Privacy Policy

We collect information you provide directly:

• Account information (email address)
• Property information (location, acreage, boundaries)
• Imagery and flight data collected over your land
• Annotations, reports, and notes you create in the platform

If you use our eligibility checker or other lead-capture forms before creating an account, we collect the information you submit, which may include your name, email address, property location and size, and any interest or pricing preference you indicate.

We also collect limited usage data:

• Log data (IP address, browser type, pages visited)
• Device information

We use your information to:

• Provide, operate, and improve the Service
• Schedule and deliver drone flights to your properties
• Process imagery and generate analysis outputs
• Communicate with you about your account and flights
• Respond to inquiries and, where you have asked to hear from us, send information about the Service (you can unsubscribe from marketing email at any time)
• Comply with legal obligations

We do not sell your personal data or your property data to third parties, and we do not use it for targeted advertising.

Your data is stored on infrastructure provided by Supabase (database) and Cloudflare R2 (imagery). We implement industry-standard security measures including encryption at rest and in transit, and row-level access controls so users only access their own organization’s data. If a breach affecting your personal information occurs, we will notify you and applicable authorities as required by law.

We share data only in these limited circumstances:

• Service providers — infrastructure and processing vendors who operate under data processing agreements. These include Supabase (database and authentication), Cloudflare R2 (imagery storage), Vercel (application hosting), Resend (email delivery), and Sentry (error monitoring and diagnostics).
• Flight operations — pilots or operators who need property location to conduct a scheduled flight
• Legal requirements — when required by law, court order, or to protect rights and safety

When the Service encounters an error, we send a diagnostic report to Sentry to help us diagnose and fix it. We configure Sentry to strip identifying details before transmission — including IP addresses, request parameters (such as any addresses or coordinates you enter), cookies, and request bodies — and we do not record session replays of your activity.

We retain account and property data for as long as your account is active. For active subscribers, recent flight imagery is kept in active storage and older imagery is moved to lower-cost archival storage but remains retrievable. After cancellation, your core deliverables (reports, boundary files, and web-optimized imagery) remain available to download, and we retain full-resolution imagery so it can be re-issued on request. Lead-capture information is retained for a reasonable period to follow up on your inquiry. We delete or de-identify data when it is no longer needed, subject to legal and contractual requirements.

Imagery collected over your property belongs to you. We process it to deliver the Service and may use aggregated, anonymized insights (e.g., regional vegetation trends) to improve our models, but we will never share identifiable imagery of your land without your consent. We direct image capture at your property for land-condition mapping and do not repurpose or market imagery that incidentally includes neighboring property or individuals.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your property data and imagery

Texas residents: depending on our size and your residency, you may have rights under the Texas Data Privacy and Security Act, including the rights to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of the sale of personal data or targeted advertising. We do not sell personal data or use it for targeted advertising. We treat precise geolocation and similar information as sensitive and will obtain your consent before any use that would require it.

To exercise any right, or to appeal a decision about a request, contact us at [email protected].

We use session cookies for authentication (via Supabase Auth). We do not use third-party tracking cookies or advertising cookies.

The Service is not directed at children under 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy. We will notify you of material changes via email. Continued use of the Service after changes take effect constitutes acceptance.

Kestryn LLC is the controller of your personal data. Questions about this policy? Email us at [email protected].