Privacy Policy

This policy explains how RadioID Inc ("RadioID", "we", "us") handles personal data for radioid.net and related RadioID services. RadioID is operated from New Brunswick, Canada and follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) for private-sector personal information handling. Questions, privacy-rights requests, and privacy complaints can be sent to the RadioID Privacy Officer at privacy@radioid.net or through the support form.

What RadioID does

RadioID issues and maintains digital radio IDs for amateur radio use. Approved ID records are intentionally public so radio networks, lookup tools, generated contact lists, repeater maps, APIs, and database exports can identify callsigns and IDs.

Data we collect

  • Account data, including email address, password hash, language, timezone, communication preferences, login/session records, and security settings.
  • Identity and ID data, including callsign, name, country, region, city, radio IDs, repeater details, trustee/owner relationships, approval status, and related change history.
  • Verification material, including uploaded license or identity documents used by administrators to verify requests.
  • Support and communication data, including support tickets, chat transcripts, uploaded support attachments, outbound email logs, and delivery status.
  • Membership and payment metadata, including subscription status, provider identifiers, transaction records, and renewal/cancellation details. Full card data is handled by payment providers, not RadioID.
  • Feature data you create, such as generator settings, saved formats, nets, Buddy Watch alerts, Buddy Mail controls, API key metadata, and OIDC/developer application settings.
  • Technical data, including IP address, browser details, device information, pages requested, timestamps, security events, and error diagnostics.
  • Radio/network activity data received from or used by digital radio networks, such as last-heard timestamps and related operational data.

Why we use the data

  • To create, verify, approve, maintain, publish, update, or delete digital radio IDs.
  • To operate account login, email verification, recovery, two-factor authentication, passkeys, support, chat, and admin review workflows.
  • To provide public database searches, downloadable data files, APIs, map tools, contact generators, network access lists, and partner integrations.
  • To process memberships, payments, refunds, subscription status, fraud prevention, and accounting records.
  • To send service messages, verification emails, account notices, support replies, annual-review notices, and optional feature or membership messages based on your settings.
  • To protect the service from abuse, spam, fraud, account takeover, security incidents, and misuse of RadioID data.
  • To diagnose errors, monitor reliability, improve features, and comply with legal, accounting, network, and dispute-resolution obligations.

Google Sign-In

RadioID offers Google Sign-In as an optional way to authenticate an existing RadioID account. Google provides RadioID with a signed identity token containing the Google account email address, whether Google reports that email as verified, and technical issuer and audience claims needed to validate the token. RadioID uses the email address to match the sign-in to an existing RadioID account and may accept Google's verified-email result when completing RadioID email verification.

RadioID does not use Google Sign-In to read Gmail, Google Drive, contacts, calendars, or other Google account content, and does not request sensitive or restricted Google OAuth scopes for login. RadioID keeps its own account, login, security, and audit records as described in this policy; it does not store the user's Google password.

Accountability under PIPEDA

RadioID is responsible for personal information under its control, including information handled by service providers on RadioID's behalf. The RadioID Privacy Officer is the accountable privacy contact for access requests, correction requests, privacy complaints, and questions about this policy. Contact the Privacy Officer at privacy@radioid.net or through the support form and include "Privacy" in the subject or message.

Meaningful consent

RadioID separates required ID-service data use from optional preferences. Required account, identity, verification, publication, partner, network, and security uses are necessary to issue and keep RadioID IDs active. Optional communications and optional embedded media are separate choices. If you decline the required terms or data policy, RadioID cannot keep your account or owner-linked IDs active; those records may be marked deleted and handled through the normal later purge lifecycle.

Legal bases for EEA and UK users

Depending on the feature and context, RadioID relies on contract necessity, legitimate interests, legal obligations, and consent where a real optional choice exists. Legitimate interests include amateur-radio ID coordination, public lookup integrity, fraud prevention, security, support, abuse prevention, and service reliability. Required account, identity, verification, and public ID publication data is not optional once you request or keep a RadioID ID. If you decline the required terms or data policy, your account and owner-linked IDs may be marked deleted and handled through the normal later purge lifecycle.

Public records and sharing

Approved callsigns, names, countries, IDs, repeater details, and related operational fields may be shown in public searches, APIs, static dumps, generated files, maps, partner tools, and network access lists. These uses are central to the RadioID service and to the operation of compatible amateur radio networks.

