Ibex Aero Technologies

Effective Date: October 28, 2026

This Privacy Policy explains what information Ibex Aero Technologies, LLC ("Company," "we," "us," or "our") collects when you request access to or use our web applications and software products ("Services"), why we collect it, who it is shared with, and what choices you have. It forms part of our Terms of Service.

1. Information You Give Us

When you request access to the Services, we collect:

• Your full name;
• Your email address;
• Your company, organization, or school, if you choose to provide one — this field is optional;
• Your stated aviation experience level;
• The fact that you confirmed you are 18 or older and accepted the Terms of Service and this Privacy Policy, which versions you accepted, when, and the IP address and browser you used.

If you accept updated versions later while signed in, we record the same information again.

If an account is created for you, we additionally store your username, your email address, your assigned role, and a cryptographic hash of your password. We do not store your password itself and cannot recover it.

2. Information Collected Automatically

Every attempt to sign in — successful or not — is recorded. Each record contains:

• The username that was submitted;
• The IP address the attempt came from;
• An approximate location derived from that IP address, typically no more precise than a city, and sometimes only a country;
• The browser user-agent string your device sent;
• The date and time, and whether the attempt succeeded.

The location is an estimate produced from a local database of IP address ranges. It is not GPS, it is not read from your device, and it is frequently wrong by a considerable distance — particularly on mobile networks, where it may resolve only to the country. Your IP address is not sent to any third-party geolocation service in order to produce it.

Within the applications, we also record:

• Which locked or premium features you open and whether you click Contact Sales, together with your account details, so we can understand which features interest you and follow up with you about them;
• Progress and results that are saved to your account automatically, such as best times in training exercises;
• Requests you make from within an application for access to another application.

When you first sign in, work you saved in your browser before signing in is moved to your account and removed from the browser.

Our servers also keep technical logs of requests and errors for troubleshooting and security. These logs are kept for 30 days.

3. Content You Create

The Services let you author and save content — for example airspace configurations, scenarios, and saved preferences. We store that content, the name you give it, the times it was created and last changed, and whether you have chosen to keep it private, publish it to others holding access to the same application, or share it with named individuals. Ownership of that content is governed by the Terms of Service, which you should read alongside this policy.

4. Cookies

We set a single cookie, containing a signed session token, when you sign in. It is what keeps you signed in as you move between pages, and it is removed when you sign out. It is restricted to this site and is not readable by scripts in your browser. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

5. How We Use This Information

We use the information described above to:

• Create, authenticate, and administer your account, and determine which applications you may use;
• Respond to your request for access and contact you about it;
• Contact you about features you have shown interest in. You can ask us to stop at any time by writing to info@ibexaero.com;
• Detect, investigate, and respond to suspicious activity — repeated failed sign-ins, attempts against accounts that do not exist, sign-ins from countries an account has never used, and similar patterns;
• Operate, maintain, troubleshoot, and improve the Services;
• Develop new products and features, using information that has been de-identified or aggregated so that it no longer identifies you;
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information. We do not share it with advertisers. We do not use it to build advertising profiles.

6. Who Else Handles Your Information

Running the Services necessarily involves a small number of providers who process data on our behalf:

• DigitalOcean — hosts the servers on which the Services and their database run.
• Cloudflare — sits in front of our site, routing and protecting traffic. Requests to the Services pass through Cloudflare's network.
• Google (Gmail) — delivers the notification and password-reset emails we send.

We may also disclose information where we are required to by law, or where it is necessary to investigate suspected fraud, a security incident, or a violation of our Terms.

If the Company is involved in a merger, acquisition, financing, or sale of all or part of its assets, information we hold may be transferred as part of that transaction, and it will remain subject to this policy.

7. How Long We Keep It

Account records are kept for as long as your account exists. Access requests and records of your acceptance of our Terms of Service and this Privacy Policy are kept, even after your account is deleted, so that we have a record of who asked for access and on what terms. Sign-in records are kept while your account is active and for a period afterward, because a security investigation is usually retrospective and a log that has already been discarded cannot answer any question about what happened.

Content you create is kept until you delete it or your account is removed.

Password-reset records are deleted after 90 days. Backups of our database are kept for up to 30 days, so information you delete may remain in a backup until it expires.

8. How It Is Protected

Passwords are stored only as bcrypt hashes. Traffic to and from the Services is encrypted in transit. Sessions use signed tokens with a limited lifetime. Sign-in attempts are rate limited per IP address, and access to each application is granted individually rather than by default. No system is perfectly secure, and we do not claim otherwise; we do commit to telling you promptly if we become aware of a breach affecting your information.

9. Your Choices and Rights

You may ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it and close your account. Write to info@ibexaero.com and we will respond within a reasonable period.

Deleting your account removes your account record, the content you have created, and the feature-interest records described in Section 2. Sign-in records that are needed as a security record may be retained, and where they are, they are retained on their own and not used to contact you. De-identified or aggregated information derived from your use of the Services, and copies of content you chose to share with others, may remain after your account is deleted.

Depending on where you live, you may have additional rights — including rights of access, correction, deletion, portability, and objection under the EU or UK General Data Protection Regulation, or rights to know, delete, and opt out of sale under California law. We do not sell personal information, so there is nothing to opt out of. To exercise any right, use the same address above.

10. International Users

The Services are operated from the United States, and information collected is stored and processed there. If you access the Services from outside the United States, you are sending your information to a country whose data protection law may differ from your own.

11. Children

The Services are intended only for people 18 and older. They are not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe someone under 18 has provided us with information, contact us and we will delete it.

12. Changes to This Policy

We may update this policy. The revised version will be posted on this page with a new effective date. If a change is material, we will notify account holders by email at least 30 days before it takes effect.

13. Contact

Questions about this policy, or about the information we hold, go to info@ibexaero.com.