PRIVACY POLICY

1. Data We Collect

When you register and use DOME, we collect the following categories of data:

• Account data: Company name, company ID, username, email address, and password (stored in a form that is irreversible — we cannot read your password).
• Operational data: All data you enter into the platform — projects, crew profiles, drone assets, assignments, incidents, trainings, filing documents, and related records.
• Billing data: Subscription plan, invoice history, and payment status. Payment transactions are processed by Midtrans; DOME does not store card numbers or bank account credentials.
• Technical data: IP address (for rate limiting and security), session identifiers, browser type, and access timestamps in server logs.
• Communication data: Email address used for transactional emails (account verification, password reset, subscription reminders).

We do not collect data about you outside of the platform unless you contact us directly.

2. How We Use Your Data

We use your data solely to provide and improve the DOME service:

• Creating and managing your workspace and user accounts.
• Processing subscription payments and issuing invoices.
• Sending transactional emails (verification, password reset, renewal reminders).
• Sending Telegram notifications if you have configured this feature.
• Detecting and preventing unauthorized access, abuse, or security threats.
• Improving platform performance, fixing bugs, and developing new features.

We do not use your data for advertising, behavioral profiling, or sale to third parties.

3. Data Sharing & Third Parties

DOME uses a limited number of trusted third-party services to operate the platform. Each has access only to the minimum data required for its function:

• Midtrans — Payment processing. Receives billing amount and invoice metadata to process subscription payments. Subject to Midtrans's own privacy policy.
• Mapbox — Interactive maps for flight planning, airspace visualization, and location features. Transmits map tile requests and coordinates. Subject to Mapbox's privacy policy.
• OpenAIP — Aeronautical information overlays (airspace data). Requests are made from your browser. Subject to OpenAIP's terms.
• SMTP Provider — Transactional email delivery (configured by the platform operator). Only your email address and the email content are transmitted.
• Telegram — Optional notification delivery if the Telegram integration is enabled. Only your configured Chat ID is used.

We do not sell, rent, or share your data with any other third parties. We may disclose data if required by law or a valid legal order from a competent authority.

4. Data Storage & Retention

All DOME data is stored on servers located in Indonesia or the region you selected during onboarding, operated by our hosting provider. Data is retained for as long as your account is active.

• If your subscription expires and is not renewed, your account enters a grace period. After the grace period, the account may be suspended but data is not immediately deleted.
• If you request account deletion, your workspace data will be permanently removed within 30 days of the confirmed request.
• Server logs (IP addresses, access timestamps) are retained for up to 90 days for security purposes, then automatically purged.

5. Security Measures

DOME applies appropriate technical and organizational measures to protect your data against unauthorized access, loss, and misuse. We do not publish the specific details of these measures, as doing so would reduce their effectiveness.

In general terms, our security practices cover: encryption of data in transit, secure credential storage, access controls for privileged operations, protection against common web application attacks, and monitoring for anomalous activity.

Despite these measures, no system is completely immune to security incidents. You are responsible for keeping your credentials confidential. If you suspect unauthorized access to your account, notify us immediately at [email protected].

6. Tenant Data Isolation

DOME is a multi-tenant platform. Each registered organization (tenant) has a completely isolated workspace. Your data is never visible to or accessible by other tenants. Strict isolation controls are in place to ensure this separation is maintained at all times.

7. Your Rights

Subject to applicable law — including Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022) and applicable international regulations — you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your account and associated data.
• Data Portability: Export your operational data via the built-in export features in your DOME dashboard.
• Objection: Object to certain uses of your data.

To exercise these rights, contact us at [email protected]. We will respond within 14 business days.

8. Cookies & Local Storage

DOME uses a single session cookie to maintain your login state. It is configured with appropriate security flags and is only transmitted over encrypted connections. Persistent login sessions, if enabled, expire automatically after a fixed period of inactivity.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required beyond this disclosure because we use only strictly necessary cookies.

9. Children's Privacy

DOME is a professional platform intended for use by organizations and their authorized personnel. We do not knowingly collect data from individuals under the age of 18. If you believe a minor has registered an account, contact us at [email protected] and we will remove the account promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we make material changes, we will notify registered tenants via the DOME notification system and update the "Last updated" date above. Your continued use of the platform after notification constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related requests, questions, or complaints:

• Email: [email protected]
• Platform: domeopsapp.com
• Data Controller: DOME — Drone Operations & Management Ecosystem

This policy is effective as of October 2026. See also: Terms of Service