← Home

Privacy Policy & Data Processing Agreement

Effective: 1 June 2026 | GDPR compliant | Rwanda Data Protection Law compliant

Data Controller

Inspect Africa Pro (a product of Inspect Africa Ltd), Kigali, Rwanda. Contact: privacy@inspectafricapro.com

Data We Collect

Aviation maintenance records, aircraft data, personnel records (name, licence number, role), audit logs. We do not collect: payment card data (processed by Stripe), passwords (hashed by Supabase Auth).

Legal Basis (GDPR Art. 6)

Contract performance: records required to provide the MRO software service. Legal obligation: EASA Part-145.A.55 requires retention of maintenance records. Legitimate interest: system security, fraud prevention.

Data Retention

Aviation maintenance records: 3 years minimum (EASA Part-145.A.55). Audit logs: 3 years. Personal data (staff records): duration of contract + 1 year. Financial records: 7 years (legal requirement).

Data Residency

Primary data stored on Supabase (hosted on AWS EU region by default). Enterprise customers may request dedicated regional deployment. Data does not leave the contracted region without explicit consent.

Sub-processors

Supabase Inc (database) -- DPA signed Vercel Inc (hosting) -- DPA signed Anthropic PBC (AI features, opt-in only) -- data not retained Stripe Inc (billing) -- PCI-DSS compliant Resend (email) -- DPA signed

Your Rights (GDPR)

Access: request copy of your personal data Rectification: correct inaccurate data Erasure: request deletion (subject to legal retention requirements) Portability: export data in standard format Object: opt out of non-essential processing Contact: privacy@inspectafricapro.com