Privacy Policy

1. Introduction

AeroNexus ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the AeroNexus platform, website, and ACARS client (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this Policy.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Display name and email address
• Password (stored as a cryptographic hash — we never see your plain password)
• Home airport ICAO code (optional, set by you)
• Profile avatar URL (optional, provided by you)

2.2 Airline and Flight Data

If you create or join a virtual airline, we collect:

• Airline name, ICAO/IATA codes, hub airports, and branding URLs you provide
• Route definitions, fleet records, and financial transactions (all simulated)
• Flight records including origin, destination, duration, and performance metrics

2.3 ACARS Telemetry

When using the AeroNexus ACARS client during a simulated flight, we collect:

• Aircraft position (latitude, longitude, altitude) during flight
• Airspeed, heading, vertical speed, and G-force data
• Engine parameters, fuel consumption, and landing metrics
• Flight phase transitions (takeoff, cruise, landing)

This data is sourced from your flight simulator and used solely to power platform features such as the live map, logbook, performance scoring, and fleet maintenance tracking. We do not use this data for any purpose unrelated to the Service.

2.4 Payment Information

Payments are processed by Stripe. AeroNexus does not store your credit card number, CVV, or full payment details. We receive a Stripe customer ID and subscription status. Stripe's privacy practices are governed by Stripe's Privacy Policy.

2.5 Usage Data

We may collect standard server log data including IP addresses, browser type, pages visited, and timestamps. This is used for security monitoring, debugging, and improving the Service.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your subscription and manage billing
• Send transactional emails (account verification, password reset, flight notifications)
• Calculate virtual economy metrics, fuel prices, and pilot statistics
• Display your flight data on the live map and leaderboards (within your airline)
• Detect and prevent fraud, abuse, and violations of our Terms of Use
• Respond to your support requests and legal notices
• Improve and develop new features for the Service

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Sharing

We may share your information with:

4.1 Service Providers

We use the following third-party services to operate the platform:

• Railway — cloud infrastructure hosting (PostgreSQL database, Redis, application servers)
• Vercel — frontend web hosting
• Stripe — payment processing
• Resend — transactional email delivery
• NOAA / aviationweather.gov — weather data (no personal data is sent to this service)

4.2 Within Your Virtual Airline

Your display name, pilot rank, reputation score, and flight statistics may be visible to other members of any virtual airline you join, as well as on network-wide leaderboards. Your email address is never shared with other users.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of AeroNexus, our users, or the public.

5. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it for legal or accounting purposes.

Flight telemetry and logbook data are retained for the lifetime of your account and deleted upon account closure.

6. Security

We implement industry-standard security measures to protect your data, including:

• Passwords stored as bcrypt hashes
• All data transmitted over HTTPS/TLS
• JWT tokens with short expiry and rotation
• Row-level security on the database
• API keys hashed before storage

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate data through your profile settings
• Deletion — request deletion of your account and associated data
• Portability — request an export of your flight logbook and account data
• Objection — object to certain uses of your data

To exercise these rights, contact us at terms@aeronexus.app. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and by posting the updated Policy on this page with a new effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated Policy.

10. Governing Law

This Privacy Policy is governed by the laws of the State of Washington, United States. Any disputes relating to this Policy are subject to the exclusive jurisdiction of the courts in Thurston County, Washington.

11. Contact

For privacy-related questions, data requests, or concerns, contact us at: