Privacy Policy

Privacy Policy

This Privacy Policy explains how Avionyz (OPC) Pvt. Ltd. collects, uses, discloses, stores, and protects personal information when users access our aviation news and media platform, insights resources & event listings (collectively, the “Services”).

We are committed to protecting your privacy and handling all personal information in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA), India’s Digital Personal Data Protection Act 2023 (DPDP Act), and the Australian Privacy Act 1988.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. DATA CONTROLLER INFORMATION

Legal Entity: Avionyz (OPC) Pvt. Ltd.

Office Address: Oak Tower, Paramount Golf Foreste, Surajpur, Greater Noida

Registered Address: 272/4, Sayyed Nagar, Rawatpur, Kanpur Nagar, Uttar Pradesh, 208019.

Contact Email for Privacy Matters: privacy@avionyz.com

2. DEFINITIONS

For this Privacy Policy, the following terms have the meanings set out below:

• “Personal Data”/“Personal Information”: any information relating to an identifiable natural person.
• “Special-category/Sensitive Personal Data”: data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data (where used to identify), health data, sexual life/orientation or criminal convictions.
• “Processing”: any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, erasure or destruction.
• “Controller”: the natural or legal person who determines the purposes and means of Processing Personal Data (Avionyz acts as Controller for Services).
• “Processor”: a natural or legal person who processes Personal Data on behalf of the controller.
• “Services”: the websites, mobile applications, tools, newsletters, platforms and any products or services offered by Avionyz under the Avionyz brand.
• “Third Party”: any natural or legal person, public authority, agency or body other than the Data Subject, Controller, Processor and persons under the direct authority of the Controller or Processor are authorized to process Personal Data.
• “Cookies” & “Tracking Technologies”: small text files or similar tech stored on a device to recognize returning users, measure performance and provide functionality.
• “Minor” or “Child”: means an individual who has not attained the age of 18 years, or such a lower age as may be recognized under applicable data protection law for valid consent.

3. PERSONAL DATA WE COLLECT

We only collect what is necessary. We do not process additional data without a purpose of expansion notice. We collect the following categories of personal data, depending on how you interact with our Services:

3.1 Data You Provide Directly

• Basic Information: name, email address, phone number
• Account Information: username, encrypted password, profile details
• Payment Information: payment method, transaction details, UPI details (communicated via email, and processed further through UPI)
• Customer Support Communications: emails, chats, support tickets
• Employee/Contractor Data: HR records, identification, payroll details, and other employment-related information

3.2 Data Collected Automatically

• IP address, browser type, device identifiers
• Usage analytics from AWS Cloud Analytics
• Cookies and similar tracking technologies
• Log files relating to pages visited, time spent, interaction with articles and feeds

3.3 Data of Minors

AVIONYZ does not knowingly collect or process personal data of individuals under the age of 18 except where such processing is permitted by law and, where required, carried out with parental or legal guardian consent. If we become aware that personal data of a minor has been collected without appropriate consent, we will take reasonable steps to delete such data.

3.4 No Sensitive Personal Data

Avionyz does not collect sensitive or special-category Personal Data (such as health data, biometric data, or government-issued identity numbers) from general users of the Services for normal editorial, browsing, or subscription activities. However, Avionyz may collect certain identity and verification documents, government identification numbers or tax identifiers only from employees, contractors, job applicants, or where required to fulfil contractual, regulatory, or tax obligations (for example, employee onboarding, payroll, tax reporting or contractor KYC). Such employee or contractor data is processed under separate internal HR/Employment privacy controls and only retained and accessed by authorised HR and management personnel as described in the Employee Privacy Notice.

3.5 Excluded Categories (User-Facing): Unless explicitly required and disclosed at the point of collection, general users are not required to provide special-category data, government ID numbers, biometric or health data as part of regular use of the Services.

