This notice explains how information is handled on UERSIS — the secure, access-restricted portals that drone and inspection operators use to deliver their work to their clients (the “Service”). A portal may be presented under the operator’s own name, such as a Hub.
1. About the Service
Each operator runs a portal at its own address (yourname.uersis.com). The portal gives authorized users access to hosted aerial and site-intelligence data — imagery, video, 360° panoramas, orthomosaics, thermal frames, LiDAR point clouds, bathymetry surfaces and reports. Access is limited to the operator’s team and the viewers it invites, project by project.
2. The one cookie we use
The Service sets a single, strictly necessary cookie: a signed session token that keeps you securely signed in across the operator’s portal and the UERSIS apex. It is marked HttpOnly and Secure, expires when you sign out or the session lapses, and carries no advertising or tracking identifiers. No advertising, analytics or cross-site tracking cookies are used. Your browser’s local storage holds only interface preferences (your light/dark choice, collapsed sidebar sections, and that you have seen the privacy notice); that information never leaves your device.
3. Access & activity logging
For authorized-access security and to keep a reliable audit trail (chain of custody) for each project, sign-ins and in-app actions are logged server-side — including invitations issued and accepted, access granted or revoked, files uploaded, published, viewed, downloaded or exported, and reports requested. Each entry records the user, the action, the time, and the IP address and approximate (city-level) location it came from. This logging is a condition of access. The operator who runs the portal can see the audit trail for its own account; UERSIS staff can see it to operate and secure the Service.
4. Content delivery providers
Media is stored and streamed through our content delivery provider (Bunny.net). Optional embedded deliverables (ArcGIS, DroneDeploy, Site Scan, Pix4D) are rendered by those providers inside a sandboxed frame. As a normal part of delivering content, these providers receive your IP address and basic device information and may set their own essential technical cookies. They are not used for advertising.
5. Security
Every project is isolated per account at the database level; a viewer can only reach the projects they were granted, and revocation takes effect immediately. Media is served through signed, expiring links, never from a public bucket. Credentials are handled by our authentication provider (Supabase Auth) and are never stored in plain text; sign-in is rate-limited; all traffic is served over TLS.
6. How information is used & shared
Logged information is used to operate and secure the Service, authenticate users, control access, bill operators for their plan, and maintain the audit record. Information is not sold. It is shared only with the operator whose portal you are using and the parties it authorizes, with the infrastructure providers used to run the Service, or where required by law.
7. Retention
Access and activity logs are retained for the life of the account and as needed to preserve the integrity of the project record and meet legal obligations. Hosted content belongs to the operator (or the client it was produced for) and is retained and deleted at that party’s direction, subject to legal requirements.
8. Your rights
Depending on your location — including under Canada’s PIPEDA, the EU’s GDPR and California’s CCPA — you may have the right to request access to, correction of, or deletion of your personal information. Requests can be made through the Contact page. Log entries required for the security and integrity of a project record may be retained where the law allows.
9. Changes
This notice may be updated; material changes will be posted here with a new effective date.
Questions or requests? Contact UERSIS.