Privacy Policy

Last updated: October 20, 2026  |  Existing customer accounts must accept this version by November 23, 2026

1. Who We Are

The DroneCommand^™ platform is operated by Drone Command, LLC, an Iowa limited liability company ("Drone Command," "we," "us," or "our"). DroneCommand^™ is a trademark of Drone Command, LLC. Versions of this Privacy Policy in effect before October 20, 2026 identified Country Road Drone Services, LLC d/b/a DroneCommand as the operator. For an existing customer account, this version applies once an owner or administrator of the account accepts it; until then, the version the account last accepted continues to apply. Country Road Drone Services, LLC is a separate company that uses the platform. We are an agricultural drone operations management software company based in Smithland, Iowa. We operate the DroneCommand platform at dronecommand.online and provide spray operations management software to agricultural drone operators nationwide.

Earlier versions. The version of this Privacy Policy that applied before October 20, 2026 remains available at www.dronecommand.online/legal/archive/2026-09-08/privacy.html.

2. What This Policy Covers

This Privacy Policy applies to:

• Website and promotion-page visitors: anyone who visits our website, opens one of our or a dealer's promotion pages, or contacts us through our website
• Platform subscribers and their users: businesses that buy and use the DroneCommand software platform, and the people they give access to, such as pilots and staff
• Dealers: businesses taking part in our dealer program, and the people who use our dealer portal for them
• Our subscribers' customers: people whose information a subscriber records in the platform, or who use a subscriber's invoice portal. For their information we act as a service provider to the subscriber (see Section 3b).

The types and volume of information collected differ between these groups, as described below.

3. Information We Collect

3a. Website Visitors

When you visit our website without creating an account, we collect the information you provide, such as:

• Name, email address, and phone number (if you submit a contact or trial request form)
• Operation size, acreage, and team size (if provided in a trial or inquiry form)
• General information about your operation or service needs

On promotion pages we also record how the page is used and save what you type as you type it; see "Promotion pages" below.

We may also receive information about you from a dealer. A dealer may give us the business name, contact person, phone number and email of a business it is introducing to us, and we may use them to send that business a signup link.

If you begin the checkout process but do not complete your purchase, we may retain your name, email address, and selected plan to follow up on your inquiry.

Promotion pages. When you open one of our or a dealer's promotion pages, we record each visit (whether you came from a QR code or a link, a general device type such as iPhone or Windows, and how long you stayed) and save what you type into the signup form as you type it, before you submit. We never save your password. We keep this so that the dealer running the promotion, or we, can help you finish signing up. The dealer running the promotion can see what you typed and how far you got. A dealer never sees your password, and does not see you at all if you were not eligible for the promotion. We do not share this information with anyone else for marketing.

This website does not use advertising pixels or third-party analytics tools. Our promotion pages set our own cookie, which recognizes a returning browser on that promotion's page and records how the page is used and what is typed into its signup form (never a password), so that the promotion's dealer can follow up; Section 7 describes it. Infrastructure providers such as font delivery services may receive standard technical data such as IP addresses as a byproduct of page loading.

3b. Platform Subscribers

When you use the DroneCommand platform, we collect substantially more information to operate the service. This includes:

Account and identity information:

• Full name, email address, phone number, and mailing address
• Username and encrypted password
• Profile photo (if uploaded)
• Role and permission level within your organization

Business operational data:

• Customer names, addresses, and contact information
• Field names, GPS polygon boundaries, and centroid coordinates
• Reverse-geocoded field addresses, counties, and states
• Spray job records including dates, times, acreage, and completion status
• Photographs uploaded during spray jobs, which may include GPS coordinates embedded in image metadata
• Chemical product names, EPA registration numbers, application rates, and total amounts applied
• Target pest, crop, and treated site information
• Weather conditions recorded at time of application
• Mix formulas, batch sizes, and inventory transactions
• Customer invoices, billing rates, and payment records

Personnel and credential data:

• Pilot names and contact information
• FAA Part 107 certificate numbers
• State pesticide applicator license numbers and expiration dates
• Other professional credentials and certifications uploaded to the platform
• Time clock records, hours worked, overtime, and break data
• Per-pilot pay rates, commission rates, commission structures, pay rate history, and deferred incentive agreement terms (retained for a minimum of four years following termination of the employment or contractor relationship, as required by applicable federal and state wage/hour record-keeping laws)
• Payroll export data

