Privacy Policy

Last updated: 21 September 2026 · v3.0

1. Who we are

The AirQuote platform (airquote.ro, airquote.eu, app.airquote.ro and app.airquote.eu) is operated by SC CC Digital Solutions SRL, a company registered in Romania, with its registered office at str. Pădurii nr. 6, Sat Drăgoiești, Comuna Drăgoiești, Suceava County, Romania, Trade Register no. J2025011387003, tax identification number (CUI) 51307493, email contact@airquote.ro.

We are the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679). We have not appointed a data protection officer; for any question about your personal data, contact us at the email address above.

AirQuote is a business-to-business service intended exclusively for companies and sole traders. It is not intended for consumers.

2. What data we collect

Account data: First and last name, email address, phone number, company name, company registration number and VAT ID, company address. We collect this data directly from you when you create an account; providing it is necessary to conclude and perform the contract.

Usage data: Projects created, uploaded images, measurements performed, access history.

Payment data: Processed exclusively by Stripe. We do not store card data on our servers.

Technical data: IP address, browser type, operating system and the server logs needed to run and secure the platform.

Marketing data (only with your consent): Cookie identifiers and usage events (page views on the marketing website, the completed sign-up in the application) sent to Meta through the Meta Pixel — see section 10.

3. Why we collect data

  • Providing and improving the service
  • Processing payments and issuing invoices
  • Account-related communications (notifications, updates)
  • Technical support
  • Legal obligations (invoicing, tax reporting)
  • Measuring the performance of our ads (Meta Pixel, only with your consent)

4. Legal bases

  • Performance of the contract – to provide the service
  • Legal obligation – for invoicing and tax reporting
  • Legitimate interest – to improve the service and keep it secure
  • Consent – for the Meta Pixel marketing cookie (see section 10) and for optional marketing communications

5. Who we share data with

Where your data is stored: Your data is stored and processed in the European Union. The database and authentication (Supabase) are hosted in Frankfurt, files (Cloudflare R2) in Eastern Europe, the processing servers (Railway) in Amsterdam and the website and application (Vercel) in Frankfurt.

To provide the service, we rely on the following providers (sub-processors and independent recipients):

  • Supabase (US company, data in the EU – Frankfurt) – database and authentication
  • Cloudflare R2 (data in the EU – Eastern Europe) – storage of images and processed results, CDN
  • Vercel (functions in the EU – Frankfurt) – website and application hosting
  • Railway (EU – Amsterdam) – photogrammetry processing servers
  • WebODM Lightning, operated by UAV4GEO (US) – backup photogrammetry processing, used only when our own capacity is busy; images are transmitted for processing and are not retained by the provider after completion; the transfer outside the EEA takes place under the provider's terms
  • Resend (US) – transactional emails (confirmations, subscription notifications)
  • Stripe (US/Ireland) – payment processing; Stripe is an independent controller for card data, and AirQuote does not store card data
  • Meta Platforms (Ireland/US) – Meta Pixel on the marketing website and at sign-up, only with your consent, for measuring our ads

We do not sell your data and do not share it with third parties for marketing purposes; the only exception is the Meta Pixel, which is active only with your consent (see section 10).

International transfers: Stripe, Resend and Meta may process data outside the European Economic Area. These transfers are based on the Standard Contractual Clauses adopted by the European Commission and/or on the EU-US Data Privacy Framework where the provider is certified. Transfers to WebODM Lightning take place under the provider's terms, as described above.

6. Drone images

Uploaded aerial images may occasionally contain personal data (for example people, vehicles or identifiable features of a property). With respect to these images, the company using the platform acts as the controller and AirQuote acts as a processor that processes them exclusively to provide the service. The company warrants that it holds the homeowners' consent for capturing and processing the images (see section 8 of the Terms of Service). The terms under which we process data on your behalf are set out in our Data Processing Agreement.

Photogrammetry processing runs on our processing servers in the EU (Railway, Amsterdam). Only when that capacity is busy may images be processed by WebODM Lightning, as described in section 5.

We do not use your images to train AI models and we do not use them for any purpose other than providing the requested service.

7. Your rights (GDPR)

Under the GDPR, you have the right to:

  • Access – request a copy of your data
  • Rectification – correct inaccurate data
  • Erasure – request the deletion of your data ("right to be forgotten")
  • Portability – receive your data in a structured format
  • Objection – object to processing based on legitimate interest
  • Restriction – request that processing be limited
  • Withdrawal of consent – withdraw your consent at any time for processing based on consent (for example the marketing cookies), without affecting the lawfulness of processing carried out before withdrawal

To exercise these rights, contact us at contact@airquote.ro. We will reply within one month at the latest, as required by the GDPR.

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

8. Data storage and retention

Account data is kept for the duration of your active subscription plus 90 days after cancellation (a reactivation and export period), after which it is deleted. Project data (drone images, 3D model, measurements, the signed homeowner consent) is kept for 24 months from the project's creation while your subscription is active, for quote history and possible warranty claims, and for 90 days after cancellation. Invoices and accounting documents are kept for 10 years, as required by law. You can request deletion at any time, except for data we are legally required to retain.

9. Security

We protect your data through: encryption in transit (HTTPS/TLS), token-based authentication (JWT), role-based access control and separation of data between companies, secure password storage (bcrypt, via Supabase Auth), payments processed by Stripe (PCI DSS Level 1 certified) and restricted access to project files.

10. Cookies

Essential cookies: Needed for the platform to work – authentication, session, your language preference and your cookie consent preference. They do not require consent.

Marketing cookies (Meta Pixel): Loaded only after you give explicit consent in the cookie banner. On the marketing website the pixel records page views; in the application it records only the completed sign-up event. We use it to measure the performance of our ads. Without your consent, nothing is loaded from Meta.

You can withdraw your consent at any time by deleting the cookies in your browser or by using the button in the cookie banner. We do not use any other tracking or analytics cookies.

11. Contact

For any questions about data protection: contact@airquote.ro

If you believe your rights have not been respected, you have the right to lodge a complaint with a supervisory authority: in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro), or the supervisory authority of the EU member state where you are located.