Privacy Notice

Airwayz Drones Ltd. | Last Updated: September 10, 2026

1. About this Privacy Notice

This Privacy Notice explains what personal data we collect about you through our website at www.airwayz.co (the "Website"), how we use it, why we use it, and how you can control the data processing. This Notice applies to the Website only and does not cover our mobile application, which is subject to a separate privacy notice.

2. The Basics

2.1 Who We Are

Airwayz Drones Ltd. is a defense-technology company that develops OVERWATCH, a defense-grade airspace command and control (C2) platform. OVERWATCH enables national security agencies, critical infrastructure operators, and authorized civil authorities to govern, command, and control low-altitude airspace in real time - providing the capability to sense, identify, decide, and intervene across complex and contested airspace environments. Airwayz is ISO 27001 certified and SAPIENT certified by NATO.

Our principal offices are located at 3 Hanechoshet St., Tel Aviv, Israel (Registration No. 516010386).

We also operate through affiliated entities: Airwayz Drones LLC, incorporated in the State of Massachusetts, USA (81 Kendall Road, Lexington, MA 02421), and Airwayz B.V., incorporated in the Netherlands (Gondel 1, 1186 MJ Amstelveen). contact@airwayz.co.

2.2 Our Role

Under applicable data protection law, including the GDPR, we act as a "controller" - meaning we determine the purposes and means of processing your personal data.

2.3 Definitions

  • "Website" - our website at www.airwayz.co.
  • "Personal Data" - information that identifies you directly or indirectly, including unique identifiers such as IP addresses or cookie IDs.
  • "You" / "User" - any visitor to our Website.

2.4 Legal Bases for Processing

Where required by applicable law, we only collect and process personal data where we have a lawful basis. The bases we rely on include:

  • Performance of a contract: processing is necessary to respond to your request.
  • Legitimate interests: we have a legitimate business interest that does not override your privacy rights.
  • Legal obligation: processing is required by law.
  • Consent: where required (e.g., for non-essential cookies), we will seek your consent.

3. Personal Data We Collect, How We Use It, and Why

You have no legal obligation to provide us with personal data, but if you do not, we may be unable to respond to your inquiry.

3.1 Contact Form and Demo Requests

Data Collected: Name, company name, job title, email address, sector/industry, and the content of your message, as submitted through our 'Contact Us' or 'Request a Demo' forms.

How We Use It: To respond to your inquiry and manage our potential commercial relationship with you.

Legal Basis: Legitimate interests (managing business inquiries and potential client relationships). We do not use contact form submissions to send unsolicited marketing communications.

3.2 Analytics and Activity Data

Data Collected: IP address (anonymized where required), device type, browser type, referring URL, pages visited, session duration, and general geographic location. This data is processed in aggregated, non-personally-identifiable form.

How We Use It: To understand how visitors use our Website, to maintain and improve the Website, and to measure the effectiveness of our marketing campaigns. We do not use this data to identify individual users or for targeted advertising.

Tools Used: Google Analytics, HubSpot Analytics.

Legal Basis: Legitimate interests in improving our Website; consent where required by applicable law for non-essential analytics cookies.

4. Job Applicants

Data Collected: Name, email address, phone number, resume/CV, LinkedIn profile URL, personal website, cover letter, portfolio, and any other information you provide as part of your application.

How We Use It: To evaluate your application, communicate with you during the recruitment process, and manage and improve our hiring campaigns.

Legal Basis: Performance of a pre-contractual relationship (candidate assessment) and legitimate interests (recruitment management).

5. Visitors to Our Social Media Pages

We maintain pages on social media platforms including LinkedIn. When you interact with our social media pages, those platforms collect data about you pursuant to their own privacy policies. We may receive aggregated, anonymized analytics from those platforms about engagement with our pages. We encourage you to review the relevant platform's privacy policy.

6. Sharing the Personal Data We Collect

We do not sell your personal data. We share it only as described below.

6.1 Service Providers

We work with service providers who process personal data on our behalf. All are bound by data processing agreements and confidentiality obligations, and may only use personal data as we direct.

Type of ServiceProviderPersonal Data Shared
Cloud Computing
Server hosting and data storage.
VercelAll personal data we collect is stored on third-party cloud servers.
CRM / Marketing Automation
Contact management and campaign analytics.
HubSpotName, company, email address, sector, and content of your message.
Website Analytics
Understanding website usage.
Google Analytics, HubSpot AnalyticsAnonymized IP address, device data, browsing behavior (aggregated).
HR / Recruitment
Processing job applications.
Linkedin JobsJob application data (name, email, resume, etc.).

