Privacy Policy

Effective Date: August 28, 2026

This Privacy Policy explains what information Ibex Aero Technologies, LLC ("Company," "we," "us," or "our") collects when you request access to or use our web applications and software products ("Services"), why we collect it, who it is shared with, and what choices you have. It forms part of our Terms of Service.

1. Information You Give Us

When you request access to the Services, we collect:

  • Your full name;
  • Your email address;
  • Your company, organization, or school, if you choose to provide one — this field is optional;
  • Your stated aviation experience level;
  • The fact that you accepted these terms, and which version you accepted.

If an account is created for you, we additionally store your username, your email address, your assigned role, and a cryptographic hash of your password. We do not store your password itself and cannot recover it.

2. Information Collected Automatically

Every attempt to sign in — successful or not — is recorded. Each record contains:

  • The username that was submitted;
  • The IP address the attempt came from;
  • An approximate location derived from that IP address, typically no more precise than a city, and sometimes only a country;
  • The browser user-agent string your device sent;
  • The date and time, and whether the attempt succeeded.

The location is an estimate produced from a local database of IP address ranges. It is not GPS, it is not read from your device, and it is frequently wrong by a considerable distance — particularly on mobile networks, where it may resolve only to the country. Your IP address is not sent to any third-party geolocation service in order to produce it.

3. Content You Create

The Services let you author and save content — for example airspace configurations, scenarios, and saved preferences. We store that content, the name you give it, the times it was created and last changed, and whether you have chosen to keep it private, publish it to others holding access to the same application, or share it with named individuals. Ownership of that content is governed by the Terms of Service, which you should read alongside this policy.

4. Cookies

We set a single cookie, containing a signed session token, when you sign in. It is what keeps you signed in as you move between pages, and it is removed when you sign out. It is restricted to this site and is not readable by scripts in your browser. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

5. How We Use This Information

We use the information described above to:

  • Create, authenticate, and administer your account, and determine which applications you may use;
  • Respond to your request for access and contact you about it;
  • Detect, investigate, and respond to suspicious activity — repeated failed sign-ins, attempts against accounts that do not exist, sign-ins from countries an account has never used, and similar patterns;
  • Operate, maintain, troubleshoot, and improve the Services;
  • Comply with legal obligations and enforce our Terms.

We do not sell your personal information. We do not share it with advertisers. We do not use it to build advertising profiles.

6. Who Else Handles Your Information

Running the Services necessarily involves a small number of providers who process data on our behalf:

  • DigitalOcean — hosts the servers on which the Services and their database run.
  • Cloudflare — sits in front of our site, routing and protecting traffic. Requests to the Services pass through Cloudflare's network.
  • Google (Gmail) — delivers the notification and password-reset emails we send.

We may also disclose information where we are required to by law, or where it is necessary to investigate suspected fraud, a security incident, or a violation of our Terms.

7. How Long We Keep It

Account records are kept for as long as your account exists. Access requests are kept so that we have a record of who asked for access and on what terms. Sign-in records are kept while your account is active and for a period afterward, because a security investigation is usually retrospective and a log that has already been discarded cannot answer any question about what happened.

Content you create is kept until you delete it or your account is removed.

8. How It Is Protected

Passwords are stored only as bcrypt hashes. Traffic to and from the Services is encrypted in transit. Sessions use signed tokens with a limited lifetime. Sign-in attempts are rate limited per IP address, and access to each application is granted individually rather than by default. No system is perfectly secure, and we do not claim otherwise; we do commit to telling you promptly if we become aware of a breach affecting your information.

9. Your Choices and Rights

You may ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it and close your account. Write to info@ibexaero.com and we will respond within a reasonable period.

Deleting your account removes your account record and the content you have created. Sign-in records that are needed as a security record may be retained, and where they are, they are retained on their own and not used to contact you.

Depending on where you live, you may have additional rights — including rights of access, correction, deletion, portability, and objection under the EU or UK General Data Protection Regulation, or rights to know, delete, and opt out of sale under California law. We do not sell personal information, so there is nothing to opt out of. To exercise any right, use the same address above.

10. International Users

The Services are operated from the United States, and information collected is stored and processed there. If you access the Services from outside the United States, you are sending your information to a country whose data protection law may differ from your own.

11. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact us and we will delete it.

12. Changes to This Policy

We may update this policy. The revised version will be posted on this page with a new effective date, and where the change is significant we will take reasonable steps to tell account holders directly rather than relying on you to notice.

13. Contact

Questions about this policy, or about the information we hold, go to info@ibexaero.com.

Sign In | Terms of Service | Request Access