Privacy Policy

Introduction

IOPS International LLC (“IOPS,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use IOPS Flight Services, including the marketing website at iops.aero and the application at app.iops.aero (collectively, the “Service”). By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

Personal Information

We collect information you provide directly, including:

• Name and email address
• Phone number (optional)
• Organization affiliation
• Account credentials
• Profile information

Flight Service Request Data

When using the Service, we collect:

• Aircraft information (tail numbers, models, manufacturers)
• Flight itinerary details (airports, dates, times)
• Crew and passenger information (names, passport details)
• Service requests and preferences
• Messages and communications

Automatically Collected Data

• Device information (browser type, operating system)
• IP address and general location
• Usage data (pages visited, features used, timestamps)
• Push notification subscription data

2. How We Use Your Information

• Service Provision: To facilitate flight service requests between operators and ground handlers
• Communication: To send notifications, updates, and messages related to your trips
• Account Management: To create and manage your user account
• Security: To protect against unauthorized access and maintain platform integrity
• Compliance: To comply with aviation regulations and legal requirements
• Analytics: To understand usage patterns and improve the Service
• Support: To respond to inquiries and provide customer assistance

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for security, fraud prevention, and service improvement
• Legal Obligation: Processing required by applicable laws and regulations
• Consent: Where you have given explicit consent (e.g., marketing communications)

4. Information Sharing and Disclosure

Business Partners

Flight service request data is shared between operators and ground handlers as necessary to fulfill service requests. This is the core function of the Service.

Service Providers

We use third-party services to operate the platform, including cloud hosting and database services, email delivery services, and authentication services.

Legal Requirements

We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of IOPS International LLC, our users, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

• Account Data: Retained while your account is active and for 2 years after deletion
• Flight Service Requests: Retained for 7 years for compliance and audit purposes
• Passenger Data: Encrypted and retained for 7 years per aviation regulations
• Audit Logs: Retained for 7 years for security and compliance
• Communications: Retained for 3 years or as required by law

6. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption of sensitive data (including passport information) at rest and in transit
• Role-based access control (RBAC) limiting data access to authorized personnel
• Row-level security policies in our database
• Regular security audits and monitoring
• Secure authentication with email verification
• Immutable audit logs for all data access

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to ensure your data remains protected.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request a copy of your data in a machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@iops.aero. We will respond within 30 days.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

10. Cookies and Tracking

We use essential cookies and local storage to:

• Maintain your authentication session
• Store your preferences
• Enable push notification subscriptions

We do not use third-party advertising or tracking cookies. You can configure your browser to refuse cookies, but this may limit functionality.

11. Children's Privacy

The Service is intended for business use and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority. For EU residents, you can find your supervisory authority at the European Data Protection Board website.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

For data access or deletion requests, please use the subject line “Privacy Request” and include your account email address.