Platform subscribers are responsible for obtaining any legally required consent from their employees and contractors prior to using the DroneCommand platform to track, record, or process their location data, flight paths, time records, or other personal information. Drone Command processes this data as a service provider acting on the subscriber's instructions; the subscriber is the data controller for employee and contractor personal data under applicable employment privacy laws. We act the same way, as a service provider to the subscriber, for information about the subscriber's own customers that the subscriber records in the platform or that those customers enter in the subscriber's invoice portal. If your jurisdiction requires employee notice or consent for geolocation monitoring (including GPS flight path logging), you are responsible for compliance. We recommend consulting legal counsel regarding applicable employee monitoring laws in your state and the states where your pilots operate.

Drone and aircraft data:

• Aircraft names, manufacturer, model, and serial numbers
• FAA N-numbers (registration numbers)
• FAA Remote ID serial numbers
• Flight log data imported from DJI or XAG systems, including flight paths, timestamps, spray amounts, and operational parameters

Payment information:

• Billing name, address, and contact details
• Payment card and bank account information — collected and processed directly by Stripe, Inc. We do not store full card or bank account numbers on our systems; we may keep the bank's name and the last four digits of an account.
• Subscription plan, billing cycle, and transaction history

Technical and usage data:

• IP address and approximate geographic location
• Browser type and version
• Pages accessed and features used within the platform
• Session timestamps and activity logs
• Error logs and performance data
• If you use a DroneCommand mobile app: your device's push notification token and the app version, used to send you notifications. We do not sell this information or share it for any other purpose.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the DroneCommand platform
• Process subscription payments and manage your account
• Generate spray records, reports, invoices, and operational documents
• Calculate acre overage charges based on acres recorded in your spray records
• Send transactional communications (account confirmations, invoices, expiration alerts, support responses)
• Respond to inquiries and provide customer support
• Improve platform features and fix bugs using anonymized, aggregated usage data
• Detect and prevent fraudulent or unauthorized access
• Meet applicable legal obligations

We may also use anonymized, aggregated, non-identifiable data derived from platform usage across all subscribers for product improvement, analytics, and research purposes. This aggregate data cannot be used to identify you or your organization.

We do not use your data for advertising or sell it to third parties.

5. Third-Party Service Providers

We work with the following categories of third-party services. Service providers that process data on our behalf in order to operate the platform (payment processing, email and SMS delivery, the AI help assistant, and cloud hosting) are contractually required to protect your data and may only use it for the purposes we specify. Other services the platform connects to, such as map tile providers and USGS services, and integrations you choose to use (such as DriftWatch and Iowa BeeCheck, 1800wxbrief.com, DJI and XAG, and QuickBooks), receive data under their own terms and privacy policies.

• Payment processing: Stripe, Inc. — processes payments by card and bank account and stores that payment information. Subject to Stripe's own Privacy Policy.
• Email delivery: Twilio SendGrid (Twilio, Inc.) is used to send platform notifications, reports, and invoices. Email content may include spray records and operational data. Our emails record when they are opened and when a link in them is clicked, so that we can tell whether they were delivered and read.
• SMS delivery (Twilio): If SMS notifications are enabled for your account, phone numbers and notification content are transmitted to Twilio, Inc. for delivery. Subject to Twilio's Privacy Policy.
• AI help assistant: If you use the help chat in the platform, your question and the content of the page you are viewing are sent to Anthropic, PBC to generate an answer.
• Mapping and geospatial data: Map tile providers and USGS services are used to display field maps and retrieve elevation data. Field boundary coordinates may be transmitted to these services to render maps.
• DriftWatch and Iowa BeeCheck: Field location data (coordinates) is transmitted to these services to retrieve nearby sensitive site information. Subject to their respective privacy policies.
• 1800wxbrief.com (Leidos Flight Service): If you use the NOTAM filing feature or the weather briefing integration, operational data including flight location, altitude, and time parameters is submitted to 1800wxbrief.com, operated by Leidos Flight Service, using credentials you provide. Subject to its privacy policy.
• DJI and XAG: If you use the flight log import feature, flight data is retrieved from DJI or XAG cloud systems using credentials you provide. We do not control the data practices of DJI or XAG.
• QuickBooks / Intuit: If you enable the QuickBooks integration, customer and invoice data is transmitted to Intuit's systems. Subject to Intuit's Privacy Policy. You may disconnect this integration at any time.
• Cloud hosting: Our platform runs on cloud infrastructure. Your data is stored on servers located in the United States.

