Privacy Policy

This Privacy Policy explains what personal information Walkaround collects, how we use it, and the choices you have. Walkaround is operated by Luis Camara from Saskatoon, Saskatchewan, Canada. We can be reached at support@walkaround.report.

1. Information We Collect

Account information

When you create an account we collect your email address and a hashed representation of your password (we never store the plaintext password). We record the date you accepted our Terms and Privacy Policy and whether you opted in to marketing communications.

Report inputs

We store the aircraft registration (tail number) you submit and any optional buyer-profile information you provide (such as your home region, total flight hours, and intended mission). These inputs are used to generate the report and are retained alongside the report row.

Generated reports

We retain the reports we generate for you, including identity data resolved from public registries and the synthesized prose. Reports are linked to your account when you are signed in, or to your email when generated anonymously.

Payment information

We use Stripe to process payments. We do not see or store your full payment card number, expiry, or security code. We do receive and store metadata from Stripe (such as Checkout Session and Payment Intent identifiers, the amount, the currency, the applied price ID, and whether the payment succeeded, refunded, or failed) to maintain an accurate billing record.

Usage and technical data

We log IP addresses associated with anonymous report requests (used solely for rate-limiting and abuse prevention), session-cookie tokens (stored as a hash on our side, not the raw value), and timestamps of significant events. We also record the operational cost of generating each report so we can monitor unit economics.

Communications

We keep a copy of automated email we send you (account verification, password reset, report delivery, billing notices, optional surveys) and of any messages you send to us at support@walkaround.report.

2. How We Use This Information

We use personal information to:

• Operate the Service: generate reports, deliver them by email, and let you sign in.
• Charge you and process refunds where applicable.
• Enforce caps, rate limits, and abuse-prevention controls.
• Send transactional email (account verification, password reset, report delivery, payment receipts via Stripe).
• If you opt in, send occasional product updates; you can unsubscribe at any time.
• Comply with legal obligations and enforce our Terms.
• Improve the Service, fix bugs, and monitor system health.

3. Legal Basis for Processing (where applicable)

Where data-protection law requires us to identify a basis, we rely on (a) performance of a contract with you (operating your account and delivering reports you requested); (b) our legitimate interests in running and securing the Service (rate-limiting, abuse prevention, financial record-keeping); (c) your consent (for marketing emails, which you may withdraw at any time); and (d) compliance with our legal obligations.

4. Third Parties We Share Information With

We do not sell, rent, or trade personal information. We share the minimum necessary information with service providers acting on our behalf:

• Stripe (payment processing). Stripe receives your payment method and processes the charge under their own privacy terms.
• Resend (transactional email delivery). Resend receives your email address and the email body so it can be delivered.
• OpenAI(language-model inference for report generation). OpenAI processes the text of your inputs and the documents we retrieve while assembling a report. We do not enable training on this data; OpenAI’s enterprise/API privacy terms apply.
• Our hosting provider stores the operational database and serves the application. Database access is restricted to the operator.

We may also share information when required by law, regulation, court order, or legal process; to protect the rights, property, or safety of Walkaround, our users, or others; or in connection with a sale, merger, or transfer of all or substantially all of our business assets (you will be notified of any such transfer that materially affects your data).

5. Cookies

Walkaround sets a single essential session cookie to keep you signed in (walkaround_session; HTTP-only, hashed server-side). We do not set analytics or advertising cookies. See our Cookie Policy for details.

6. Data Retention

• Reports are retained for 180 days from generation, then deleted along with their event log.
• Accounts are retained until you ask us to delete them or until we close them for inactivity (no activity for 24 months).
• Billing records are retained for as long as required by applicable tax and accounting law (typically six years in Canada).
• Audit logs of meaningful state changes (payments, refunds, subscription transitions) are retained for at least 24 months for fraud investigation and reconciliation.

7. Security

We use industry-standard practices including TLS for data in transit, argon2id for password hashing, HTTP-only session cookies, and least-privilege access to the operational database. No system is perfectly secure; if we become aware of a breach affecting your personal information we will notify you and the appropriate authorities consistent with applicable law.

8. Your Choices and Rights

Subject to applicable law you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated personal information, except for records we are required by law to retain (such as billing records for tax compliance).
• Export a copy of your data (reports, payments, settings).
• Withdraw consent to marketing communications at any time.
• Object to or restrict processing of your data in certain circumstances.
• Lodge a complaint with your local privacy regulator (in Canada, the Office of the Privacy Commissioner; in the EU, your national data protection authority).

To exercise any of these rights, email support@walkaround.report. We will respond within 30 days.

9. International Transfers

Walkaround operates from Canada. Some of our service providers (Stripe, Resend, OpenAI, our hosting provider) operate in the United States and other countries. If you access the Service from outside Canada you consent to your information being transferred to and processed in Canada and other jurisdictions where our providers operate, which may have different data-protection laws than your country of residence.

10. Children

The Service is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “effective date” at the top reflects the current version. For material changes we will notify registered users by email or in-product notice. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

12. Contact

Questions, requests, or complaints about this policy can be sent to support@walkaround.report.