PRIVACY POLICY

WHO OPERATES HEXBIRD

HEXBIRD is operated by Wiseman Applied Intelligence LLC. This Privacy Policy explains how Wiseman Applied Intelligence LLC handles information when you use HEXBIRD, request access, create an account, use chat, connect MCP clients, use the HTTP API, contact support, or pay for a subscription.

ACCOUNT DATA

We may collect account information such as your name, email address, invite status, passkeys, authentication events, team/workspace membership, plan, account status, and support contact details.

We use account data to create and secure accounts, provide access, manage invites, prevent abuse, provide support, and operate the service.

BILLING DATA

Payment details are handled by Stripe or another payment processor. HEXBIRD may store billing identifiers, customer identifiers, subscription status, plan, invoice status, renewal dates, cancellation status, tax settings, and payment-event metadata needed to operate subscriptions.

Do not send full card numbers, bank details, tax IDs, or other sensitive payment credentials through chat or support channels.

CHAT, PROMPTS, FILES, AND OUTPUT

When you use HEXBIRD chat, we may process and store your prompts, attached files, generated answers, reports, exports, tool calls, model/session identifiers, token usage, and conversation metadata.

We use this information to provide chat, recover interrupted sessions, show saved investigations, calculate usage, debug issues, improve reliability, and protect the service.

API, MCP, AND QUERY LOGS

When you use MCP or the HTTP API, we may log API tokens or token identifiers, OAuth client identifiers, request times, query text or query hashes, data-source backend, row counts, scan statistics, latency, errors, truncation status, and related audit metadata.

We use these logs to meter usage, enforce limits, diagnose failures, investigate abuse, support customers, and operate the data systems.

COOKIES AND SESSION DATA

HEXBIRD uses cookies and similar session mechanisms for authentication, invite flows, account access, operator/admin sessions, passkey flows, and basic service operation.

The current product does not need advertising cookies. If analytics are added, they should be documented here before launch.

SUPPORT AND COMMUNICATIONS

If you contact the operator, request access, report a problem, or reply to an email, we may keep your message, contact information, delivery events, bounce/complaint status, and related troubleshooting notes.

We use this information to respond, manage access, resolve billing and technical issues, and maintain reliable transactional email.

DATA SOURCES AND PUBLIC INFORMATION

HEXBIRD works with aviation, geospatial, infrastructure, and public-record data. Some output may include public or third-party data about aircraft, registrants, airspace, airports, infrastructure, and related activity.

Public-source data is not made private by appearing in HEXBIRD, but HEXBIRD account activity, saved investigations, prompts, files, and API usage are treated as customer service data under this policy.

SUBPROCESSORS

HEXBIRD may use subprocessors for payment processing, hosting, database hosting, email delivery, LLM/model services, logging, monitoring, error reporting, storage, and support tooling.

Current or expected subprocessors include Stripe for payments, cloud or server hosting providers, database providers, email infrastructure providers, LLM providers, and monitoring/logging tools. This list should be made more specific before a broad public release.

RETENTION

We keep information for as long as needed to provide HEXBIRD, operate accounts, preserve saved investigations, enforce limits, maintain billing and tax records, investigate abuse, secure the service, comply with law, and resolve disputes.

Some data, such as security logs, billing records, query audit logs, and backup copies, may remain for a period after account closure or deletion requests. Expired or revoked credentials may be hidden from normal account views before they are deleted after a retention window.

EXPORT, DELETION, AND CORRECTION REQUESTS

You may request export, deletion, or correction of account-related information by contacting the operator. Some requests may be handled manually while HEXBIRD is invite-only.

We may retain information when required for billing, security, legal obligations, audit logs, abuse prevention, backups, dispute resolution, or service operation.

SECURITY

We use technical and organizational measures intended to protect account and service data, including access controls, token hashing, revocation flows, logging, and operational monitoring.

No system is perfectly secure. Report security concerns through the support or operator contact path published on the site.

CHANGES

We may update this Privacy Policy as HEXBIRD changes. Material changes will be posted on the site or communicated through the service. Continued use after changes become effective means the updated policy applies.