Verification documents are used for review and are not intentionally published. The current retention target for uploaded license/verification documents is deletion no later than three weeks after approval or rejection, unless a dispute, support issue, security issue, or legal obligation requires longer handling.

Processors and external services

RadioID may use service providers for hosting, email delivery, payment processing, fraud/security checks, diagnostics, support operations, optional admin-triggered AI assistance, translation, map/geocoding services, embedded media, static asset delivery, and abuse prevention. Current examples include Postmark and Google/Gmail for email delivery; PayPal and Stripe for payments; Sentry for diagnostics; OpenAI for optional admin-triggered help such as support-draft assistance and rare license-document review; Google Sign-In, Google Maps, and Google Translate-related services; Pushover for optional push alerts; BrandMeister for optional BM account tools and network data; OpenStreetMap/Nominatim, OpenTopoMap, Esri ArcGIS, and public elevation-tile sources for map and coverage features; YouTube NoCookie for optional embedded videos; and content delivery networks such as jsDelivr, unpkg, jQuery CDN, DataTables CDN, Highcharts CDN, and FlagCDN. These providers receive only the data needed for their role, subject to their own terms and privacy commitments.

International transfers

RadioID is operated from Canada and serves users worldwide. Personal data may be processed in Canada, the United States, the European Economic Area, the United Kingdom, or other countries where RadioID, its providers, networks, or partners operate. Where GDPR transfer rules apply, RadioID uses available transfer mechanisms such as adequacy decisions, contractual safeguards, provider data-processing terms, or other lawful transfer bases.

Retention

  • Approved public ID records are kept while needed for RadioID, network coordination, public lookup, audit, recovery, dispute, or historical integrity purposes.
  • Deleted or inactive accounts and IDs may remain marked deleted before later purge, depending on operational, audit, dispute, legal, or network needs.
  • Support tickets, email logs, payment records, account notes, audit logs, and security records are kept as long as needed to operate the service, prove actions taken, resolve disputes, maintain accounting records, or protect the system.
  • Temporary verification, password reset, and email-change tokens expire on short operational timelines.
  • Aggregated or anonymized statistics may be kept after personal data is deleted.

Your choices and rights

You can update many account settings and profile fields from your dashboard. Callsign, name, country, ID, repeater, and trustee changes may require administrator review because those fields affect public records and network operations.

Logged-in users can download an account export from the profile/settings area. Depending on where you live, you may also have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent where consent was used, and complaint to a data protection authority. These rights are not absolute; RadioID may need to keep or publish some data where required for ID operation, public records, legal obligations, security, disputes, or network integrity.

You may ask RadioID to confirm whether it holds personal information about you, explain how it has been used or disclosed, provide access to that information, or correct incomplete or inaccurate information where appropriate. RadioID may need to verify your identity before acting on a request.

Account and ID deletion

If you no longer accept the required RadioID terms or data policy, RadioID cannot keep your account or assigned IDs active. The account and owner-linked identity/ID records may be marked deleted and later purged through the normal lifecycle. Some public exports, partner systems, search indexes, backups, and radio networks may take time to update after a record is marked deleted.

Cookies and similar technology

RadioID uses necessary cookies for login, browser checks, security, CSRF protection, preferences, and requested features. Optional embedded third-party media is not loaded until you choose to load it. See the Cookie Policy for details.

Security

RadioID uses technical and organizational controls such as TLS, CSRF protection, secure session cookies, access controls, audit logging, encrypted email fields where applicable, and operational monitoring. No internet service can guarantee perfect security, but RadioID works to protect personal data against unauthorized access, disclosure, alteration, and loss.

Data breaches

If RadioID identifies a personal data breach, we will assess the risk, document the incident, take containment steps, and notify affected users or regulators where required by applicable law. Under PIPEDA, RadioID keeps records of breaches of security safeguards, assesses whether there is a real risk of significant harm, and reports to the Office of the Privacy Commissioner of Canada and notifies affected individuals where required.

Privacy complaints and challenges

You may challenge RadioID's compliance with this policy or with PIPEDA by contacting the RadioID Privacy Officer at privacy@radioid.net or through the support form. RadioID will record the complaint, review the relevant records and practices, respond with the outcome, and correct information or practices where appropriate. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada.

Children

RadioID is intended for licensed amateur radio operators and does not knowingly collect personal data from children who cannot legally use the service or consent to required processing.

Changes

RadioID may update this policy as the service changes. Material changes will be posted here and, where appropriate, shown to account holders before continued use.

This document was last updated on October 6, 2026.