1. Overview
Airfree Geospatial Pty Ltd ("Airfree Geospatial", "we", "us"), an authorised licensee of Airfree Services Pty Ltd, operates the Airfree Geospatial platform at airfree.au/geospatial. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the EU General Data Protection Regulation (GDPR), and applicable data protection laws in the jurisdictions where we operate.
2. Information we collect
We collect information you provide directly (name, email, organisation, billing details), information generated by your use of the platform (spatial data uploads, API calls, session logs), and technical information automatically collected (IP address, browser type, device identifiers). We do not collect personal information through spatial datasets you upload unless you explicitly include it.
3. How we use your information
We use personal information to: provide and improve the Airfree Geospatial platform; process payments; communicate service updates and security notices; comply with legal obligations; and conduct internal analytics to improve performance. We do not use your information for advertising or sell it to third parties.
4. Data storage and residency
Airfree operates data centres across multiple regions globally. You may configure your preferred data residency region at account setup. Data is not transferred outside your selected region except where required by law or where you explicitly direct a third-party integration. We commit to transparency about any cross-border transfers.
5. Security
We implement security measures aligned with ISO 27001:2022 and SOC 2 Type II (certification in progress). All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems requires MFA and is logged and audited. We conduct independent penetration testing and security assessments.
6. Data retention
Personal information is retained for as long as your account is active or as required by applicable law. Spatial data is retained per your configured retention policy. On account closure, personal data is deleted within 30 days. Audit logs are retained for 7 years for compliance workloads.
7. Your rights
Under GDPR and equivalent laws, you have the right to access, correct, and delete your personal information; withdraw consent; restrict processing; data portability; and lodge a complaint with a relevant supervisory authority. To exercise any of these rights, contact privacy@airfree.au.
8. Cookies
We use essential cookies for session management, and optional analytics cookies (opt-in only). We do not use advertising or tracking cookies. Our cookie consent banner complies with GDPR and the ePrivacy Directive.
9. Contact
Data Protection Officer, Airfree. Email: privacy@airfree.au. This policy was last updated 1 July 2026.