Privacy Notice.

AI Model Training and Data Collection

AIVE AI Systems does not use customer data submitted to AIVE Atlas Geo to train or fine-tune AI models. We use customer data only as necessary to provide and support the service, manage accounts, and send service-related communications.

Atlas Geo QGIS Plugin

Privacy Policy & Terms of Service

Version 0.7 | Effective date: 2026-09-18

1. Privacy Policy


Who we are

AIVE AI Systems Inc. ("AIVE", "we", "us") is the company behind ATLAS, a platform that aligns UAV and drone imagery to mapping imagery and returns georeferenced outputs. For the personal data described in this policy, AIVE is the data controller, meaning we decide why and how that data is processed.

We are incorporated at 1512 W 29th Street, Austin TX 78703, registration number (EIN) 33-4970333.
Questions about your data or this policy: privacy@aivesystems.com, and that this mailbox is monitored.

Privacy Contact:

Luis Sentis
AIVE AI Systems Inc.
Attention: Privacy Officer
1512 W 29th St, Austin, TX, USA
[privacy@aivesystems.com]

European Economic Area Representative:

Luis Sentis
AIVE AI Systems Inc.
Attention: EEA Representative
1512 W 29th St, Austin, TX, USA
[privacy@aivesystems.com]

United Kingdom Representative:

Jo Franklin
jo@leolion.co
Attention: UK Representative
1A Royal Parade, Tilford Road
Hindhead.
GU26 6TD
UK
Data Protection Officer:
[info@aivesystems.com]
1512 W 29th St
Austin, Texas, 78703

Who this covers

Anyone who visits our site, signs up for ATLAS, or appears incidentally in uploaded drone imagery, such as people, vehicles or buildings. If you are in the EU or EEA, GDPR applies to how we handle your data.

What we collect

Account. Your email address, first and last name, and the country you declare when you sign up. Your password is held by our identity service as a hash and is never visible to us. We also hold session data.

Billing. Your plan, credit balance and transaction history. When card payments are enabled, a reference identifier linking your account to a payment processor record. We never receive or store raw card numbers.

Your uploads. The imagery itself, the location and camera information the drone embeds in it, any mission details you provide, and the georeferenced outputs we produce. The embedded information typically includes the coordinates, altitude, camera direction and time of each capture, which together describe where and when you flew. Drone imagery can incidentally capture people, vehicles and private property. We treat that as personal data and protect it accordingly. You remain responsible for ensuring your capture and upload comply with the law where the imagery was taken.

Usage data. IP address, request timestamps, job history, and which client or plugin version you are using. Our processing logs also record the coordinates and altitude of each job, together with its identifier, because that information is needed to diagnose failures.

Why we process it

Purpose Data involved Legal basis
Run your account Account data Contract
Keep you signed in and secure Identity data, tokens, IP address Contract; legitimate interest
Georeference your imagery Uploads and their embedded capture information Contract
Manage processing capacity Job records, timestamps, plan Contract
Determine service eligibility The country you declare, held in your account and in your access token Legal obligation; legitimate interest
Billing and fraud checks Billing data Contract; legal obligation
Rate limiting and abuse prevention Usage data, IP address Legitimate interest
Support Contact and account data Contract
Legal compliance, such as tax and law enforcement Account and billing data Legal obligation
Service emails Email address Contract

Availability by country

ATLAS is offered only in countries on our approved list. The country you declare when you create your account is recorded and carried in your access token, and our services check it automatically on every request. If your declared country is not on the approved list, access is refused.

This check is automatic and is applied uniformly to all accounts. It is based on the country you state yourself. We do not infer your country from your IP address or from your imagery, and we do not independently verify the country you declare.

This restriction is implemented to ensure compliance with applicable export control laws, trade sanctions, and regulatory obligations administered by relevant authorities (including US OFAC sanctions). Customers can view the current list of approved countries at https://www.aivesystems.com/approved-countries.

Who else sees your data

  1. Google Cloud. Hosts our infrastructure and stores imagery, outputs, account and billing records, and operational logs.
  2. Mapbox. Supplies the mapping imagery that your photographs are aligned against. To fetch the correct map area we request it by location, so the approximate area of each job is disclosed to the mapping provider. Your photographs themselves are never sent to them, and the requests reach the provider from our servers rather than from your device.
  3. Google Workspace. Delivers service email, such as address verification.
  4. Stripe. Payment processing, once paid plans are switched on.

We do not sell your data, and we do not provide your imagery to any third party for their own marketing.

Where your data is held. Imagery, outputs and account records are stored in the United States, in Google Cloud's us-central1 region. If you are in the EU or EEA, your data is therefore transferred to the United States. We rely on Standard Contractual Clauses as the transfer mechanism.

How long we keep it

Plan Uploads and outputs
Free 30 days from upload, then deleted
Pay As You Go 7 days from upload, then deleted
Other data Kept for
Temporary processing copies Removed when the job finishes
Job records As long as your account is active, for your job history and billing
Account data As long as your account is active
Operational logs Under our cloud provider's log retention period (30 days for ordinary operational logs, and 400 days for the separate security audit log, which the cloud provider fixes and we cannot shorten)
Billing records As long as tax and accounting law requires

Independently of the periods above, stored objects are deleted automatically no later than 400 days after they are written.

If you ask us to delete your data sooner, we will, except where we are legally required to keep it, which in practice means billing and transaction records.

Your rights

If you are in the EU or EEA you can ask us to give you a copy of your data, correct inaccuracies, delete it, restrict how we use it, provide it in a portable format, or object to processing based on legitimate interest. You can also withdraw consent where consent is the basis, and complain to your local supervisory authority.

If you ask us to delete your data, we remove your imagery, your outputs and your account. We retain records we are legally required to keep, which in practice means billing and transaction records.

Contact privacy@aivesystems.com. We respond within one month, extendable by two further months for complex requests.

A few more things

  1. Children. ATLAS is a business tool and is not aimed at anyone under 16. We do not knowingly collect data from children.
  2. Automated processing. Processing your imagery is a service you request and control. The one automated decision we make about you is the country eligibility check described above, which is based on the country you declare yourself.
  3. Changes. We update the effective date at the top of this policy and will notify you when a change is material.