Scope and commitment
This Privacy Policy describes how Alis Tecnologia e Serviços Aeronáuticos LTDA processes personal data in the context of its websites, applications, SaaS platforms, aviation management modules, support, commercial relationships and other associated services.
Alis is committed to transparency, information security and the protection of the privacy of customers, users, employees, service providers and visitors. This policy should be read together with the Terms and Conditions, the Security & LGPD Policy and any contracts or commercial proposals signed directly with the customer.
In the event of any conflict between this policy and a specific contract signed between the parties, the contractual terms applicable to the respective service shall prevail.
Who we are
The data controller or processor, as the case may be, is Alis Tecnologia e Serviços Aeronáuticos LTDA, registered under CNPJ No. 45.285.138/0001-12, engaged in the development and supply of digital solutions for operational and technical management, training and safety in aviation.
The official channels for contact regarding privacy, security and data protection are: contato@alisaviation.com.br and WhatsApp +55 (11) 99635-6989.
Personal data that may be processed
Depending on how the platform is used and on the modules contracted, Alis may process different categories of personal data and technical information, including:
- registration and identification data, such as name, email, phone number, company, role and access credentials;
- authentication data, permissions, user profiles, access logs, action history and audit records;
- commercial and contractual data related to contracting, support, billing and customer relationships;
- operational data entered by the customer into the platform, such as information on flights, aircraft, crew members, logbook, rostering, scheduling, expenses, CTM, maintenance, maintenance shops, CIAC, training and assessments;
- technical usage data, such as IP address, device identifiers, browser, operating system, time, duration, features accessed and browsing events;
- data submitted in support tickets, messages, forms, integrations or communications with Alis.
Purposes of processing
Data is processed for legitimate purposes related to the provision of the services, such as:
- creating, authenticating and administering user accounts;
- making available the contracted modules, including the digital logbook, CTM, SMS (SGSO), Flight Kit, maintenance shops, CIAC and assessments;
- maintaining the records, traceability, logs and action history necessary for the platform to function;
- providing technical support, customer service, training, onboarding and operational follow-up;
- sending essential communications about the service, security, updates, contract changes or unavailability;
- improving the stability, usability, security and performance of the systems;
- complying with legal, regulatory, contractual, tax and accounting obligations or with orders from competent authorities;
- protecting the rights of Alis, customers, users or third parties in administrative, arbitration or judicial proceedings.
Legal bases
The processing of personal data may rely, as applicable, on the legal bases set out in the LGPD (Brazilian General Data Protection Law, Lei 13.709/2018), including performance of a contract, compliance with a legal or regulatory obligation, regular exercise of rights, legitimate interest, protection of life or safety, and consent when necessary.
In operations in which the customer determines the purposes and essential means of processing the data entered into the platform, Alis normally acts as processor, processing the data in accordance with the customer's instructions and the applicable contract.
Data sharing
Alis does not sell or rent personal data. Sharing may occur only when necessary to provide the services, comply with obligations or protect rights, including with:
- infrastructure, hosting, database, authentication, email, communication, analytics, support and payment providers, and administrative tools;
- administrators and users authorized by the customer itself within the platform;
- technical or commercial partners involved in the onboarding, training, support or delivery of the contracted service;
- public, regulatory or judicial authorities, when there is a legal obligation, a valid order or a need to defend rights.
Where there is an international transfer of data, Alis will seek to use vendors and mechanisms compatible with the applicable law and with reasonable security and governance standards.
Retention and deletion
Personal data and records associated with the platform will be kept for as long as necessary to fulfill the purposes described in this policy, provide the services, preserve operational traceability, comply with legal, regulatory or contractual obligations, or exercise rights in the regular course.
Deletion requests will be assessed according to the nature of the data, Alis's role in the processing, the applicable obligations and the contracts in force. Data required for legal obligations, auditing, security, fraud prevention or the defense of rights may be retained for the necessary period.
Rights of data subjects
Under the LGPD, data subjects may request, as applicable, confirmation that processing exists, access, correction, anonymization, blocking, deletion, portability, information about sharing, withdrawal of consent and objection to processing.
Where a request involves data processed by Alis on behalf of a customer who is the controller, Alis may direct the data subject to submit the request to that controller or forward the request to the customer, in accordance with the contract and applicable law.
Information security
Alis adopts technical, administrative and organizational measures proportionate to the size, nature and risk of its activities, seeking to protect data against unauthorized access, loss, improper alteration, misuse or unauthorized disclosure.
Applicable practices may include access controls, authentication, segregation of permissions, logs, backups, use of reliable providers, vulnerability review, system updates and internal incident response procedures.
Cookies and similar technologies
Alis websites may use cookies and similar technologies for page functionality, traffic analysis, experience improvement, security, campaign measurement and integration with support or analytics tools.
Users can configure their browser to block or delete cookies, understanding that some features may be affected.
Updates to this policy
Alis may update this Privacy Policy at any time to reflect legal, regulatory, technical, operational or commercial changes. The current version will always be available on this page, with the date of update indicated.
Need to talk to Alis?
For questions about privacy, security, use of the platform, contracts or the exercise of rights under the LGPD, contact us through the official channels.