Privacy
Who is responsible for your information
This product is operated by Waypoint Labs Pty Ltd, registered in Queensland, Australia.
For privacy inquiries, data access requests, or regulatory questions, contact our Privacy Officer at [email protected].
What we hold
These are the records the product stores about you and your station:
- Account Details: Your name, email address, company details, and bcrypt-hashed password. We never store or view raw passwords.
- Station & Geospatial Records: Properties, paddocks, mob counts and cattle weights, water points and water checks, fence lines and inspections, pasture dry matter assessments (kg DM/ha), wildlife sightings, and musters.
- Flight Telemetry & Hardware: Aircraft serial numbers, Remote ID registrations (14 CFR Part 89), GPS waypoints, flight paths, and battery logs.
- Subscription & Billing: Subscription plan status and invoice history. Payment cards are processed directly by Stripe and never touch our servers or database.
- Security & Audit Logs: Immutable records of significant actions, kept for accountability and regulatory compliance.
Why we hold it
To run the product for you, execute autonomous mission planning, calculate feed budgeting forecasts, process subscription billing, and provide technical support. We do not sell your data, and we do not send unsolicited marketing email.
Who else can see it
We disclose data to vetted technical sub-processors under strict contractual terms:
| Sub-Processor | Purpose | Location / Jurisdiction |
|---|---|---|
| Stripe, Inc. | Payment processing & subscription management | Australia / United States |
| Cloudflare, Inc. | Edge CDN, DNS, and static application hosting | Global / Australia Edge |
| Fly.io, Inc. | Core API server & backend microservices | Sydney, Australia (SYD) |
| Anthropic, PBC | AI flight copilot and mission route intelligence | United States |
How long we keep it
Your station records are retained while your account remains active. When you close your account, your personal details, property boundaries, and flight plans are permanently deleted from our primary database via cascading deletion. Financial and billing audit records are retained for seven (7) years to comply with Australian Taxation Office (ATO) statutory requirements.
Getting a copy, or getting it deleted
You can download a complete JSON export of all your station records, or permanently close your account and remove your records, directly from your settings page.
Keeping it safe
Passwords are encrypted using bcrypt salted hashing, network traffic is encrypted using TLS 1.3, and multi-tenant queries are strictly isolated. Payment card details never reach our database.
If something goes wrong
Privacy inquiries or complaints should be directed to [email protected]. We respond within thirty (30) days. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
In the event of an eligible data breach, we will notify affected individuals and the OAIC in accordance with the Privacy Act 1988 (Cth) Notifiable Data Breaches scheme.
Changes to this page
When this policy changes, updates will be published here with the revision date. Last updated: 19 August 2026.