Privacy policy

Last updated: November 7, 2026

This policy describes how Airship Security ("we", "us") handles personal data when you use Airship, visit airshipsecurity.com, or interact with us. It applies to everyone who uses our platform, visits our website, or contacts us.

Overview

Airship is an autonomous security platform. We collect only the data we need to run the service, process payments, and improve the product. We don't sell personal data, and we don't use it for advertising.

Data we collect

Account and identity

When you create an account or sign up for a plan, we collect:

• your email address and name
• your country and, where tax requires it, a ZIP or postal code
• the API keys and access credentials we issue to you (stored only as one-way hashes)

Payment data

Payments are handled by Dodo Payments, who act as the merchant of record. Your card number and payment details go directly to Dodo and never reach our servers. From each transaction we store:

• the amount, currency and date
• the payment ID at Dodo
• any refund or dispute status

Security testing and scan data

When Airship's agents test your systems, scan targets, configurations, and results are processed on our infrastructure. We retain scan results tied to your account so you can access them. We do not access or review your scan data except to operate the service, investigate abuse, or comply with law.

Website analytics

The website uses Tracwell for analytics. It records the pages you visit, the referring site, campaign tags, your browser, operating system, device type, and an approximate location (country, region, city) derived from your IP address. It also records actions such as copying a docs page or opening the link to book a call.

Tracwell stores an anonymous visitor ID and session ID in your browser's local storage. It sets no cookies, does not store your IP address, and does not track you across other websites. It respects Do Not Track: with it on, nothing is sent. Your email and credentials are never sent to analytics.

Communications

If you email us at hi@airshipsecurity.com or contact us through any other channel, we keep the conversation and any information you provide so we can help you.

Service logs

Our API runs on Cloudflare. IP addresses are used for rate limiting and abuse prevention. Cloudflare keeps standard request logs. Our own application logs exclude credentials, email addresses, and names.

Cookies and tracking

airshipsecurity.com does not set cookies for analytics. Tracwell uses browser local storage (a visitor ID and session ID), which you can clear at any time.

Essential cookies may be set by our infrastructure providers (such as Cloudflare) for security purposes like bot detection and rate limiting. These are strictly necessary and cannot be opted out of while using the site.

We do not use third-party advertising cookies, tracking pixels, or social media widgets.

How we use your data

We use personal data to:

• Provide the service — operate your account, run security testing, and deliver scan results.
• Process payments — handle invoices, payments, and refunds through Dodo Payments.
• Communicate with you — send account details, respond to support requests, and notify you of important changes.
• Improve the product — understand how the website and platform are used so we can make them better. We use aggregated and anonymized data wherever possible.
• Prevent abuse — detect fraud, enforce our terms, and protect the security of the platform.
• Comply with law — meet tax, accounting, and regulatory obligations.

We do not use your data for advertising, profiling, or automated decision-making that produces legal effects.

Who we share data with

We share personal data with these providers only as needed to operate the service. Each processes data under its own privacy policy and applicable data protection agreements.

We may also disclose data:

• when required by law, regulation, or legal process
• to protect the rights, safety, or property of Airship Security, our users, or the public
• in connection with a merger, acquisition, or sale of assets, in which case we will notify affected users

We do not sell personal data to third parties.

Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your data on the following bases:

• Contract — to provide the service you signed up for, and process your payments.
• Legitimate interest — to improve the product, prevent fraud, secure the platform, and understand usage patterns. We balance these interests against your rights and only process data where the impact on you is proportionate.
• Legal obligation — to comply with tax, accounting, and regulatory requirements.
• Consent — where we ask for it explicitly, such as for optional communications. You can withdraw consent at any time.

International data transfers

Airship Security is based in India. Your data may be processed in India, the United States, and other countries where our infrastructure providers operate. When data is transferred outside your jurisdiction, we rely on:

• adequacy decisions where available
• standard contractual clauses approved by the European Commission or the UK ICO
• other lawful transfer mechanisms recognized in your jurisdiction

Data security

We take reasonable technical and organizational measures to protect your data, including:

• encryption in transit (TLS) and at rest
• access controls limiting who within our team can view personal data
• infrastructure hosted on providers with SOC 2 and ISO 27001 certifications
• application logs that exclude sensitive fields like credentials and email addresses

No system is perfectly secure. If you believe your account or data has been compromised, contact us immediately at hi@airshipsecurity.com.

Data retention

• Account data is kept for as long as your account exists, and longer where tax and accounting law requires.
• Payment records are retained as required by Dodo Payments and applicable financial regulations.
• Scan and security testing results are retained while your account is active. You can request deletion at any time.
• Website analytics are retained for the period Tracwell's plan allows, up to four years.
• Support correspondence is kept as long as reasonably needed to assist you and improve the service.
• Service logs are retained for up to 90 days for security and debugging purposes.

Your rights

Depending on where you are, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (subject to legal retention requirements)
• Restrict or object to certain processing
• Port your data to another service in a machine-readable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

For EEA/UK residents

You can exercise these rights by emailing hi@airshipsecurity.com. We will respond within 30 days. If you are unsatisfied with our response, you can contact your local supervisory authority.

For California residents

Under the CCPA, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email hi@airshipsecurity.com. We will not discriminate against you for exercising these rights.

For Brazilian residents

Under the LGPD, you have similar rights to access, correct, delete, and port your data. Our data processing is governed by the legal bases described above. Contact hi@airshipsecurity.com to exercise your rights.

Children

Airship is designed for professional use and is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will change the date at the top of this page, and for significant changes we will also post a notice in the changelog. The version in effect when you provided your data governs our use of it until you are notified of a change.

Contact

Questions or requests about your privacy:

Airship Security Email: hi@airshipsecurity.com

See also our terms of service.