Privacy Policy

1. Data Sovereignty

At Otarosta, we believe your flight data is yours. We only process your airline rosters to generate calendar files and destination patches. We do not sell your personal data to third parties.

2. Information We Collect

When you upload a roster, we extract flight numbers, times, and destinations. This data is stored securely in our database to build your "Passport" profile. We also collect your email address for account authentication.

We also keep a record of your acceptance of our Terms of Service — the version accepted, the time, and the IP address and browser the acceptance came from. This is kept as proof of agreement and is retained for as long as your account exists and for a reasonable period afterwards.

3. Legal Basis and Your Rights

We process your personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) to the extent it applies. We process it to provide the Service to you, and for no other commercial purpose — we do not sell it, and we do not use it for advertising.

You may ask us to access, correct, or delete your personal data at any time. Our infrastructure providers may store data outside Malaysia; by using the Service you consent to that transfer.

If a roster you upload contains other crew members' names because it was issued to you that way, you remain responsible for not redistributing their details through the sharing features.

4. Cookies & Tracking

We use first-party, privacy-friendly analytics — anonymous daily counters with no user identifiers and no personal data attached. We do not use cross-site tracking cookies or advertising pixels.

5. Data Deletion

To delete your account and all associated flight data, email hello@otarosta.comfrom your registered address and we'll remove everything. This action cannot be undone.

Deletion removes your content from the live Service; residual copies in routine backups are purged in the ordinary course. We retain the record of your Terms acceptance described above, since deleting the proof of an agreement on request would defeat its purpose.