ChatFPV privacy notice
Last updated: 28 September 2026.
You are talking to an AI
ChatFPV is an AI assistant. Every reply is machine-generated and can be
wrong; check the sources it cites. This notice covers the web chat at
chatfpv.com, the same chat embedded on
opendrone.be as a widget, conversations
shared through a public link, and the ChatFPV bot in the OpenDrone Discord
server.
Who controls this data
Incutec BV, VAT BE1038934039, Stapelhuisstraat 15, 3000 Leuven, Belgium. Privacy contact: privacy@opendrone.be.
What is processed
- The text you type, and ChatFPV's replies.
- A random id ChatFPV stores in your browser's local storage so a conversation can continue across messages. It is not a login and carries no name or account.
- Your IP address, to keep the service usable for everyone: a salted hash of it limits how many questions one visitor or one shared network can ask in a short time, and Cloudflare Turnstile checks it when that check is switched on. Cloudflare's request logs also contain it.
- Your rating of an answer and any note you add to it.
- Anything you choose to type into the chat yourself, such as an order number. Do not paste anything you would not want kept for the retention period below.
Signing in with OpenDrone
Signing in is optional; the chat works without an account. When you sign
in with your opendrone.be account, opendrone.be tells ChatFPV only a
pairwise account id (acct_ followed by 32 hexadecimal
characters) that is different from the id opendrone.be or Shopify use for
you. ChatFPV receives no email address, name or Shopify customer id, and
stores no Shopify access or refresh token. Conversations you have while
signed in, and anonymous conversations from the same browser at the moment
you sign in, are stored under that id.
These cookies are strictly necessary for signing in and are set only on ChatFPV's own domain. None is used for analytics or advertising:
| Cookie | Purpose | Lifetime |
|---|---|---|
__Host-cf_sid | Your signed-in session (HttpOnly, Secure, SameSite=Lax) | 30 days |
__Host-cf_oauth | Protects one sign-in attempt (state and PKCE verifier) | 10 minutes |
cf_sso | Records that a silent sign-in was already tried, so it runs at most once per browser session; 0 pauses it for 24 hours after you sign out or delete your data | Browser session, or 24 hours |
Silent sign-in: on your first visit to the chat page in a browser session, ChatFPV sends your browser once to opendrone.be and straight back. If you are signed in there, you arrive signed in here; if not, you arrive signed out and opendrone.be sets no cookie for that visit. Search engines and link previews are not redirected.
A signed-in session ends after 30 days, when you sign out on either site, or when you delete your data. Expired sessions and expired handoff links (used to move a conversation between opendrone.be and ChatFPV, valid 120 seconds) are deleted by a daily cleanup.
Discord
In the OpenDrone Discord server, ChatFPV answers when you use
/ask or the "Ask ChatFPV" message command in the channels it is
allowed in, and follow-ups in the thread it opens. Your question, the reply
and a hash of your Discord user id are stored like a web conversation. In
those same channels ChatFPV also reads new messages to decide whether it could
help; it records that decision with the Discord user id, channel and a short
excerpt of the messages, and posts nothing unless you ask. Discord Inc.
processes everything posted in its server as an independent controller under
its own privacy policy.
Shared conversations
"Share" makes a read-only copy of the conversation up to that point, readable by anyone who has the link and never listed in search engines. You can revoke a link at any time; it is deleted with its conversation.
Using questions to improve answers
A question ChatFPV could not answer is copied, without who asked it and after email addresses, phone numbers and order numbers are removed, into a list staff use to add the missing knowledge. A rating note can become a proposed correction to the knowledge base. You can object to this use at any time (see "Your rights").
Who else processes it
These processors act on Incutec's instructions under a data processing agreement that is part of their terms:
| Processor | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting and running ChatFPV (Workers), storing conversations and accounts (D1), the knowledge base (Vectorize), the fallback AI model (Workers AI, which does not train on your content), Turnstile, request logs | Global network, including the United States |
| Google (Gemini API, paid tier) | Writing answers from your question, the conversation so far and the retrieved source text; web search with Google Search grounding for answers and for researching unanswered questions | United States and other Google locations |
| Shopify International Ltd | Sign-in with your opendrone.be account (on opendrone.be, not on ChatFPV) | Ireland, with transfers under Shopify's terms |
Google uses the paid Gemini API tier: it does not use your prompts or the replies to improve its products. It keeps prompts and replies for 55 days only to detect abuse of its services, and content sent with Google Search grounding for 30 days to produce grounded results. Do not type personal data into the chat that the answer does not need.
Cloudflare's own Turnstile privacy addendum applies to the Turnstile check. No processor is paid to advertise to you, and your questions are never sold.
Transfers outside the EU
Cloudflare and Google process data in the United States. Both are certified under the EU-US Data Privacy Framework, which the European Commission found adequate on 10 July 2023 (GDPR Art 45), and their data processing terms add the EU Standard Contractual Clauses (Art 46) for any transfer the Framework does not cover. Ask privacy@opendrone.be for a copy of these safeguards.
Why (legal basis)
| Purpose | Legal basis (GDPR) |
|---|---|
| Your account and its conversation history, when you sign in | Contract, Art 6(1)(b): the service you signed in for |
| Answering anonymous questions on the web, the widget and Discord | Legitimate interest, Art 6(1)(f): answering FPV and OpenDrone product questions without a human for every message |
| Rate limits, Turnstile, request logs | Legitimate interest, Art 6(1)(f): keeping the service usable and preventing abuse |
| Unanswered questions, ratings and corrections used to improve the knowledge base | Legitimate interest, Art 6(1)(f): better answers for everyone; you can object |
| Discord listener decisions | Legitimate interest, Art 6(1)(f): offering help in the community server without being asked in every thread |
How long it is kept
| Data | Deleted |
|---|---|
| Conversation made while signed in, with its messages, ratings and share links | 12 months after the last message in it, or when you delete your ChatFPV data |
| Anonymous conversation (web, widget, Discord), with its messages, ratings and share links | 90 days after the last message in it |
| Your ChatFPV account id, the record of anonymous conversations moved into it, and anything still stored under it | 3 years after your last sign-in, or when you delete your ChatFPV data |
| Signed-in session | 30 days after sign-in, or at sign-out |
| Unanswered question (no link to who asked) | 90 days after it was last asked |
| Your text copied into a proposed correction | 24 months after it was made; the resulting knowledge change stays, without your text |
| Your text in a support ticket that ChatFPV drafted a reply for (opendrone.be support) | 24 months after the last message in it; the staff reply and draft stay, without your text |
| Discord listener decisions and thread links | 90 days |
| Rate-limit counters (salted IP hash) | 7 days |
| Google abuse-monitoring logs | 55 days (30 days for Search grounding), by Google |
Your rights
Signed in on ChatFPV: open the account menu (the person icon at the top) and choose "Export my ChatFPV data" to download, as JSON, everything stored under your account: its creation and last sign-in dates, your session dates, every conversation with its messages and ratings, and your share links. Choose "Delete my ChatFPV data" to delete, in one step, those conversations with their messages, ratings and share links, your ChatFPV sessions and your account id. Deleting or exporting your account on opendrone.be does the same for ChatFPV. Deleting ChatFPV data does not delete your opendrone.be account.
You can also ask to see, correct, delete or receive a copy of what ChatFPV has stored about you, to restrict its use, or object to the processing based on legitimate interest, by emailing privacy@opendrone.be or opening a support ticket. Incutec answers within one month. Because anonymous conversations are keyed to a random browser id and not an account, include enough of the conversation to identify it.
You can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be, or with the authority where you live or work.