X-ATC

    Privacy Protocol

    Compliance Matrix V5.1 • Verified Station

    1. Identity & Authentication

    X-ATC uses secure authentication through OAuth 2.0 via Google to verify pilot identity. Our use of information received from Google APIs complies fully with the Google API Services User Data Policy, including all Limited Use requirements.

    Data Elements Accessed:

    Primary Email

    Unique pilot identifier for account authentication and session management.

    SimBrief Pilot ID

    Used to synchronize operational flight plans through SimBrief integration.

    Voice Packets

    Temporarily processed to enable speech-to-text conversion for simulated ATC communications.

    2. Telemetry Processing

    Pilot telemetry and operational session data are processed exclusively to support simulation systems, including mission persistence, fleet management, session integrity, and AI-driven ATC interactions. Telemetry data is never used for advertising, marketing analytics, or unrelated AI model training.

    3. Data Transmission

    X-ATC does not sell, rent, or trade user data. Encrypted operational data may be transmitted only to verified service providers (SimBrief, Groq/OpenRouter, and Stripe) required for application functionality through encrypted HTTPS/TLS channels.

    4. Secure Storage

    User information is stored using enterprise-grade infrastructure provided by Google Cloud Platform, protected by AES-256 encryption at rest, encrypted network transport, and strict identity-based Firestore Security Rules.

    5. Data Retention

    User data is retained only for as long as required to provide core simulation services. Inactive accounts may have telemetry records archived or removed to maintain system efficiency and data minimization principles.

    6. User Rights & Support

    Users may request access, correction, or deletion of their stored data under applicable data protection regulations, including GDPR and the UK Data Protection Act.

    Authorized Support Station

    solahira1350@gmail.com

    7. Right to Erasure

    Immediate Purge Protocol:

    Users may permanently delete their account and all associated telemetry from the Profile Terminal. Deletion is immediate, permanent, and irreversible.

    End of Privacy Transmission • X-ATC Official