Effective Date: July 16, 2026

1. Introduction

Votix (“Votix,” “we,” “us,” or “our”) provides a cloud-based drone operations management platform that enables public safety agencies and enterprise organizations to plan, execute, and monitor drone flights, including Drone as First Responder (DFR) operations, automated docking station management, mission planning and scheduling, real-time telemetry and video streaming, fleet management, and post-flight data management (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with our Services, our websites, and our mobile and desktop applications. It also describes the choices and rights available to you regarding your personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Our Role: Controller and Processor

Votix operates in two distinct capacities, and it is important to understand the difference:

Votix as a controller. For information we collect for our own purposes — such as account registration data, billing and contract information, website visitor data, and communications with us — Votix determines how and why the information is processed, and this Privacy Policy applies in full.

Votix as a processor / service provider. Operational data generated through the use of the platform by our customers — including flight video and imagery, telemetry, mission plans, and related records (“Customer Operational Data”) — is owned and controlled by the customer organization (for example, the public safety agency operating the drone program). Votix processes Customer Operational Data solely on the customer’s behalf and under the customer’s instructions, as set forth in the applicable service agreement. Individuals whose information may appear in Customer Operational Data (for example, persons incidentally captured in drone video) should direct privacy inquiries to the customer organization, which is responsible for its own privacy, retention, and disclosure policies, including compliance with applicable public records and law enforcement regulations.

3. Information We Collect

3.1 Information You Provide to Us

• Account and profile information: first and last name, email address, phone number, job title or role, organization name, and account credentials.
• License and certification documents: where a customer chooses to upload them, pilot licenses or certifications (for example, FAA Part 107 certificates) associated with user profiles.
• Billing and contract information: business contact details and billing information required to administer subscriptions and licenses.
• Communications: information you provide when you contact our support team, participate in training or demonstrations, or otherwise communicate with us.

3.2 Information Collected Automatically

• Usage and log data: IP address, browser type, device identifiers, operating system, pages viewed, features used, timestamps, and actions taken within the platform (audit logs).
• Cookies and similar technologies: we use cookies and similar technologies to operate the Services, maintain user sessions, remember preferences, and understand how the Services are used. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Services.

3.3 Customer Operational Data (Processed on Behalf of Our Customers)

• Flight telemetry: GPS coordinates, altitude, speed, heading, battery status, and device health data.
• Video and imagery: live and recorded video and photographs captured by drones and docking stations during customer operations. This content may incidentally include images of individuals, vehicles, or property.
• Mission and operational records: mission plans, schedules, flight logs, checklists, airspace zone definitions (including no-fly and restricted zones), and device configuration data.

Votix does not sell Customer Operational Data and does not use it for its own independent purposes. We process Customer Operational Data only to provide, maintain, secure, support, and improve the Services in accordance with our customer agreements.

4. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and secure the Services;
• Create and administer user accounts, roles, and licenses;
• Provide customer support and training, and respond to inquiries;
• Monitor the performance, availability, and integrity of the platform, and detect, prevent, and investigate security incidents, fraud, or misuse;
• Improve and develop the Services, including troubleshooting, quality assurance, and product analytics;
• Comply with legal obligations and enforce our agreements; and
• Send administrative communications (such as service updates and security notices) and, where permitted, communications about Votix products and services, which you may opt out of at any time.

5. How We Share Information

We do not sell personal information, and we do not share personal information for cross-context behavioral or targeted advertising. We share information only in the following circumstances:

• Service providers (sub-processors): we use a limited number of third-party providers to host and operate the Services, including Amazon Web Services (AWS), which provides the cloud infrastructure and storage on which the platform runs. Service providers are bound by contractual obligations to protect information and to use it only to provide services to Votix. A current list of sub-processors is available upon request at the contact address below.
• Within the customer organization: information about users and operations is visible to authorized users of the same customer organization according to the roles and permissions configured by the customer’s administrators.
• Legal requirements: we may disclose information if required to do so by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of Votix, our customers, or others. Where legally permitted, we will notify the affected customer before disclosing Customer Operational Data in response to such a request.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of the transaction, subject to this Privacy Policy or equivalent protections.

6. Data Location

The Services are hosted on Amazon Web Services (AWS) infrastructure located in the United States. Customer Operational Data for United States government customers is stored and processed within the United States.

Votix personnel are located in the United States, Colombia, and Canada. Access to sensitive customer information is restricted to authorized personnel based in the United States, in accordance with our access control policies and the principle of least privilege.

7. Data Retention

• Account information is retained for as long as the account remains active and thereafter as necessary to comply with our legal, accounting, and contractual obligations, resolve disputes, and enforce our agreements.
• Customer Operational Data is retained in accordance with the customer’s configuration and the applicable service agreement. Customers control the retention and deletion of their operational data, including through customer-configured storage where applicable. Upon termination of the service agreement, Customer Operational Data is deleted or returned to the customer in accordance with the agreement.
• Audit and security logs are retained for extended periods — including indefinitely where necessary — to support security monitoring, incident investigation, operational traceability, and compliance obligations.

8. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, aligned with the NIST Cybersecurity Framework. These safeguards include role-based access control under the principle of least privilege; encryption of data in transit; protection of data at rest using the encryption capabilities of our cloud infrastructure; centralized logging and monitoring of platform activity; personnel background screening; mandatory security awareness training upon hire and periodically thereafter; and formal offboarding procedures that promptly revoke system access upon separation.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security; however, we work continuously to protect the information entrusted to us and to detect and respond to security events. If we become aware of a security incident affecting personal information, we will notify affected customers and regulators as required by applicable law.

9. Your Privacy Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, such as the right to access, correct, delete, or obtain a copy of it, and the right to opt out of marketing communications. Residents of U.S. states with comprehensive privacy laws may exercise the rights provided by those laws by contacting us as described below; we do not sell personal information or share it for targeted advertising, and we do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

• Platform users: because most user accounts are created and managed by a customer organization, requests regarding account data may be fulfilled in coordination with, or directed to, your organization’s administrator.
• Marketing communications: you may opt out at any time by using the unsubscribe mechanism included in the communication or by contacting us directly.

To exercise your rights or make a privacy inquiry, contact us at support@votix.com. We will verify your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.

10. Children’s Privacy

The Services are intended for use by professional and governmental organizations and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify customers and users through the Services or by other reasonable means, and we will update the Effective Date above. Your continued use of the Services after the effective date of the revised policy constitutes acceptance of the changes.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Votix
Email: support@votix.com
Website: www.votix.com