4. LEGAL REQUESTS, LAW ENFORCEMENT & PUBLIC AUTHORITIES

Avionyz may disclose Personal Data in response to valid legal process, including subpoenas, court orders, tax authority demands, regulatory enquiries, or other lawful requests by government entities. We will comply with lawful requests, including those that require the disclosure of user data, subject to applicable legal limitations. Where permitted by law, Avionyz will attempt to notify the affected user before disclosure or seek to limit the scope of the request. We may also disclose Personal Data when necessary to: (i) protect the rights, property, safety or security of Avionyz, our users, or the public; (ii) detect, prevent, or otherwise address fraud or security issues; or (iii) enforce our Terms of Use. All such disclosures are logged and reviewed by our legal team.

5. PURPOSES OF DATA PROCESSING

We process personal information only for lawful, specific, and explicit purposes, including:

5.1 To Provide and Improve the Services

• Account creation, login authentication
• Delivering aviation news, insights, articles, and videos.
• Enabling comments on posts.
• Delivering academic courses.
• Managing event listings.
• Personalizing user experience and content visibility

5.2 Payments For Paid Content

• Processing transactions (communicated via email and processed further through UPI)
• Managing invoices.
• Detecting fraudulent activity

Note: Payment-related communications shared via email are handled with appropriate security precautions, and users are advised not to share sensitive financial credentials beyond what is necessary for transaction processing.

5.3 Communication

• Sending newsletters, updates, and promotions.
• Responding to support requests

5.4 Analytics and Platform Safety

• Analysing trends, usage statistics, and performance
• Monitoring for policy violations and abuse
• Securing the platform and preventing unauthorised access

5.5 Legal and Compliance

• Compliance with GDPR, CCPA/CPRA, DPDP Act, Australian law, and other legal obligations
• Responding to lawful requests from regulators and authorities
• Enforcing terms and protecting our legal rights

6. LEGAL BASIS FOR PROCESSING (GDPR & UK GDPR)

We rely on the following lawful bases:

• Performance of Contract: account usage, login, subscription access
• Consent: newsletters and cookies.
• Legitimate Interests: analytics, security, fraud prevention
• Legal Obligation: tax, regulatory reporting
• Parental Consent: users aged under 16, where required

7. EDITORIAL CONTENT, AND CONTRIBUTOR TERMS

Avionyz publishes editorial content, analysis, and commentary. Avionyz assumes no responsibility for the accuracy, completeness, or reliability of third-party content (ads). Editorial content is informational and does not constitute professional, technical, regulatory, or aviation advice.

7.1 Copyright & Takedown

If you believe your copyright has been infringed, please contact us at privacy@avionyz.com with adequate documentation, we will investigate in accordance with applicable law.

8. DO WE SELL OR SHARE PERSONAL DATA?

Avionyz does not sell personal information of users as “sale” is defined under the California Consumer Privacy Act (CCPA) and Consumer Privacy Rights Act (CPRA), nor do we share personal data for cross-context behavioral advertising. We do not permit our advertising or analytics providers to “sell” your data on our behalf.

If we ever intend to sell or share personal data in a manner that triggers the CCPA/CPRA opt-out right, we will provide a clear and conspicuous link titled “Do Not Sell or Share My Personal Information” on our homepage and offer a mechanism to opt out. At present, no such activities occur.

9. COOKIES & TRACKING TECHNOLOGIES

Avionyz uses AWS cloud analytics solution, cookies, and similar technologies to operate and improve the Services. Cookies fall into four categories:

• Essential Cookies: required for site functionality (e.g., login, session management). These cannot be disabled where the functionality is needed.
• Performance & Analytics Cookies: collect information about site usage and performance (e.g., page visits, time on page) to help us improve the Services.
• Functionality Cookies: remember preferences and customisations (e.g., language, display).
• Marketing & Advertising Cookies: used to deliver ads and track ad performance across websites and apps.

9.1 Consent & Management

Where required by law (e.g., GDPR), we obtain your consent before setting up non-essential cookies. You can withdraw or manage cookie preferences at any time using our cookie banner, or by contacting privacy@avionyz.com. Note that disabling certain cookies may limit functionality or user experience.