6.2 Corporate Transactions

If Airwayz is involved in a merger, acquisition, or similar corporate transaction, your personal data may be shared with the relevant parties. Your data will remain subject to this Privacy Notice.

6.3 Legal Disclosures

We may disclose personal data to authorities or law enforcement where required by law, court order, or regulatory obligation, or to protect the rights, property, or safety of Airwayz or others.

7. International Transfers

Some of our service providers are located outside your country. All international transfers are carried out in accordance with applicable law.

If you are in the EEA:

  • Transfers to Israel are covered by the European Commission's adequacy decision.
  • Transfers to US entities certified under the EU-U.S. Data Privacy Framework are covered by the relevant adequacy decision.
  • For other transfers, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission and implement additional security measures as appropriate.

contact@airwayz.co for more information about our transfer safeguards.

8. Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Technical Measures: Secure servers, firewalls, antivirus protection. Data is encrypted in transit and at rest using TLS 1.3, X25519, and AES_128_GCM.
  • Access Control: Access to personal data is limited to authorized personnel on a need-to-know basis. Access rights are reviewed regularly and revoked upon termination.
  • Internal Policies: We maintain and regularly update information security and privacy policies.
  • Personnel: Employees sign non-disclosure agreements in accordance with applicable law.
  • ISO 27001: We are certified as compliant with ISO 27001 (Information Security Management).
  • Backups: Databases are backed up and verified regularly; backups are encrypted and stored securely.

contact@airwayz.co.

9. Your Rights

contact@airwayz.co. We may ask you to verify your identity.

9.1 EU/EEA Users - GDPR Rights

  • Right of Access (Art. 15): Request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
  • Right to Erasure (Art. 17): Request deletion of your personal data in certain circumstances.
  • Right to Restrict Processing (Art. 18): Request that we limit our processing of your data.
  • Right to Data Portability (Art. 20): Request your data in a machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
  • Withdrawal of Consent: Withdraw consent at any time, without affecting prior processing.
  • Right to Lodge a Complaint: Lodge a complaint with the Autoriteit Persoonsgegevens (Netherlands) or your local DPA.

9.2 California Users - CCPA/CPRA Rights

If you are a California resident:

  • Right to Know: Request details about the personal data we collect, use, and share.
  • Right to Delete: Request deletion of personal data we hold, subject to exceptions.
  • Right to Correct: Request correction of inaccurate personal data.
  • Right to Opt-Out: We do not sell or share personal data for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

9.3 Israeli Users - Privacy Protection Law

If you are in Israel, you have rights under the Israeli Privacy Protection Law (5741-1981), including the right to review, correct, and in certain circumstances delete personal data we hold about you. Contact us at contact@airwayz.co.

10. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

Category of DataLegal Basis for RetentionRetention PeriodRationale
Contact Form / Demo Request submissionsLegitimate interests3 years from last contactReflects typical B2B sales cycles and applicable limitation periods.
Website analytics data (Google Analytics, HubSpot)Legitimate interests13 monthsStandard analytics retention period; aligned with GDPR guidelines.
Job applications - unsuccessful candidatesLegitimate interests / legal obligation1 year from date of rejectionMinimises retention while allowing for reconsideration.
Job applications - hired employeesLegal obligationDuration of employment + 7 yearsCompliance with employment, tax, and statutory obligations.

Note on HubSpot: HubSpot does not apply automatic data deletion by default. We will configure automated deletion workflows in HubSpot to enforce the retention periods above, as part of our ongoing compliance program. Contact us at contact@airwayz.co for details.

11. Cookies and Similar Technologies

For the full details, see our Cookies Policy.

In summary:

  • We use necessary cookies to enable basic Website functionality.
  • We use analytics cookies (Google Analytics, HubSpot) to understand Website usage in aggregated form.
  • We do not use advertising or behavioural tracking cookies.
  • You can manage cookie preferences via the consent banner displayed on your first visit, or through your browser settings.

12. Third-Party Services

Our Website may contain links to, or embedded content from, third-party websites. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

13. Children

Our Website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through our Website, please contact us at contact@airwayz.co.

14. Changes to this Privacy Notice

We may update this Privacy Notice periodically. Changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Notice regularly.

15. Contact Us

Airwayz Drones Ltd. (Israel - HQ)
3 Hanechoshet St., Tel Aviv, Israel | Registration No. 516010386
contact@airwayz.co
Airwayz B.V. (EU / Netherlands)
Gondel 1, 1186 MJ Amstelveen, The Netherlands
Airwayz Drones LLC (USA)
81 Kendall Road, Lexington, MA 02421, USA