WASTEGATE
← Back to home

Privacy Policy

Last updated: June 22, 2026

1. Introduction

Wastegate Technologies, LLC ("we", "us", "our") operates Wastegate ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our aircraft maintenance management platform.

2. Information We Collect

Account Information

  • Name, email address, and organization affiliation
  • Role and certification type (e.g., A&P, IA, AMT Student)
  • Authentication credentials (securely hashed, never stored in plaintext)

Maintenance Data

  • Aircraft records (tail numbers, make/model, maintenance history)
  • Maintenance cases, work orders, and case notes
  • Uploaded maintenance manuals and documents
  • AI assistant conversation history
  • Audit log entries (actions performed within the system)

Usage Data

  • Feature usage patterns and page views
  • AI query counts and types
  • Browser type, device information, and IP address

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers, bank account details, or other financial instrument data on our servers. See Stripe's Privacy Policy for details on how they handle payment data.

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process AI queries using your uploaded manuals as context (RAG)
  • Enforce role-based access controls and sign-off authority per 14 CFR Part 43
  • Maintain immutable audit trails for FAA compliance
  • Process billing and manage subscriptions
  • Send transactional emails (invitations, password resets, billing notifications)
  • Analyze anonymized usage data to improve the Service

4. AI Processing

When you use the AI assistant, your questions and relevant context from your organization's indexed manuals are sent to a large language model (LLM) provider for processing. We use:

  • Anthropic (Claude) - for cloud AI processing
  • Groq - as an alternative cloud provider

These providers process queries in real-time and do not retain your data for training purposes. Manual content is stored as vector embeddings (numerical representations) in our database, not as readable text on third-party servers.

5. Data Storage and Security

  • Data is stored in Supabase (PostgreSQL) with row-level security (RLS) policies
  • All data is encrypted in transit (TLS) and at rest
  • Organization data is isolated via multi-tenant RLS policies
  • Audit logs are immutable (database triggers prevent modification or deletion)
  • Two-factor authentication (TOTP) is available for all users
  • We conduct regular security reviews of our access controls

6. Data Sharing

We do not sell your data. We share data only with:

  • Service providers - Supabase (database), Render (backend hosting), Vercel (frontend hosting), Stripe (payments), and LLM providers (AI processing)
  • Legal requirements - when required by law, subpoena, or government request
  • FAA or regulatory bodies - only if required by regulation and with your knowledge

7. Data Retention

  • Active account data is retained as long as your account is active
  • Audit logs are retained indefinitely (immutable by design for compliance)
  • Upon account deletion, personal data is removed within 30 days
  • Maintenance records may be retained longer to comply with 14 CFR 91.417 recordkeeping requirements
  • Backups are retained for up to 90 days after deletion

8. Your Rights

You have the right to:

  • Access - request a copy of your personal data
  • Correct - update inaccurate information
  • Delete - request deletion of your account and personal data
  • Export - request a machine-readable export of your data
  • Restrict - limit how we process your data

To exercise these rights, contact us at hello@wastegate.ai.

9. Cookies and Tracking

We use essential cookies for authentication and session management only. We do not use third-party tracking cookies or advertising pixels. Local storage is used to remember your active organization preference.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For privacy-related questions or concerns:
Wastegate Technologies, LLC
Email: hello@wastegate.ai

© 2026 Wastegate Technologies, LLC. All rights reserved.