9.2 Third-Party Cookies

Third parties (such as analytics and advertising partners) may set cookies on the Services. We do not control third-party cookie practices. Please consult third-party privacy notices for information on how to opt out of their tracking.

A separate Cookie Notice will detail cookie types and retention.

10. Third-Party Websites and Links

The Services may contain links to third-party websites, services, or resources outside Avionyz’s control. We are not responsible for the content, privacy policies, or practices of third parties. When you follow a link to a third-party website, the collection and use of your data will be governed by that third party’s privacy policy. We recommend that you review the privacy policy of every site you visit. Clicking on external links may result in the transfer of Personal Data to that third party.

11. SOCIAL LOGIN/SINGLE SIGN-ON (SSO)

If you sign in or register using a third-party account (for example, Google), we may receive certain profile information (such as name, email address and profile photo) from that provider. The data received depends on the provider and the permissions you grant. Such third parties may act as independent Controllers for the data they collect. We recommend that you review the privacy policy of the respective third-party provider. You may disable or disconnect social logins at any time in your account settings.

12. DATA RETENTION

We retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce our agreements. Each category of data is reviewed periodically to ensure that no information is held longer than required. When data is no longer needed, it is securely deleted or anonymized in accordance with industry-standard practices. We do not engage in automated decision-making that produces legal or significant effects.

• Account information: until account deletion +3 years for record-keeping, dispute resolution, and compliance purposes.
• Payment records: 7 years in accordance with taxation, audit, and financial compliance laws.
• Analytics logs: 12-24 months, depending on system requirements and the type of analytics performed.
• User-generated content: until the user removes or deletes the content or until their account is deleted, whichever occurs earlier.
• Employee data: for the period required under applicable employment, tax, and labor laws, which may vary depending on jurisdiction and the nature of employment.
• Cookies: in accordance with the cookie table, with individual cookies stored for 30 days to 2 years, depending on their purpose (e.g., session management, preferences, analytics, or advertising)

13. INTERNATIONAL DATA TRANSFERS

We primarily store and process all personal data within India. However, certain third-party service providers engaged by us, such as cloud hosting platforms, analytics tools, communication services, or payment processors, may process data on servers located outside India. Where such transfers occur, we ensure that the receiving entities implement reasonable security safeguards, contractual protections, and industry-standard measures to protect your personal information from unauthorized access, disclosure, or misuse.

By using our services, you acknowledge that your data may be processed in jurisdictions whose data protection laws may differ from those of India, but we take all appropriate steps to ensure that your information remains secure and is treated in accordance with this Privacy Policy.

Transfers comply with:

• Standard Contractual Clauses (SCCs)
• DPDP Act cross-border rules
• Australian Privacy Principles
• Binding Corporate Rules, where applicable

14. DATA SECURITY

We implement industry-standard security controls, including:

• AWS encrypted storage
• Encryption at rest and in transit
• Strict access control and MFA
• Regular vulnerability testing
• Segregated databases
• Continuous monitoring

15. CHILDREN’S PRIVACY

• AVIONYZ is not intended to be used by children as a primary audience. The Services are designed for a general audience seeking aviation-related editorial and informational content.
• We do not knowingly collect personal data from individuals under the age of 13. If we become aware that personal data of a child has been collected without appropriate consent, we will take reasonable steps to delete such data promptly.
• Users under the age of 18 may access the Services only under the supervision of a parent or legal guardian. AVIONYZ does not actively verify the age of users and relies on representations made by users and their guardians.

16. USER RIGHTS

Depending on jurisdiction (GDPR, UK GDPR, CCPA/CPRA, Australian Privacy Principles, DPDP Act), users may request:

• Access to data
• Correction/rectification
• Deletion
• Portability
• Restriction of processing
• Withdrawal of consent
• Objection to processing
• No sale/sharing of data (CCPA)
• Review of automated decisions
• Grievance redressal (DPDP Act)
• Right to Lodge a Complaint with Supervisory Authority

16.1 Verification of Data Subject Requests

To protect the privacy and security of personal data, Avionyz will take reasonable steps to verify the identity of any individual who requests access to, correction of, deletion of, or portability of Personal Data. Verification may include:

• Confirmation of account credentials (email address associated with the account);
• Request for government-issued ID or two forms of corroborating information (for high-risk requests);
• Use of multi-factor authentication if you are logged in; or
• Other measures are reasonably necessary to confirm identity.

