Privacy Policy

1. Data Sovereignty

At Otarosta, we believe your flight data is yours. We only process your airline rosters to generate calendar files and destination patches. We do not sell your personal data to third parties.

2. Information We Collect

When you upload a roster, we extract flight numbers, times, and destinations. This data is stored securely in our database to build your "Passport" profile. We also collect your email address for account authentication.

We also keep a record of your acceptance of our Terms of Service — the version accepted, the time, and the IP address and browser the acceptance came from. This is kept as proof of agreement and is retained for as long as your account exists and for a reasonable period afterwards.

3. Legal Basis and Your Rights

We process your personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) to the extent it applies. We process it to provide the Service to you, and for no other commercial purpose — we do not sell it, and we do not use it for advertising.

You may ask us to access, correct, or delete your personal data at any time. Our infrastructure providers may store data outside Malaysia; by using the Service you consent to that transfer.

If a roster you upload contains other crew members' names because it was issued to you that way, you remain responsible for not redistributing their details through the sharing features.

4. Cookies & Tracking

We use first-party, privacy-friendly analytics — anonymous daily counters with no user identifiers and no personal data attached. We do not use cross-site tracking cookies or advertising pixels.

The OFP brief counts how it is used — which parts are opened, whether an upload could be read, and on which fleet and kind of screen — as the same anonymous daily counters. Nothing from your release is sent for this: no flight, route, file name or figure. If you are signed in, we also keep one small record on your account of the days you opened a brief and how many briefs and PDFs you made, so we can tell how many pilots use it. It is deleted with your account.

We use Sentry, a third-party error-monitoring service, to learn when the app breaks. When an error happens, Sentry receives the technical details of that error, your browser type, the page you were on and, for that session only, a recording of the screen with text masked. It does not receive your roster content. Ordinary sessions without an error are not recorded.

When a roster upload fails, we keep a short note of it on your account — why it failed, the file type and size, and the error message with personal details removed — so we can help you get it working. We never keep the file or its name. The note is deleted after 90 days, or with your account.

To check that allowance estimates are right, the operator of Otarosta can see, per account, the estimate worked out from your roster and any payslip figures you enter, alongside typical figures for your rank. A summary of each month is kept for this until you delete your account.

5. Notifications and Sharing

If you turn on push notifications, we store the subscription your browser gives us so we can deliver reminders to that device. If you leave notifications on, we email reminders and monthly statements to the address on your account, sent through Resend, a third-party email service. Either can be turned off in your profile.

Some features create a private link — a family view of your roster, a calendar feed, a crew profile card. Anyone holding that link can see what it shows, so treat it as you would a password. You can revoke a link from your profile at any time.

On Social you can add crew friends. A friendship only starts when you both say yes. A friend sees where you are now and your roster for the rest of the month and the next one: flights, layover cities, days off, standby and leave. They never see your hotel, your notes, the crew on your flights, your contact details, or why a duty was dropped — a sick day looks the same as leave. Either of you can remove the other at any time, which stops it for both of you, and a friendship is deleted with your account. Your invite link works like the links above: anyone who has it can ask to be your friend, and you can make a new one at any time.

6. Data Deletion

To delete your account and all associated flight data, email hello@otarosta.com from your registered address and we'll remove everything. This action cannot be undone.

Deletion removes your content from the live Service; residual copies in routine backups are purged in the ordinary course. We retain the record of your Terms acceptance described above, since deleting the proof of an agreement on request would defeat its purpose.