Privacy Policy

1.Information We Collect

When you use the JATCA platform, we may collect the following types of personal information:

• Personal Information: Name, email address, phone number, job title, facility assignment, department, license number, professional certifications, and profile photo.
• Usage Data: Pages visited, features used, search queries, AI assistant interactions, time spent on pages, and browser type.
• Device Information: Browser type, operating system, device type, push notification subscription data, and IP address.

2.How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To operate and maintain the platform, manage your account, process membership, and deliver personalised content.
• Communication: To send push notifications about announcements and support case updates, and to deliver platform notifications based on your preferences.
• Safety and Compliance: To moderate community discussions, enforce acceptable use policies, maintain audit logs, and comply with regulatory requirements.

3.Data Storage and Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption: All data is transmitted over HTTPS with TLS encryption. Passwords are managed by our authentication provider and are never stored on our servers.
• Access Controls: Role-based access control (RBAC) with ten defined roles ensures members only access data appropriate to their position. Admin actions are logged in an immutable audit trail.
• Data Retention: Active membership data is retained for the duration of membership plus one year following account deactivation. Anonymised data may be retained for statistical purposes.

4.Your Rights Under Jamaica DPA

Under the Jamaica Data Protection Act, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you via Profile > Export My Data.
• Right to Rectification: You may update or correct your personal information at any time through your profile settings.
• Right to Erasure: You may request account deactivation, which anonymises your profile data while preserving community contributions.
• Right to Data Portability: You may export your personal data in a machine-readable JSON format.
• Right to Object: You may withdraw consent at any time by contacting us or through your account settings.

5.Cookies and Analytics

The JATCA platform uses the following types of cookies:

• Session Cookies: Essential cookies for authentication and maintaining your signed-in state. These are strictly necessary for the platform to function.
• Analytics: We may collect anonymised usage statistics to improve platform performance and user experience. No personal data is shared with analytics providers.
• Preferences: Local storage is used to save your notification preferences, theme settings, and other customisations.

6.Third-Party Services

We use the following third-party services to operate the platform. Each processes data under their own privacy policies:

• Clerk (Authentication): Manages user authentication, sign-in, and session management. Processes email addresses and authentication credentials.
• Convex (Backend Infrastructure): Provides the database and serverless backend. Stores application data including profiles, documents, and messages.
• OpenAI (AI Assistant): Powers the AI knowledge assistant. User questions are sent to OpenAI for processing. No personal data beyond the query content is shared. Responses are grounded in approved knowledge base documents only.

7.Children's Privacy

The JATCA platform is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information.

8.Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through a platform announcement and update the "Last updated" date at the top of this page. Your continued use of the platform after changes constitutes acceptance of the revised policy.

9.Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Email: contact@jatca.org
• Address: Jamaica Air Traffic Controllers Association, Kingston, Jamaica