Privacy Policy
Privacy Policy
Last updated: September 2026
1. Overview & Controller Information
This privacy policy explains how SoloCompass (operated by Aviaspark / Alina Bayer) collects, processes, and protects your personal data when you visit our website, join our waitlist, or use our services.
Data Controller:
- Founder / Company: Alina Bayer (Aviaspark)
- Address: [Your Street Name and Number], [Your Postal Code and City], Austria
- Email: hello@aviaspark.com
- Website: https://aviaspark.com
2. Hosting & Web Server Logs
Cloudflare Pages
Our static website is hosted using Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA).
- Data Processed: IP address, browser type, operating system, referrer URL, and timestamps of access.
- Purpose & Legal Basis: Technical delivery of website content, threat prevention, and service security based on our legitimate interest (Art. 6(1)(f) GDPR).
- Data Transfers: Data may be routed through global edge networks. Cloudflare relies on Standard Contractual Clauses (SCCs) to ensure GDPR-compliant data transfers outside the EEA.
3. Third-Party Service Providers
Database & User Authentication (Supabase)
We use Supabase (Supabase, Inc.) to host our application database and manage user accounts and authentication securely.
- Data Processed: Email addresses, account creation timestamps, encrypted login tokens, and user application data.
- Server Hosting Location: Europe West (Ireland, AWS eu-west-1).
- Legal Basis: Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
- Security: All database data is encrypted at rest (AES-256) and in transit via TLS. View the Supabase Privacy Policy for details.
Waitlist & Email Broadcasts (MailerLite)
We use MailerLite (MailerLite Limited, 38 Lublinkhofstraat, 9713 JZ Groningen, Netherlands) to manage our waitlist, send newsletters, and communicate product updates.
- Data Processed: Email address, subscription timestamps, IP address, and email engagement metrics (open rates, link clicks).
- Legal Basis: Your explicit consent upon submitting our waitlist/newsletter form (Art. 6(1)(a) GDPR).
- Unsubscribe: You can revoke consent and unsubscribe at any time using the link in the footer of any email we send. View the MailerLite Privacy Policy for details.
Live Chat & Contact Form (Tawk.to)
We use Tawk.to (tawk.to inc., 187 E Warm Springs Rd, Las Vegas, NV 89119, USA) for live chat support and offline message routing.
- Data Processed: Name, email address, message content, IP address, and browser metadata.
- Legal Basis: Our legitimate interest in providing efficient direct customer communication (Art. 6(1)(f) GDPR).
- Data Protection: View the Tawk.to Privacy Policy for details.
Email Communication (Google Workspace)
Email inquiries sent to hello@aviaspark.com or support@aviaspark.com are processed through Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
- Legal Basis: Processing pre-contractual inquiries or performing contractual obligations (Art. 6(1)(b) GDPR).
4. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): Request confirmation and details regarding data we store about you.
- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate personal data.
- Right to Erasure / "To Be Forgotten" (Art. 17 GDPR): Request deletion of your personal data when processing is no longer required.
- Right to Restrict Processing (Art. 18 GDPR): Request restriction of data processing in specific scenarios.
- Right to Data Portability (Art. 20 GDPR): Receive a structured copy of your data.
- Right to Object (Art. 21 GDPR): Object to processing based on legitimate interest (Art. 6(1)(f) GDPR).
To exercise any of these rights, contact us at hello@aviaspark.com.
5. Complaints to Supervisory Authorities
If you believe that our processing of your personal data violates data protection laws, you have the right to file a complaint with a supervisory authority in your EU member state.
Our primary supervisory authority is:
Österreichische Datenschutzbehörde (DSB)
Barichgasse 40-42, 1030 Vienna, Austria
Website: https://www.dsb.gv.at
