LADS™ Technology — Privacy Policy

Sodara™ Labs Inc., a Delaware corporation · Effective Date: 10-18-2026

LADS™, Low Altitude Drone Sequencing™ and Sodara™ are trademarks of Sodara Labs Inc.

1. Introduction

This Privacy Policy explains how Sodara Labs Inc. ("Sodara," "we," "us") collects, uses, discloses, and protects information in connection with the LADS™ platform and related services, applications, APIs, dashboards, and sensing hardware (the "Services"). It applies to account holders, their authorized users, and visitors to our websites. It is incorporated into our Terms of Service.

By using the Services, you acknowledge this Privacy Policy. If you do not agree, do not use the Services.

2. Who We Are / Controller

Sodara Labs Inc. is responsible for the processing of personal information described here. For privacy questions or requests, contact us at bryce@sodaralabs.com

3. Information We Collect

• Account and contact information. Name, business name, email, phone, role, and similar details you provide when registering or contacting us.
• Billing information. Payment and billing details, which may be processed by our payment provider. We do not store full payment-card numbers.
• Usage and device data. Log data, IP address, device and browser information, configuration, and interactions with the Services.
• Customer Content. Site definitions, geofences, settings, and other information you submit.
• Airspace and RF detection data. This is central to the Services and warrants specific attention.

The primary inputs to the Services are Remote ID broadcasts — public, unencrypted signals that uncrewed aircraft systems (UAS) are required by FAA regulation (14 CFR Part 89) to transmit during flight, and which are designed to be received by any party with compatible equipment. The Services receive and process these broadcasts that are already present in the operating environment; the Services do not transmit, jam, decrypt, or interfere with any signal. A Remote ID broadcast may include a UAS serial or session ID, the aircraft's position, altitude, and velocity, and the position of the control station or take-off location (which may correspond to the location of a drone operator).

The Services may also detect and process other radio-frequency signatures present in the environment in order to estimate UAS presence, type, and trajectory.

Because Remote ID broadcasts and related detections can relate to identifiable or potentially identifiable individuals (for example, a drone operator) — even though they originate from a third party and not from you or our account holders — our restrictions focus on how this data may be used, not on the act of receiving signals that are already public. We restrict use of this data as described in Section 6 and in our Acceptable Use Policy.

4. How We Collect Information

We collect information: (a) directly from you when you register, configure, or communicate with us; (b) automatically through your use of the Services; and (c) through the Services' sensing components, including LADS LINK units and connected receivers that detect RF signals and broadcasts in the operating environment.

5. How We Use Information

We use information to:

• provide, operate, maintain, and secure the Services;
• detect, process, and present airspace activity and analytics;
• authenticate users and manage accounts and billing;
• communicate with you about the Services, including service and security notices;
• improve and develop our products, including by creating aggregated or de-identified data;
• comply with legal obligations and enforce our agreements; and
• protect the rights, safety, and property of Sodara, our users, and others.

6. Remote ID and Third-Party Data — Specific Practices

Remote ID broadcasts are, by design, public signals intended to be received by any party with compatible equipment. Receiving and processing them is the function the Services perform, and the Services operate on a receive-only basis — Sodara does not transmit, jam, spoof, decrypt, or otherwise interfere with any signal.

The point of these safeguards is therefore not the act of detection, which involves signals that are already public, but rather the responsible handling and use of detection data, particularly where it relates to a third party such as a UAS operator:

• We use Remote ID and RF detection data to provide airspace situational awareness and analytics within the Services.
• We do not use this data to build profiles of, or persistently track, individuals, and we restrict Customers from using it to identify, locate, track, harass, or interfere with any person except as expressly permitted by law (see Acceptable Use Policy).
• We apply retention limits to detection data (Section 8) and aggregate or de-identify where practical, recognizing that persistent aggregation of operator-location data can raise privacy and surveillance concerns even when each individual detection is lawful.
• Where required, we will respond to lawful requests regarding this data and will assess our handling of it against applicable privacy and surveillance laws.

7. How We Share Information

We do not sell personal information. We may share information with:

• Service providers who process data on our behalf (e.g., hosting, satellite/network connectivity, analytics, payment processing) under appropriate confidentiality and data-protection terms;
• Within an account organization, with the account's authorized administrators and users;
• Legal and safety recipients, where we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, enforce our terms, or protect rights and safety;
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

8. Data Retention

We retain information for as long as needed to provide the Services and for legitimate business and legal purposes. Account and billing records are retained per applicable legal and tax requirements. RF and Remote ID detection data is retained for up to ten (10) years, or for the period a Customer's documented configuration or applicable law requires, after which it is deleted or de-identified. Aggregated or de-identified data may be retained indefinitely.

9. Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of certain disclosures. To exercise rights, contact bryce@sodaralabs.com. We will verify and respond as required by applicable law. You will not be discriminated against for exercising your rights.

10. International Data Transfers

We may process and store information in the United States and other countries. Where we transfer personal information across borders, we use appropriate safeguards as required by applicable law.

11. Cookies and Analytics

Our websites and applications may use cookies and similar technologies for authentication, preferences, security, and analytics. You can control cookies through your browser settings; some features may not function without them.

12. Security

We implement administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Report security concerns to bryce@sodaralabs.com.

13. Children's Privacy

The Services are intended for business and professional users and are not directed to children under 18 (or the applicable age of majority). We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Policy. We will post the updated version with a revised "Last Updated" date and, for material changes, provide additional notice. Your continued use after the effective date constitutes acceptance.

15. Contact

Sodara Labs Inc.

bryce@sodaralabs.com