Once your data has been transmitted to a third-party service provider pursuant to an integration you have authorized, that provider is primarily responsible for the security of your data within its own systems. We are not liable for data breaches, outages, unauthorized disclosures, or policy changes that occur within third-party systems, except to the extent caused by our own negligent configuration of the integration, failure to transmit data using industry-standard encryption, or selection of a provider with known security deficiencies of which we were aware at the time of integration. If a third-party integration experiences a data breach affecting your information, we will notify you as required by applicable law and cooperate with the provider's incident response.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• With your authorization: When you explicitly enable a third-party integration (such as QuickBooks) or instruct us to share records with a third party
• Within your organization: Users within the same subscriber account may view data according to the role-based permission system you configure. A subscriber may also give its own customers or co-ops access to their portion of the data, including through a download link that works for anyone who has it until it expires or is revoked.
• Dealers: If you became a customer through one of our dealers, that dealer can see information about your account in its dealer portal, such as your account name, the acres you record, your plan, what you pay us, your renewal date and the commission it earns, and may also see your contact name, town and telephone number. A dealer may be told when a charge for acre overage or a prepaid acre block fails. A dealer never sees your fields, spray records or your own customers. A dealer who recruited your dealer does not see your details.
• Country Road Drone Services, LLC: Country Road Drone Services, LLC is a separate company that uses the platform as a subscriber, on the same terms as any other subscriber. It has no access through the platform to any other subscriber's data. Where a person works for both Drone Command and Country Road Drone Services, LLC, they may access other subscribers' data only as Drone Command administrative staff, for the purposes stated under "Drone Command administrative access", and never for Country Road Drone Services, LLC's business.
• Service providers: As described in Section 5, with vendors who process data solely to operate the platform on our behalf
• Legal requirements: When required by law, court order, or government authority
• Protection of rights: When necessary to protect the safety, rights, or property of Drone Command, our users, or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case you will be notified before your data is transferred and becomes subject to a different privacy policy
• Drone Command administrative access: Drone Command's officers, employees and authorized agents ("administrative staff") can access subscriber data. They do so only to provide customer support, troubleshoot, investigate security issues, or meet legal obligations, and for no other purpose. The scope of "administrative staff" is the same as the indemnified parties in our Terms of Service (Section 13) and EULA (Section 12).

7. Cookies and Session Data

The DroneCommand marketing website does not use advertising cookies or tracking pixels. Emails we send record when they are opened and when a link in them is clicked, as described in Section 5.

Promotion pages set one cookie of our own, named "dcpv", which is used only on that promotion's page. It holds a random value that lets us recognize a returning browser on that page, and it lasts until the promotion ends, plus one day. We store only a scrambled (hashed) form of it. On promotion pages we do not record your IP address, and we do not keep your browser's identifying details; we use them once to note a general device type.

The DroneCommand platform uses strictly necessary session cookies to authenticate your login and maintain your session while you use the software. These cookies are essential for the platform to function and cannot be disabled while using the service. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies within the platform.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Specifically:

• Account data is retained for the duration of your active subscription and for a minimum of 30 days following cancellation to allow you to export your data.
• Spray application records are retained for a minimum of five years from the date of application, even after account cancellation, to support operator record-keeping needs. Where a legal hold is in effect under Terms of Service Section 11, a subpoena or court order requires retention, or a regulatory investigation is ongoing, records are kept until the matter is fully resolved.
• Payment records are retained as required by applicable tax and financial reporting obligations.
• Pilot and operator personal data (flight logs, time records, and credentials) tied to individuals who are not account holders is retained for the duration of the subscriber's active account. Where it forms part of a spray application record or a pay record, it is kept for the retention periods for those records (for spray application records, above; for pay records, the four-year period stated in Section 3b), and longer where the law or a legal hold requires it.
• Contact and inquiry records from the marketing website are retained for as long as reasonably necessary to respond to and follow up on your inquiry.
• Promotion-page information: kept until you ask us to delete it.

9. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted data transmission (HTTPS/TLS), access controls, and tenant data isolation. Each subscriber organization's data is logically separated from other organizations within the platform.

No system is perfectly secure. We cannot guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account.

10. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users by email without unreasonable delay and in no case later than 30 days following our discovery of the breach, or within the timeframe required by applicable state law if shorter. "Discovery" means the date we have reasonable grounds to believe that unauthorized access to, or disclosure of, personal information has occurred — including through anomalous access patterns, third-party reports, or security monitoring alerts, whether or not the breach has been fully confirmed. Notification will describe the nature of the breach, the categories of data affected, the approximate date of the breach, the steps we are taking to address it, and any recommended actions for you. Where the law of an affected resident's state requires notification sooner than 30 days, we will comply with that shorter requirement. Where a breach affects California residents and involves unencrypted or unredacted personal information, we will provide notification to the California Attorney General as required by California Civil Code §1798.82.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to retention requirements described in Section 8
• Portability: Export your operational data (spray records, field data, etc.) using the export features built into the platform
• Objection: Object to certain processing of your personal information

If you used a promotion page and have no account, you can ask us to delete what was recorded by emailing [email protected]. We will delete your visit history, what you typed and any notes a dealer made about you. If you paid for a subscription, the payment record is kept, but the dealer no longer sees it as you.

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days of receiving your request. Where reasonably necessary, we may extend this period by an additional 45 days and will notify you of the extension before the initial period expires.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including:

• Right to know: The categories and specific pieces of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it
• Right to delete: Request deletion of your personal information, subject to legal retention requirements. Note: spray application records are kept for at least five years from the date of application and are not deleted before then. Other personal information will be deleted on request unless we must keep it, for example as a payment record.
• Right to correct: Request correction of inaccurate personal information we hold about you
• Right to limit use of sensitive personal information: Request that we limit our use of sensitive personal information (such as pilot license numbers, financial data, and precise geolocation data) to what is necessary to provide the service
• Right to opt out of sale: We do not sell personal information
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights

Categories of personal information we collect include: identifiers (name, email, phone, address, IP address); professional or employment information (credentials, license numbers, pay rates); financial information (payment records, commission data); geolocation data (GPS field coordinates); and other commercial information (operational records, spray records). We collect this information to provide, operate, and improve the DroneCommand platform as described in this policy. To submit a CCPA/CPRA request, contact us at [email protected].

12. Children's Privacy

The DroneCommand platform is intended for use by adults operating agricultural businesses in the United States. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have inadvertently collected information from a minor, we will delete it within 30 days of discovery and notify the account holder. If you are located outside the United States, the platform is not intended for your use and we do not direct our services to non-US residents; by using the platform outside the US, you acknowledge that your data will be processed in the United States under US law.

13. Dispute Resolution

Any dispute arising from or related to this Privacy Policy — including claims about how we collect, use, share, or retain your personal information — is subject to the Dispute Resolution provisions in our Terms of Service (Section 16) and End-User License Agreement (Section 15), including binding arbitration, class action waiver, and opt-out rights. Please read those provisions before using the platform.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will tell the owners and administrators of each customer account by email, and show a notice in the platform, at least 30 days before the updated policy must be accepted. An owner or administrator may accept the updated policy for the account at any time during that period. That acceptance is the account's consent to the updated policy, including for information we already hold, and the updated policy applies to the account from then. Until then, the version the account last accepted continues to apply. If the updated policy has not been accepted by the date stated in the notice, access to the platform for every user in the account is paused until an owner or administrator accepts it. While access is paused, the account can still manage or cancel its subscription, contact support, and view and export its spray application records. If you do not agree, you may cancel your subscription and ask us to delete your personal information under Section 11, subject to the retention periods in Section 8.

15. Contact Us

For questions about this Privacy Policy or how we handle your information:

• Company: Drone Command, LLC
• Address: 3308 330th St, Smithland, IA 51056
• Phone: 712-420-0871
• Email: [email protected]

← Back to DroneCommand