Privacy Policy

This policy explains what personal information DroidMap collects when you use our website and platform, what we do with it, and the choices you have.

DroidMap is operated by Droid Map Pty Ltd (ABN 62 663 773 644) ("DroidMap", "we", "us"). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information we collect

Information you give us

• Account details. Your name, email address and password when you create an account. Passwords are handled by our sign-in provider and are never visible to us.
• Organisation details. The name of your organisation and the people you invite to it.
• Imagery and project data. Drone imagery and other files you upload, and the maps, models and measurements we produce from them. Drone photos usually carry embedded metadata (EXIF), including the GPS location where each photo was taken, the time it was taken, and details of the camera and aircraft. We read this metadata to process your imagery, and it is stored with it.
• Billing details. When you buy a plan or credits, your payment card details are collected and stored by our payment provider, Stripe. We do not see or store your full card number. We keep a record of your plan, purchases, invoices and billing contact.
• Messages to us. The content of emails or other messages you send us.
• Waitlist and sign-up requests. The email address you enter on our website to join the waitlist or request access.

Information collected automatically

• Usage of the platform. Records of what you use that we bill for, such as processing time, storage and data transfer.
• Technical and diagnostic data. Server logs, error reports and performance data generated when you use the platform. These can include your IP address, browser type, and the time and nature of a request.
• Website analytics. Our public website uses Plausible Analytics, which counts page views and referring sites in aggregate. Plausible does not use cookies and does not collect information that identifies you individually.

How we use your information

We use personal information to:

• provide the platform, including processing your imagery into maps and models;
• create and secure your account and sign you in;
• measure usage and bill you for it, and process payments;
• respond to your enquiries and send you service messages, such as processing notifications, receipts and security notices;
• send you news about DroidMap, such as new features and offers;
• keep the platform reliable and secure, including diagnosing faults and preventing abuse;
• understand, in aggregate, how the website and platform are used so we can improve them; and
• comply with our legal obligations.

Every marketing email has an unsubscribe link, and you can also ask us to stop by email. Service messages are part of providing the platform, so they continue while you have an account.

We do not sell your personal information.

Your content

The imagery you upload, and the maps, models, measurements and anything else you create on the platform, belong to you. We use your content only to provide the platform to you.

The one exception is aggregate metrics about how the platform is used, such as the number of images processed or the total area mapped across all customers. These are combined with other customers' figures and do not reveal your content.

We will not use your content for any other purpose without the express permission of its owner. This includes:

• marketing material, such as case studies, showcase imagery or examples on our website; and
• training or improving our models.

You can withdraw your permission at any time.

Who we share it with

We use the following service providers to run DroidMap. They process personal information on our behalf and only for the purpose of providing their service to us.

• Amazon Web Services hosts the platform, stores your data and sends our emails. Amazon Cognito, part of AWS, manages accounts and sign-in.
• Stripe processes payments and stores payment card details.
• Grafana Cloud stores the logs, error reports and performance data we use to keep the platform running.
• Plausible Analytics provides cookie-free, aggregate analytics for our public website.

Usage metering and invoicing run on Lago, which we operate ourselves on our own AWS infrastructure, so that data is not shared with a separate company.

Members of your organisation can see the data shared with that organisation.

We may also disclose information if required by law, to protect the rights or safety of DroidMap, our users or others, or as part of a sale or restructure of our business, in which case this policy would continue to apply.

Where your data is stored

Your account, imagery and project data are stored by Amazon Web Services in the Sydney, Australia region (ap-southeast-2). Our website is delivered through a global content delivery network, which may cache copies close to where you are.

Grafana Cloud also stores our logs and diagnostic data in Australia.

Two of our service providers store data outside Australia: Stripe in the United States, and Plausible in the European Union. Before we disclose personal information to an overseas provider, we take reasonable steps to make sure it handles that information consistently with the Australian Privacy Principles, including by using providers that are bound by contractual data protection commitments.

How long we keep it

We keep personal information only for as long as we need it for the purposes above:

• account and project data, including your imagery, for as long as your account is open and for 30 days after it is closed, so that an accidental closure can be undone;
• billing records, for five years, as Australian tax law requires;
• logs and diagnostic data, for up to 13 months; and
• waitlist emails, until you sign up or ask us to remove you.

Cookies and browser storage

Our public website does not set cookies. Its analytics are cookie-free.

The platform uses your browser's storage to keep you signed in. This is necessary for the platform to work and is not used for advertising or to track you across other sites. Stripe may set its own cookies on its payment pages to prevent fraud. Those are governed by Stripe's privacy policy.

Your choices and rights

You can ask us to:

• access the personal information we hold about you;
• correct information that is wrong or out of date;
• delete your account and the personal information and imagery associated with it; and
• export your imagery and project data.

To make a request, email us at the address below. We will respond within 30 days. We may need to verify your identity first, and we may keep some information where the law requires us to, such as billing records.

If you are not satisfied with how we handle a privacy concern, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

DroidMap is not directed at children and we do not knowingly collect personal information from anyone under 16. You must be at least 16 to use DroidMap.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed. If we make a significant change we will tell you by email or in the platform before it takes effect.

Contact us

Questions or requests about privacy go to contact@droidmap.com.