Privacy Policy

Airborne (“Airborne”, “we”, “us”) is the controller of the personal information described in this policy. This means Airborne decides why and how that information is processed. You can contact Airborne about privacy matters at privacy@airborne.social.

If you use Airborne through an organization, that organization may separately control information it submits to the service. In that situation, Airborne may process the information on the organization’s instructions. Requests concerning organization-controlled information should first be directed to that organization.

We collect information you provide, including:

• if you join our waitlist: your email address, where you came from (for example, a link you followed), whether someone referred you, and any optional answers you give about your business, such as what you’re building, your team size, approximate revenue, and your role;
• account details such as your name, email address, and sign-in information;
• workspace and organization details;
• creator profile, eligibility, payment, and tax-related information;
• content, media, prompts, brand materials, feedback, and support messages; and
• billing details and transaction records from our payment processor.

We also collect technical and usage information, such as IP address, device and browser details, session identifiers, pages and features used, timestamps, logs, diagnostics, and approximate location inferred from your IP address.

If you connect a third-party account or publishing destination, we receive the information and permissions needed to provide that connection, according to the choices you make with that provider.

We obtain personal information:

• directly from you when you join the waitlist, create an account, upload content, or contact us;
• from another person’s waitlist link, which tells us who referred you;
• automatically from your browser or device when you use Airborne;
• from an organization that invites you to a workspace or administers your Airborne account;
• from services you connect, such as an identity, payment, or publishing provider; and
• from publicly accessible sources when Airborne identifies content trends and campaign opportunities.

If the GDPR applies, Airborne relies on the following legal bases. The basis depends on the purpose and the context in which information is processed.

• Contract: to create and administer your account; provide requested generation, rendering, storage, workspace, and publishing features; process subscriptions and usage credits; provide support; and administer Creator Pool submissions, licenses, and payments.
• Legitimate interests: to secure the service; prevent fraud and abuse; diagnose errors; maintain reliability; understand feature usage; improve Airborne; protect legal rights; and communicate about material service changes. These interests are balanced against your rights and reasonable expectations.
• Legitimate interests (waitlist): to run the waitlist, including checking that an email address can receive mail and isn’t a temporary inbox, preventing fake and duplicate sign-ups, deciding who gets early access and in what order (which may take your referrals and optional answers into account), emailing you when it’s your turn, and sending occasional product updates. People at Airborne make these access decisions. Every update email has an unsubscribe link, and unsubscribing doesn’t affect your place on the list.
• Legal obligation: to maintain financial and tax records, respond to valid legal process, meet regulatory duties, and protect users where the law requires us to act.
• Consent: for non-essential cookies, optional marketing, or another purpose where we specifically ask for permission. You can withdraw consent at any time without affecting processing that occurred before withdrawal.

We do not use private customer content to train a general-purpose AI model unless we first obtain explicit permission.

We may share information with:

• service providers that support hosting, databases, storage, AI generation, rendering, authentication, email, payments, analytics, and customer support;
• connected platforms when you direct us to publish content or use an integration;
• customers and campaign partners when a Creator Pool submission is selected for licensed use;
• professional advisers, auditors, insurers, and financing or transaction partners;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or enforce our agreements; and
• a successor in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We do not sell personal information for money.

When you request an AI feature, we may send the prompt, selected media, and related instructions to an AI service provider to generate the requested output. Do not include sensitive personal information in prompts or uploads unless it is necessary and you have the right to do so.

AI providers process submitted data under their own contractual and security commitments. We select and configure providers with the aim of limiting their use of customer content to delivering the requested service.

Airborne does not use solely automated decision-making, including profiling, to make decisions that produce legal or similarly significant effects about you. AI-generated suggestions and Creator Pool review tools support creative or operational workflows, but consequential decisions are not made solely by those systems.

Our public website and waitlist don’t use advertising cookies. To understand how the site is used, we measure visits and interactions (such as pages viewed and whether the waitlist form was completed) with PostHog, in a cookieless mode that stores nothing on your device; typed text is never recorded. In the Airborne app, we use cookies and local storage that are necessary for sign-in, security, preferences, session continuity, and core product functionality. We may also use limited measurement technologies to understand product performance. Where required, we will ask for consent before using non-essential cookies.

We use the following criteria to determine how long information is retained:

• waitlist details are kept until you’re given access (when they become part of your account) or until we stop running the waitlist, and you can ask us to remove you at any time;
• account and workspace information is kept while the account is active and for the period reasonably needed to complete deletion, resolve disputes, and prevent abuse;
• content and generated media is kept until you or your organization deletes it, the account is closed, or it is no longer needed to provide the requested service;
• Creator Pool licenses and payment records are kept for the term of the applicable rights and for required tax, accounting, and dispute periods;
• security and diagnostic logs are kept for the period reasonably necessary to investigate incidents, maintain reliability, and prevent fraud; and
• support and consent records are kept as needed to document requests, preferences, and our response.

Deletion from backups occurs through the applicable backup-rotation cycle. We may retain information longer when required by law, a legal hold, or the establishment, exercise, or defence of legal claims. When possible, information retained for analytics is aggregated or de-identified.

Airborne and our providers may process information in Canada, the United States, and other countries where privacy laws may differ from those where you live. For transfers from the European Economic Area, we rely on a valid transfer mechanism where required, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where appropriate.

To ask about the safeguard used for a particular transfer or request a copy of relevant contractual protections, email privacy@airborne.social. Some portions may be redacted to protect confidential or security-sensitive information.

We use administrative, technical, and organizational safeguards designed to protect personal information. No online service can guarantee absolute security. Please use a secure device, protect access to your email and account, and notify us if you suspect unauthorized use.

If the GDPR applies to you, you may ask Airborne to:

• confirm whether we process your personal information and provide access to it;
• correct inaccurate or incomplete information;
• delete information in circumstances covered by the right to erasure;
• restrict processing in circumstances provided by law;
• provide information you supplied to us in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible;
• honour withdrawal of consent for future processing based on consent; and
• review any decision that you believe was made solely by automated means.

You have the right to object at any time to processing based on legitimate interests, including related profiling. You also have an absolute right to object to direct marketing. If you object, we will stop the affected processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed for legal claims.

To make a request, email privacy@airborne.social. We may need to verify your identity and clarify the scope of your request. We generally respond within one month, subject to lawful extensions for complex or numerous requests. Exercising these rights is normally free, although the GDPR permits a reasonable fee or refusal for requests that are manifestly unfounded or excessive.

You may lodge a complaint with the data protection authority where you live, work, or believe a GDPR infringement occurred. We would appreciate the opportunity to address your concern first, but you are not required to contact us before approaching a regulator.

Depending on where you live, you may have additional rights to know, access, correct, delete, or receive a copy of personal information; opt out of certain disclosures; limit certain uses of sensitive information; and appeal a denied request. You may use an authorized agent where local law permits. We will not discriminate against you for exercising a privacy right.

If you’re in Canada, you can ask to access or correct your personal information and ask how it has been used or disclosed. If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

Airborne is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can investigate and delete it where appropriate.

We may update this policy as Airborne changes. We will post the updated version here and revise the effective date. If a change materially affects your privacy rights, we will provide additional notice where required.

Airborne is responsible for the privacy practices described here. For privacy questions, rights requests, or concerns, contact privacy@airborne.social.