EU Data Act Policy
Explains EU-based users’ rights to access their data from connected devices
Last modified: 09/22/2025
This EU Data Act Policy (this “Policy”) provides information on certain users rights under the EU Data Act. If you are a user based in the European Union, you have specific rights concerning the data generated by your connected devices when using our Services.
DroneDeploy, Inc. (“DroneDeploy,” “we,” or “us”) refers to DroneDeploy and our affiliates. Our web services, mobile solution, and all related applications, widgets, software, tools, including services provided through our DroneDeployⓇ branded software products, are referred to in this policy as our “Services”.
1. Your Rights to Data from Connected Devices (EU Data Act)
Your Right to Access Device-Generated Data. In accordance with the EU Data Act, you have the right to access the data generated by the use of your connected products (such as drones, cameras, or ground robots) in connection with our Services (“Device-Generated Data”). This right applies to readily available data such as the original imagery, video, flight logs, location data, and telemetry data you have collected, including any relevant metadata necessary to interpret and use that data. The volume and collection frequency of such data depends on your use of the Services. This data is stored on DroneDeploy’s servers in accordance with our applicable retention policies and we use it to provide and improve our Services. Your data access rights do not extend to data that we have inferred or derived from your Device-Generated Data, such as our proprietary 3D models, analytical outputs, or reports, which are the result of our proprietary processing and may be protected as trade secrets.
Your Right to Share Data with Third Parties. You may also request that we make your Device-Generated Data available to a third party of your choosing. We will facilitate such transfers in accordance with our legal obligations.
Please note that when we share data with a third party at your request, we may require that third party to enter into an agreement with us to ensure the protection of any confidential information or trade secrets and to agree to fair, reasonable, and non-discriminatory terms, which may include compensation for the technical costs directly associated with making the data available. We are not responsible for the privacy and security practices of any third party you instruct us to share data with.
Procedures for Data Access and Portability Requests. In many cases, Device-Generated Data may be accessed through the equipment manufacturer’s user interface or customer support function, and we advise you to contact the manufacturer or access their user interface before submitting a request to DroneDeploy for Device-Generated Data.
To exercise your right to access or share your Device-Generated Data under the EU Data Act, please contact us as described below. Your request should specify the data you are requesting and, if applicable, the full details of the third party to whom you wish the data to be transferred. We will provide the data in a structured, commonly used, and machine-readable format, where reasonably possible. We will take reasonable steps to verify your identity before fulfilling the request and will respond within the timeframes required by applicable law.
2. Updates to this Policy
We occasionally update this Policy. When we do, we will also revise the “last modified” date at the beginning of the Policy. Your continued use of our Service after such changes will be subject to the then-current policy. We encourage you to periodically review this Policy.
3. How to contact us
If you wish to contact us to exercise your data rights, or have questions about this Policy or about DroneDeploy, please contact us by email at [email protected] with the subject line “Data Act Request”, or at:
DroneDeploy, Inc.
548 Market St. #34583
San Francisco, California 94104
Users may also lodge a complaint with the competent authority designated pursuant to Article 37 of the EU Data Act.