Texas TFR Auto-Poster: Privacy Policy

Effective date: October 1, 2026

Who we are

The Texas TFR Auto-Poster (the "app") is run by TXDRONECO, LLC d/b/a Texas Drone Company ("TDC," "we"), 4687 Johnson Ln, Ste. 4A, Argyle, TX 76226. Contact: [email protected].

What the app does

The app reads the public FAA Temporary Flight Restriction (TFR) feed from tfr.faa.gov. It picks out Texas TFRs that restrict drone (UAS) operations and creates posts with a map image. It publishes those posts only to TDC's own LinkedIn company page, Facebook Page, and Instagram professional account.

The app is for TDC's internal use. The public can't sign up for it, log in to it, or connect their own accounts to it.

Information the app handles

  • Public FAA TFR data. This includes NOTAM IDs, locations, times, and the notice text from tfr.faa.gov. It is public information about airspace, not information about people.

  • TDC's own account credentials. The app holds OAuth access tokens and account/page IDs for TDC's own LinkedIn page, Facebook Page, and Instagram account. It uses them only to publish TDC's posts.

  • Records the app creates. For each run, the app saves the TFR IDs it drafted or posted, the post wording and images it generated, and a run summary that lists each Texas TFR and whether it was posted. None of this contains personal information about end users.

The permissions the app asks for are limited to publishing on TDC's own accounts. They are LinkedIn w_organization_social; Facebook pages_manage_posts and pages_read_engagement; and Instagram instagram_business_basic and instagram_business_content_publish, or instagram_basic and instagram_content_publish if the account connects through Facebook Login. [CONFIRM: the final list of scopes requested in app review. The PR's notes also mention pages_manage_engagement and pages_read_user_engagement. Remove them from this policy if they are not requested.]

What the app does not do

  • It does not collect personal data from end users.

  • It does not read comments, followers, messages, or insights. [CONFIRM: true of the posting code once Phase 2 is built. The Phase 1 PR has no LinkedIn or Meta client.]

  • It does not sell, rent, or share personal data. It has none to share.

  • It has no user sign-up and no accounts.

  • It does not use ads, tracking, or analytics.

Third parties

  • FAA (tfr.faa.gov): source of the public TFR data.

  • LinkedIn and Meta (Facebook and Instagram): the platforms where TDC's posts are published. Your use of those platforms is covered by their own privacy policies.

  • Railway: hosts the app, runs its schedule, and provides its database and image storage. [CONFIRM: Railway is the final host. The PR documents it but it isn't provisioned yet.]

  • Public image storage: Instagram downloads post images from a public URL, so the map images TDC posts are stored where anyone can fetch them by URL. They show only public TFR information. [CONFIRM: the storage provider, e.g. Railway Object Storage.]

The map is drawn by the app itself and doesn't use a third-party map-tile service.

[CONFIRM: The PR includes an optional LLM/web-search key, turned off by default (context.provider = none). If it is ever turned on, add the provider here. It would receive only public TFR details.]

Storage, security, and retention

  • Tokens and app secrets are stored in the hosting provider's environment variables. They are never kept in the code repository, and the repository is set up to keep secret files out.

  • Run records and generated posts are stored in the app's database and storage. [CONFIRM: the database. Phase 1 uses SQLite, and the PR plans Postgres on Railway.]

  • Only TDC has access to these systems.

  • Retention: [CONFIRM: retention period for run records, drafts, and images. The PR doesn't set one.] Posts published to LinkedIn, Facebook, or Instagram stay there until TDC deletes them on that platform.

Data deletion

The app doesn't hold personal data about end users. If you still want to ask us to delete data, or have questions:

  1. Email [email protected] with the subject "TFR app data deletion." Describe what you want deleted.

  2. We will reply and delete any data we hold that relates to you. [CONFIRM: response time, e.g. within 30 days.]

When TDC stops using the app, we revoke its access in our LinkedIn and Meta account settings, delete the stored tokens from the host's environment, and delete the app's database and stored images.

If you have connected the app to a LinkedIn, Facebook, or Instagram account, you can remove it at any time in that platform's settings for connected or authorized apps. Removing it revokes the app's access.

Children

The app isn't directed to children and doesn't collect information from anyone, including children under 13.

Changes

If this policy changes, we will update it on this page and change the effective date.

Contact

TXDRONECO, LLC d/b/a Texas Drone Company 4687 Johnson Ln, Ste. 4A, Argyle, TX 76226 [email protected]