Privacy Policy

Airhex Pty Ltd ("we", "our", "us") operates the airhex.com website and API service. This Privacy Policy explains how we collect, use, protect, and otherwise handle your Personally Identifiable Information (PII) when you use our service.

PII, as described in privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person. Please read this policy carefully to understand our practices.

We collect the following types of information:

Account Information: When you sign up for an API key or place an order, we may collect your name, email address, phone number, company name, and payment information (processed securely by Stripe).

Usage Data: We log API requests including timestamps, endpoints accessed, and response codes. We do not log the content of API responses.

Form Data: When you fill out a contact form or enter information on our site, we collect the data you provide.

Cookies: We use a cookie consent banner to obtain your permission before setting any analytics or tracking cookies. Essential cookies (such as your cookie consent preference) are used without prior consent as they are strictly necessary for the website to function. Analytics and tracking cookies from Google Analytics and ActiveCampaign are only activated after you accept cookies via our consent banner. You can change your preference at any time using the "Cookie Settings" link in the website footer.

We use collected information to:

- Provide and maintain our API service
- Process payments and manage subscriptions
- Send transactional emails (API keys, billing notifications)
- Send periodic emails regarding your order or other products and services
- Monitor service performance and prevent abuse
- Respond to support requests and follow up after correspondence
- Compile aggregate data about site usage to improve our services

We do not sell, trade, or otherwise transfer your Personally Identifiable Information to outside parties. We share data only with service providers necessary to operate our platform:

- Stripe for payment processing
- Postmark for transactional email delivery
- Google Analytics for anonymous site usage analytics
- ActiveCampaign for email marketing and site visitor tracking

These providers are bound by their own privacy policies and data protection agreements. We do not include or offer third-party products or services on our website beyond those listed above.

We use Google Analytics to understand how visitors use our site. Google, as a third-party vendor, uses cookies to collect anonymous usage data.

We may use the following Google Analytics features:
- Remarketing with Google Analytics
- Google Display Network Impression Reporting
- Demographics and Interests Reporting

We, along with third-party vendors such as Google, use first-party cookies (such as the Google Analytics cookies) and third-party cookies or other identifiers together to compile data regarding user interactions as they relate to our website.

Opting out: You can withdraw your consent at any time by clicking the "Cookie Settings" link in the website footer. You can also set preferences for how Google advertises to you using the Google Ad Settings page, visit the Network Advertising Initiative Opt Out page, or use the Google Analytics Opt Out Browser add-on.

We use ActiveCampaign for email marketing and site tracking. ActiveCampaign places a tracking cookie on your browser to monitor page visits on our website. This helps us understand how visitors interact with our content and allows us to send more relevant communications.

When you submit a form on our site (such as a contact or enquiry form), your email address is associated with the tracking cookie so we can personalise follow-up communications based on pages you visited.

Data collected: Pages visited, timestamps, referrer URL, and (after form submission) your email address.

Opting out: You can withdraw your consent for ActiveCampaign site tracking at any time by clicking the "Cookie Settings" link in the website footer. You can also block the ActiveCampaign tracking cookie by adjusting your browser cookie settings or using a browser extension that blocks third-party tracking scripts. ActiveCampaign's privacy policy is available at https://www.activecampaign.com/legal/privacy-policy.

Account information is retained for the duration of your subscription and for 90 days after cancellation. API usage logs are retained for 30 days. You may request deletion of your data at any time by contacting us.

We implement industry-standard security measures including encryption in transit (TLS/SSL), secure API key generation, and regular security reviews. API keys are stored using cryptographic hashing.

Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights and are required to keep the information confidential. All payment transactions are processed through Stripe and are not stored or processed on our servers.

We honour Do Not Track signals. When a Do Not Track (DNT) browser mechanism is in place, we do not plant cookies or use advertising based on that signal.

In accordance with CalOPPA:

- Users can visit our site anonymously.
- Our Privacy Policy link includes the word "Privacy" and is easily found on our website.
- You will be notified of any Privacy Policy changes on this page.
- You can change your personal information by emailing us or through the Stripe Customer Portal.

We do not specifically market to children under the age of 13 years old. We do not knowingly collect personal information from children under 13.

In order to be in line with Fair Information Practices, should a data breach occur we will notify you via email within 7 business days.

We agree to the Individual Redress Principle, which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law, including recourse to courts or government agencies to investigate and/or prosecute non-compliance.

We collect your email address in order to send information and respond to inquiries, process orders and send related updates, and send additional information related to your products and services.

In accordance with CAN-SPAM, we agree to:
- Not use false or misleading subjects or email addresses
- Identify promotional messages as advertisements in a reasonable way
- Include our physical business address in emails
- Monitor third-party email marketing services for compliance, if used
- Honour opt-out/unsubscribe requests quickly
- Allow users to unsubscribe using the link at the bottom of each email

If at any time you would like to unsubscribe from receiving future emails, follow the instructions at the bottom of each email and we will promptly remove you from all correspondence.

You have the right to access, correct, or delete your personal data. You can manage your subscription and billing information through the Stripe Customer Portal. For data requests, contact us using the details below.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by posting a notice on our website.

If there are any questions regarding this privacy policy, you may contact us using the information below.

Airhex Pty Ltd
81-83 Campbell Street
Surry Hills, NSW 2010
Australia

Email: [email protected]
Phone: +61 7 5315 8394 (AU)