Privacy Policy

1. Who we are

LOS Analyzer is operated by Idea Engine LLC, a Wisconsin limited liability company ("Idea Engine", "we", "us"). Idea Engine decides how and why your personal data is processed in LOS Analyzer (the marketing site, the web app, the reports, the Part 77 Quick Check and The Docket).

2. What we collect

3. How we use it

• To provide the Service: sign-in, saving projects, running analyses, generating and delivering reports (performance of our contract with you).
• To take payments, keep accounting and tax records, and handle refunds and disputes (contract; legal obligation).
• To send transactional email, such as report-ready notices, receipts and account notices (contract).
• To send marketing email: The Docket to confirmed subscribers (consent), and occasional LOS Analyzer product emails to Quick Check users and, where the law allows, to professionals whose business contact details are public (our legitimate interest in telling relevant professionals about the product). Every marketing email identifies us, includes our postal address, and tells you how to opt out; we honour opt-outs within 10 business days.
• To secure the Service, prevent fraud and abuse, and fix problems (legitimate interest).

We do not sell personal data, and we do not share it for cross-context behavioural advertising. We run no advertising pixels or third-party analytics trackers. We do not use your projects or reports to train machine-learning models.

4. Service providers (sub-processors)

These companies process personal data on our behalf, only to provide their service to us:

Google's use of data from Google Maps and Google sign-in is governed by the Google Privacy Policy. We do not currently use a third-party error-tracking service. We may disclose data if the law requires it, to protect our rights or users' safety, or to a successor if the business is transferred, in which case this policy continues to apply.

5. How long we keep it

• Account, projects, analyses and reports: while your account is open. When you delete your account (in the app under Account settings → Delete my account, or by emailing us, in which case we act within 30 days), we immediately delete your email address, project names, sites, geometry and analysis results, your PDF reports and uploaded files, your Quick Check sign-ups and Docket subscriptions, and your sign-in.
• Payment records: the minimal records of purchases and refunds (dates, amounts, what was bought, Stripe payment references and the Terms version accepted) are kept for as long as tax and accounting law requires, typically 7 years, with your name and email removed. Stripe keeps its own records under its policy.
• Quick Check emails: until you opt out or ask us to delete them. After an opt-out we keep only what we need to avoid emailing you again.
• Docket subscriptions: while the subscription is active; unsubscribed addresses are kept only on the suppression list described above.
• Server logs: 30 days.

6. Cookies and browser storage

We use only what the Service needs to work. There are no advertising or cross-site tracking cookies, so we do not show a cookie banner.

• Sign-in cookies (web app): an encrypted session cookie that holds your sign-in tokens, plus short-lived security cookies used during sign-in (CSRF, state and PKCE). AWS Cognito sets its own cookies on its sign-in domain.
• Browser storage (web app): your light/dark theme choice and the ID of the last project you opened, so the app can reopen it. A service worker caches the app's own files so it loads faster.
• Browser storage (marketing site): a timestamp and a per-tab flag used to count a visit once per browsing session. They contain no identifier and are never sent to us.

7. Security, and data breaches

Data is encrypted in transit (HTTPS) and stored with AWS encryption at rest. Access to production systems is limited and uses AWS identity controls; the API checks that every project and report belongs to the signed-in user. We never store card numbers, Social Security numbers, driver's licence numbers or financial-account credentials.

If a breach affects your personal information, we will notify you and any authority as the law requires, including under Wisconsin Statute § 134.98 where it applies, without unreasonable delay.

8. Your choices and rights

Wherever you live, you can ask us to:

• tell you what personal data we hold about you and give you a copy (including your projects in a machine-readable format);
• correct it;
• delete it, including closing your account (you can do this yourself in the app under Account settings → Delete my account);
• stop sending you marketing email (every marketing email also has an opt-out).

Email privacy@idea-engine.studio from the address on your account, or tell us how to verify that the request is yours. We respond within 30 days, and within 45 days at most where a law allows that. We will not treat you differently for exercising these rights. Some records (such as payment records) may have to be kept by law; we will tell you if so.

Residents of California and other US states with consumer privacy laws: we do not sell or share personal information and do not use it for targeted advertising or profiling. If you are in the EU, UK or Switzerland, you also have the rights to restrict or object to processing and to complain to your local data-protection authority.

9. Where your data is processed

We are based in the United States and process data in the US (AWS us-east-1). If you use the Service from elsewhere, your data is transferred to the US. Our providers' data processing terms (AWS, Google and Stripe) include the European Commission's Standard Contractual Clauses for such transfers.

10. Children

The Service is for professionals and is not directed at children. You must be 18 or older to use it. We do not knowingly collect data from anyone under 18; if you believe we have, email privacy@idea-engine.studio and we will delete it.

11. Changes to this policy

We will post changes here with a new "Last updated" date. For material changes we will email account holders before they take effect.