Privacy policy

The short version

• We keep what we need to run CamoWorthy for you: your account, the work you and your colleagues put into it, and security logs.
• Everything is stored on servers in the Netherlands (EU).
• No advertising, no tracking cookies, no selling or sharing of your data.
• The records your organisation puts into a project are your organisation's. We process them only to provide the service.
• You can ask for a copy of your data, or for it to be corrected or deleted, at any time.

Who is responsible

CamoWorthy is run by the CamoWorthy team (“we”). For your account and sign-in data we are the controller. For the content of a project (aircraft records, entries, comments and files), the organisation that runs the project decides what goes in and who sees it; we process that content on its behalf, as set out in the Terms of use. For any question about your data, open a request in CamoWorthy Support with “Privacy” in the title.

What we collect

• Your account: name, email address, a hash of your password (never the password itself), your two-step sign-in secret if you set one up, the apps you can use and the organisations and projects you belong to.
• Sign-in and security: for each signed-in device, the IP address and browser; a log of sign-ins, failed sign-in attempts (with the email address tried), password and email changes, invitations and admin changes, with time and IP address; a log of the emails we send you (address, subject, time).
• Your work in the apps: what you and your colleagues enter, such as projects, entries, comments and their earlier versions, files you attach and the text we read from them on our own server, who changed what and when, and what you have already seen. Aircraft records often name people, such as certifying staff and inspectors, and can carry their signatures.
• AI connections: if you connect an AI assistant to CamoWorthy, we keep the connection and a log of each request it makes: the time, the IP address, what it asked for and what it got back.
• Help assistant: if you use the help assistant in an app, we keep your questions, its answers, the address of the page you asked from, and what it cost. It answers from a description of how the app works; it can't see your projects, records or account.
• Support requests: what you write, screenshots you attach, and, to help us find the problem, the page address, your browser and recent error messages from that page.
• Usage data: which screens and buttons you use in the apps, never what is in your records. We record where on a page the mouse moves and clicks, and how far people scroll, only as totals per page and day. These totals are never linked to a person. Usage data is stored on our own servers in Amsterdam, and raw usage data is deleted after 13 months. You can switch it off for yourself in Your account, and your organisation can ask us to switch it off for everyone in it. What we measure lists it in detail.

We don't collect anything from you that is not listed here, and we don't buy data about you from anyone.

Why, and on what basis

• To provide the service you or your organisation signed up for (your account, projects, files, emails about invitations and sign-in): performance of a contract, GDPR Art. 6(1)(b).
• To keep accounts and data secure (security logs, IP addresses, failed sign-ins, checking new passwords against known breaches): our legitimate interest in protecting the service and you, Art. 6(1)(f).
• To answer support requests and fix problems: legitimate interest, Art. 6(1)(f).
• To answer your questions in the help assistant, and to keep those chats so we can improve the help and stop misuse: legitimate interest, Art. 6(1)(f).
• To see how the apps are used and improve them (usage data, which you can switch off): legitimate interest, Art. 6(1)(f).
• To meet legal obligations, where a law requires us to keep or hand over data: Art. 6(1)(c).

We don't use your data for advertising, profiling or automated decisions about you, and we don't sell it.

Who can see it

• People in your projects see your name and what you write and upload there. Project owners and admins see who is a member.
• Our platform admins see accounts, the security log, the AI log and help assistant chats, to run and secure the service and improve the help. They have access to the servers, so they can technically read everything; they look at your content only to help you when you ask, to keep the service secure, or when the law requires it. They also see usage data.
• Our support agents see your usage data only on a support request you chose to attach it to.
• Service providers that we use to run CamoWorthy (below).

Service providers and transfers

• Server hosting in data centres in Amsterdam, the Netherlands: all data and nightly backups.
• Cloudflare, Inc. (USA) passes all traffic to our sites through its network, to protect them from attacks. It sees your IP address and the requests you make, and doesn't keep page contents. Cloudflare is certified under the EU–US Data Privacy Framework and signs the EU Standard Contractual Clauses.
• Have I Been Pwned: when you choose a password we send the first 5 characters of its hash, never the password or your email, to check it against known breaches.
• Anthropic, PBC (USA) runs the AI model behind the help assistant. It receives what you type into the assistant and its answers to you, short summaries of your own earlier chats with it, and a few plain labels so the answer fits you: the kind of page you are on and your role and permission level in that project. Never your projects' names or their records. Under its commercial terms it doesn't train its models on it and deletes it after at most 30 days, and transfers out of the EU are covered by the EU Standard Contractual Clauses.
• AI assistants you connect. If you connect an AI assistant to CamoWorthy, what it reads goes to that assistant's provider, which may be outside the EU, under your own agreement with them. Apart from the help assistant, nothing is sent to an AI provider unless someone connects one.
• Email is sent from our own mail server in the Netherlands.

How long we keep it

• Your account: until it is deleted.
• Signed-in devices: until you sign out, or 30 days after you last used them.
• The security log and the log of emails sent: 12 months.
• The AI log: what was asked and answered, and the IP address, for 180 days; after that only the time and the type of request.
• Help assistant chats: 180 days; after that only the counts (how many messages, flags and cost).
• Project content: as long as the project exists. When your organisation's use of CamoWorthy ends, we give it a copy on request and delete the content within 30 days.
• Support requests: until you ask us to delete them. Unsent drafts are deleted after an hour.
• Usage data: raw usage data is deleted after 13 months. Totals that are not linked to a person (daily feature counts, and the page heatmap and scroll totals) are kept.
• Backups: 14 days, then they are overwritten.

Your rights

You can ask for a copy of your personal data, have it corrected or deleted, restrict or object to how we use it, and get it in a machine-readable form. You can change your name, password and email yourself in Your account. For anything else, open a request in CamoWorthy Support with “Privacy” in the title. We answer within one month.

If we delete your account, your name, email and sign-in data are removed. What you wrote in a project is part of that project's record and belongs to the organisation that runs it; we remove or anonymise your name there when that organisation agrees or the law requires it.

You also have the right to complain to a data protection authority, in the EU country where you live or work or where you think the problem happened.

Security

All traffic is encrypted (HTTPS). Passwords are stored only as salted hashes, two-step sign-in is available to everyone and required for our admins, and access to the servers is limited to our admins with personal keys. If a breach puts your data at risk, we tell you and, where required, the authority without undue delay.

Cookies

We use only the cookies needed to sign you in and keep you safe. The Cookie notice lists them.

Children

CamoWorthy is a professional tool and is not meant for anyone under 16.

Changes

When we change this policy in a way that matters, we update the date above and ask you to read it and agree again the next time you sign in.