CAP10INSURANCE is a site of the CAP10AVIATION ecosystem. This page describes the data we collect, why, how long we keep it, and how you stay in control of it.

Who processes your data

The data controller is CAP10AVIATION, Dubai, United Arab Emirates. Any request about your data goes through the contact form.

What we collect

We only collect what you send us willingly:

Account: first name, last name, business email address, company, job title, country, phone if you provide it, and a password stored as a hash, never in clear text.
Risk brief: organisation, asset or activity, segment, operating regions, renewal date and any detail you add.
Listed facility: type of organisation, aircraft and engines supported, sites and areas served.
Technical origin: page and button of origin, campaign parameters, language, time stamp, and a truncated fingerprint of your IP address used only to rate limit automated submissions.

We buy no database and we run no advertising profiling.

Why

Create and maintain your CAP10 account, and let you reach it.
Keep the need or the facility you recorded, so we do not ask again at opening.
Inform you when CAP10INSURANCE opens and, if you agreed to it, about the other CAP10 platforms.
Answer your messages and qualify your request.
Protect the site against automated submissions and abuse.

Who has access

Your data is processed by the CAP10AVIATION team and by the technical providers strictly required to run the service:

Vercel, hosting of the site and of the server functions.
Supabase, database of the vertical and account management.
The internal CAP10AVIATION CRM, where your details join those of the other platforms of the ecosystem.
Google Fonts, for font loading. Your browser then contacts Google servers, which receive your IP address.

Your data is not sold, not rented, and not passed to third parties for commercial purposes. A maintenance need is never published nor made indexable.

How long

Account data is kept for as long as the account exists. Contact requests are kept for three years from the last exchange. Anti-abuse technical logs are kept for twelve months at most. You can ask for your account to be deleted at any time, which deletes the associated data.

Your rights

You can ask for access to your data, its correction, its deletion, the restriction of its processing, its portability, and object to its use. You can withdraw your consent to communications at any time, without affecting processing already carried out. Write to us through the contact form, we answer within thirty days.

Security

Passwords are never stored in clear text and are never visible to the team.
No secret key exists in your browser. Calls to the database go only through the CAP10INSURANCE server functions.
Exposed tables are protected by row level security: an account can only read its own data.
Exchanges are encrypted in transit, and the site applies a strict content security policy.
Forms are protected by an invisible decoy, a form timing measure and server side rate limiting.

No system is infallible. Should an incident affect your data, we inform the people concerned as quickly as possible.

Changes

This policy will evolve with the platform. The version date at the top of the page shows the last update. A significant change is notified to account holders.

Privacy policy