These rights apply whether or not you maintain an account with us. We will only use the personal data supplied for verification purposes and will delete any copies of identification documents after verification is complete unless retention is required by law. If you refuse to provide sufficient information for verification, we may not be able to comply with your request.

Requests can be submitted at: privacy@avionyz.com. We respond within applicable legal timelines (30-45 days).

16.2 Deceased Users

If a Data Subject is deceased, requests concerning the deceased’s Personal Data will be handled in accordance with applicable law. Authorized representatives (such as executors or next-of-kin) may submit a request along with proof of authority (e.g., death certificate and proof of representation). Avionyz will evaluate such requests and may, where legally permitted, provide access, transfer, or delete the deceased’s Personal Data consistent with our retention obligations and obligations to third parties. For assistance, contact privacy@avionyz.com

17. EMPLOYEE & CONTRACTOR DATA

Avionyz processes additional Personal Data in the context of employment, engagement of contractors and recruitment. Such Processing includes identity verification, payroll, tax and benefits of administration, performance evaluations, background checks, medical certifications where lawfully required, and access controls.

Processing of employee and contractor data is governed by a separate Employee & Contractor Privacy Notice, which sets out: the categories of data processed, legal basis for Processing, retention periods, access and correction rights, security measures, and contact details for the company’s HR & Grievance Officer. Employees, applicants and contractors will receive the Employee & Contractor Privacy Notice at hire or at the time of data collection.

For requests concerning employee or contractor data, please contact us at privacy@avionyz.com. Access is strictly limited to authorized HR and management personnel.

18. THIRD-PARTY PROCESSORS

We may engage third-party processors for:

• AWS cloud hosting
• Email delivery
• Analytics tools
• Security monitoring

All processors operate under binding agreements ensuring compliance and confidentiality.

19. CONSEQUENCE OF NOT PROVIDING PERSONAL DATA

Where the provision of personal data is mandatory (for example, to create an account, process payments, comply with legal obligations, or deliver requested services), failure to provide such information may result in:

• inability to create or maintain a user account;
• inability to access certain features, services, or functionalities;
• inability to complete transactions or receive customer support;
• delays or refusal of service in situations where identity verification or compliance checks are legally required.

Where personal data is optional, users may still access the service, but certain features may operate with limited functionality (e.g., personalized recommendations, customized settings, or enhanced user experience).

20. DATA BREACH PROTOCOL

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the appropriate supervisory authority within 72 hours of becoming aware of the breach, wherever such obligations apply.

Where the breach is assessed to pose a high risk to affected individuals, we will also notify the impacted data subjects without undue delay, along with the steps they may take to protect themselves and the measures we are implementing to mitigate the impact.

21. DATA PROCESSING IN INDIA UNDER THE DPDP ACT

All personal data collected and processed by us is handled in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”). We act as the Data Fiduciary for all information you provide and ensure that your data is processed lawfully, for legitimate purposes, and only with your consent or other valid legal grounds recognized under the Act.

We implement reasonable technical and organizational measures to safeguard your personal data, and we ensure that all processing activities occur exclusively within India as mandated by our operational framework. DPDP rights include:

• Right to access
• Right to correction
• Right to erasure
• Right to nominate (for incapacitation or death)
• Right to grievance redressal

22. GOVERNING LAW & DISPUTE RESOLUTION

This Privacy Policy is governed by the laws of India. Disputes shall be resolved exclusively in the courts of New Delhi, India.

23. CHANGES TO THIS POLICY

We may update this Policy from time to time. Changes become effective upon posting. We will notify users of material changes by email, banner, or notification. Continued use of the Services after updates constitutes acceptance.

This Copyright Policy outlines how intellectual property rights are governed, protected, and enforced on the AVIONYZ platform. By accessing or using our services, including News & Media, Insights, and Global Event Listings, you agree to comply with this Policy in addition to our Terms & Conditions.

