compliance with GDPR (EU 2016/679).

Registration: email, hashed password, name, language. Usage: profile, license, logbook, aircraft, bookings, messages. Technical: IP, user agent, cookies, error logs. Payment: handled exclusively by Stripe.

Account management, service delivery, notifications, legal compliance, security, anonymized analytics.

Account: while active + 1 year. Logbooks: 10 years (legal). Accounting: 10 years. Logs: 6 months max.

Subprocessors: Supabase (database), Vercel (hosting), Stripe (payments), SendGrid (emails). Other users for matching. No commercial sale.

Some subprocessors are based outside the EU (USA, Singapore). Transfers are framed by EU Standard Contractual Clauses + SOC 2 certifications.

Under GDPR: access, rectification, erasure, restriction, portability, objection, withdrawal of consent. Use the contact form at the bottom of this page. Right to lodge a complaint with the CNIL.

Essential cookies (always active) and analytics (with consent). Manage your preferences via the banner.

TLS encryption, hashed passwords (bcrypt), Row Level Security, regular audits, 72h breach notification.

Use the contact form at the bottom of this page.