Privacy Policy

1. Introduction

AeroDesk Global ("we", "our", "us") provides an integrated, multi-module operations platform covering Executive Dashboards, Analytics, Finance & Payroll, HR & Employee Portal, Office Administration, IT Helpdesk, Contact Centre, Crew & Shift Operations, Flight Operations, and Training Scheduler.

This Privacy Policy applies to all modules and services offered under the AeroDesk platform, regardless of which modules your organisation subscribes to. By using any part of our platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

• Name, email address, phone number, and company details
• Employee records, job titles, and department assignments
• Authentication credentials and session data
• Documents uploaded to modules (licences, medical certificates, payslips, etc.)

Module-Specific Data

Depending on the modules your organisation enables, we may process:

• HR & Payroll: attendance, leave, payslips, bank details
• Office Administration: vehicle trips, fuel logs, maintenance records, asset assignments
• Crew & Flight Ops: rosters, bidding preferences, fatigue data, flight records
• IT Helpdesk: tickets, chat transcripts, email threads, knowledge base queries
• Contact Centre: shift data, swap requests, call analytics

Usage Data

• IP address, browser type, and device information
• Module usage patterns, feature interactions, and session duration
• Cookies and tracking data (see Section 7)

3. How We Use Your Information

• Provide, operate, and maintain all platform modules
• Process payroll, attendance, and HR workflows
• Facilitate crew scheduling, roster management, and flight operations
• Route support tickets and HR requests to the appropriate teams
• Improve and personalise the user experience across modules
• Send transactional notifications (ticket updates, approval requests, system alerts)
• Send marketing communications (only with explicit consent)
• Ensure compliance with applicable legal and regulatory obligations

4. Data Security

• AES-256 encryption at rest; TLS 1.3 in transit
• Role-based access control (RBAC) with module-level and sub-item permissions
• Multi-factor authentication (MFA) and SSO integration
• Regular security audits, penetration testing, and vulnerability assessments
• Automated data backup and disaster recovery procedures
• Comprehensive audit logging across all modules

5. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by module and jurisdiction. You may request deletion of your data at any time by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing activities
• Request data portability
• Withdraw consent at any time (where processing is based on consent)

7. Cookies

We use cookies to enhance your experience, analyse module usage, and personalise content. Essential cookies are required for authentication and session management. You can control non-essential cookie preferences in your browser settings.

8. Third-Party Services

We may use third-party services for analytics, payment processing, email delivery, and customer support. These providers process data only as necessary to deliver their services and are bound by their own privacy policies and contractual data protection obligations.