Privacy policy

AVIENSA SAS, 3 rue des Quatre Vents, 45600 Sully-sur-Loire, France (RCS Orléans 109 682 088), is the data controller for this website and for Prysm user accounts.

For the inspection content that a customer organisation records in Prysm (reports, photos, client contacts, planning), that organisation is the controller. AVIENSA processes this content on its behalf and on its instructions.

For any question about privacy: contact@aviensa.com.

When you send the demo or contact form, we receive the name, company, role, e-mail address and message you provide.

This website uses no advertising cookies and no third-party trackers. If we measure the audience, we do it without cookies and without following you across sites.

Account: your e-mail address and display name, and optionally your role and phone number; the organisation you belong to and your role in it; the details your organisation records about you as a team member (nationality, home base, type ratings).

Security: your password (stored hashed, never readable), your passkeys, your two-factor authentication settings and your sessions.

Activity: an audit trail of sensitive actions (who did what, and when) and the technical logs needed to run and secure the service.

Billing: subscriptions are paid through Stripe. We keep a customer identifier and the plan; card numbers never reach us.

Reports, findings, free-text remarks, photos, attachments and voice notes are recorded by your organisation for its own customers. They can incidentally contain personal data, such as a name on a document or a person in the background of a photo. Your organisation decides what it documents.

Finalised reports are sealed so that they can be verified later. A correction is made through a new, traced revision.

Camera: to take inspection photos and to read an aircraft data plate. Microphone: only while you record a voice note. Photos and files: only those you choose to attach.

Prysm does not read your location, your contacts or any advertising identifier, and it does not track you across other apps or websites.

To work offline, Prysm keeps reports and photos on your device. They are removed when you sign out.

To provide the service under the contract with your organisation: account, reports, synchronisation, support.

To keep the service secure and to keep evidence of actions, which is our legitimate interest and that of your organisation.

To meet our legal obligations, such as invoicing and accounting.

To answer the requests you send us.

Supabase: database, authentication and file storage, hosted in Paris, France. Vercel: delivery of the web application and of this website. Stripe: payments. Resend: service e-mails such as invitations and password resets. OVH: our mailboxes. GitHub: backups, encrypted before they leave our infrastructure.

Anthropic: when you use the data-plate reading function, the photo of the plate is sent to be read. OpenStreetMap (Nominatim), adsbdb and hexdb receive only a place name or an aircraft registration, never personal data.

Some of these providers are established in the United States. When data leaves the European Union, the transfer is covered by the European Commission’s standard contractual clauses or by the EU–US Data Privacy Framework.

Account data: as long as the account exists. Reports deleted by your organisation: 30 days in the trash, then erased for good. Backups: encrypted, kept 90 days.

Contact-form messages: the time needed to handle your request. Invoices and accounting records: 10 years, as French law requires.

You can delete your account at any time from the app: Settings, Profile, Delete my account. You can also ask us at contact@aviensa.com.

Your name, e-mail address, phone, role, password, passkeys and two-factor settings are erased at once. Copies held in encrypted backups disappear within 90 days.

The reports you wrote stay with your organisation, which remains responsible for them. The full procedure is described at aviensa.com/delete-account.

Under the GDPR you can ask to access, correct, erase or export your data, and to restrict or object to its processing. Write to contact@aviensa.com; we answer within one month.

For the content of an inspection report, contact the organisation concerned first; we help it answer you.

You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Data is encrypted in transit and at rest. Each organisation’s data is isolated from the others. Files are stored in private storage and reached through short-lived links. Two-factor authentication and passkeys are available on every account.

Prysm is a professional tool. It is not intended for anyone under 18.

We update this page when the product or the law changes. A significant change is announced in the app or by e-mail.