1. Ownership of AVIONYZ Content

All content available on AVIONYZ is protected under applicable Indian and international copyright and intellectual property laws. This includes, but is not limited to:

• Editorial text, articles, reports, insights, analyses, curated databases, and written content
• Event listings, curated databases, descriptions, and summaries
• Branding elements such as the AVIONYZ name, logo, website design, layout, and interface
• All proprietary tools, features, and digital assets

AVIONYZ owns all rights, title and interest in its content unless otherwise stated.

No portion of the platform may be copied, reproduced, republished, downloaded, modified, distributed, sold, or commercially exploited without prior written permission from AVIONYZ.

2. Use of Third-Party Copyrighted Material

AVIONYZ may occasionally feature third-party material such as:

• Public statements, press releases, or official documents
• Logos or brand names used for identification in news reporting or event listings
• Media assets shared under permitted editorial use

Such usage is always in accordance with:

• Indian copyright law
• Fair dealing provisions for news reporting, commentary, research, and educational purposes
• Permissions or licenses granted by the rights holder
• All trademarks and logos remain the property of their respective owners.

3. Prohibited Use of AVIONYZ Content

Users may not:

• Copy, download, or distribute AVIONYZ articles and media.
• Reproduce or republish event listings or curated databases
• Use our branding (logo, name, templates) without authorisation
• Repackage AVIONYZ content for commercial use
• Extract data through scraping, crawling, or automated tools
• Republish our content on social media or third-party websites without permission

Unauthorised use may result in immediate action, including account suspension, legal proceedings, or financial claims.

4. Reporting Copyright Infringement

If you believe that your copyrighted work has been used on AVIONYZ without authorisation, please submit a written notice containing:

• Details of the copyrighted work
• Exact URL of the infringing content
• Proof of ownership or authorised use rights
• Your full name, email address, and contact number
• A good-faith declaration stating the use is unauthorised

Send all copyright complaints to copyright@avionyz.com

AVIONYZ will review and take appropriate action, including removing infringing content when verified.

5. Content Removal and Enforcement

AVIONYZ does not accept or publish unsolicited user-generated content unless expressly authorised. AVIONYZ may remove any content that:

• Violates intellectual property rights
• Breaches this Policy or our Terms & Conditions
• Misuses AVIONYZ materials or infringes on third-party rights

Repeated or serious violations may result in:

• Account restriction
• Permanent suspension
• Legal action where necessary

AVIONYZ’s decisions regarding copyright enforcement shall be taken in good faith and in accordance with applicable law.

6. Requests for Permission or Licensing

Individuals, media organisations, academic institutions, or businesses seeking to use AVIONYZ content must obtain prior written approval.

Requests may include:

• Republishing articles
• Using AVIONYZ materials in research or media
• Featuring AVIONYZ branding in publications
• Licensing course content or event summaries

Send permission requests to: copyright@avionyz.com

Approval is discretionary and may include terms, conditions, or licensing fees.

7. No Implied Rights

• Using the AVIONYZ platform or subscribing to any paid service does not grant ownership, license, or permission to reproduce or distribute AVIONYZ content.
• All rights not expressly granted are reserved by AVIONYZ.

8. Editorial Disclaimer

All content published on AVIONYZ is intended for informational and editorial purposes only. Nothing on the platform constitutes technical, operational, safety, regulatory, or professional aviation advice, nor should it be relied upon as such.

9. No Waiver

Failure by AVIONYZ to enforce any provision of this Policy shall not constitute a waiver of its rights.

10. Governing Law and Jurisdiction

This Copyright Policy shall be governed by and construed in accordance with the laws of India. Courts having jurisdiction as specified in AVIONYZ’s Terms & Conditions shall have exclusive jurisdiction.

11. Updates to This Policy

AVIONYZ may modify or update this Copyright Policy at any time to comply with legal standards or to enhance platform clarity and safety. Continued use of the platform after such updates signifies acceptance of the revised policy.