Privacy
How AviaAstra handles personal and flight data. Last updated 24 October 2026.
AviaAstra is a pre-flight risk advisory service for helicopter operations, provided by AeroLumio ("we"). This notice explains what we collect, why, where it is kept, who can see it, and the choices and rights you have, including under India's Digital Personal Data Protection Act, 2023.
What we collect
| What | Where it comes from | Why |
|---|---|---|
| Your name and email address, and whether Google has verified the email | Google, when you sign in. We never receive your password. | To know who you are and which company's data you may see |
| Your access request: name, the operator you fly for, licence number (optional), any note | You, when you ask for access | So we can check who you are before giving you access |
| Flight information you enter: flight number, date and times, aircraft, helipad positions, routes and levels, weather values | You | To produce the risk brief |
| Briefs and debriefs, with the email of the person who recorded each one | You, when you record them | Your company's tamper-evident safety record |
| Your company's fleet, own helipads, operating minima and saved routes | Your company | To fill in briefs quickly and apply your company's minima |
| A sign-in cookie | Set when you sign in | To keep you signed in. We use no advertising or tracking cookies and no analytics. |
How we use it
- To run AviaAstra: sign-in, briefs, records and your company's data.
- To improve AviaAstra's risk ratings, by comparing briefs with what actually happened on the flight. We do this with records stripped of names and email addresses, and we never publish anything that identifies a pilot, aircraft or company without that company's written agreement.
- To keep the service secure and to answer your questions.
We do not sell personal data, and we do not use it for advertising.
Who can see it
- People in your company who have AviaAstra access see your company's flights, records, fleet and routes. No other company can see them.
- AeroLumio, to approve access, support you and keep the service running.
- Service providers that run parts of AviaAstra for us:
- Google: sign-in.
- Amazon Web Services: the server that runs AviaAstra and stores the data, in Mumbai, India.
- Weather and terrain services receive the positions of helipads and route points (latitude and longitude only, never names or emails) to return the weather and ground height there: aviationweather.gov (US National Weather Service), Open-Meteo, EUMETSAT and AWS Terrain Tiles.
- Let's Encrypt: the security certificate for the website. It receives no personal data.
- Anyone the law requires us to share it with.
Where it is kept, and for how long
Data is stored on our server in Mumbai, India, and backed up on the same server (hourly, kept 14 days) and in daily server snapshots in the same region. Flight records are kept for as long as your company uses AviaAstra, because they are its safety record. Account details are kept while you have access. When access ends, or when you ask, we delete or anonymise personal data unless we must keep it by law. Because records are tamper-evident, a record is kept whole: removing a person's details from it is done by agreement with their company.
Your rights
You can ask us for a summary of the personal data we hold about you, to correct it, to delete it, or to name someone to act for you. You can also withdraw your consent, though AviaAstra cannot be used without the data needed to run it. Write to privacy@aerolumio.io; we will answer as soon as we can. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Security
Connections are encrypted (HTTPS). Access needs a verified sign-in and our approval, and each company's data is kept in its own folder that other companies cannot open. Every change to saved routes and access is kept as a version, so it can be undone. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Children
AviaAstra is for licensed pilots and aviation professionals and is not meant for anyone under 18.
Changes and contact
If we change this notice, we will update the date above and tell users of any important change. Questions or requests: privacy@aerolumio.io.