Indian Virtual · Legal
Last updated: May 9, 2026
Indian Virtual ("we", "us", "INVA") operates the Crew Center at https://indianvirtual.site/crew and the main website at https://indianvirtual.site. This policy explains what personal data we collect when you use our platform, why we collect it, how we protect it, and what rights you have over it.
Indian Virtual is an informal virtual airline community built around the Infinite Flight simulation platform. We are not a registered legal entity. For all privacy-related matters, contact us at ceo@indianvirtual.site.
2.1 Account data via Discord OAuth
We authenticate exclusively through Discord's OAuth 2.0 service. When you log in, Discord provides us with your Discord user ID, username, display name, avatar hash, and email address. We do not store your Discord password.
2.2 Crew profile data
—
IFC (Infinite Flight Community) username — provided by you on registration
—
Pilot rank and accumulated flight hours
—
Permissions level (e.g. staff access)
—
Last active timestamp
2.3 Flight records (PIREPs)
—
Flight number, date, and block time
—
Departure and arrival ICAO codes
—
Aircraft type, operator, and earnings multiplier
—
Pilot and admin comments, approval status, and review timestamps
2.4 Contribution and payment data
—
IFC name and optional Discord ID associated with a contribution
—
Contribution amount and target goal
—
Manual UPI confirmation reference generated by our platform — we do not store card numbers, UPI handles, or bank account details
—
Lotus Privé join date, monthly pledge status, and Discord avatar URL for the member showcase
2.5 Technical data
—
Session token stored in an HTTP-only cookie managed by NextAuth.js
—
SimBrief OFP routing data tied to your dispatch (not personal data)
—
To authenticate you and maintain your session
—
To operate your pilot profile, track rank progression, and calculate flight hours
—
To review and record PIREP submissions
—
To deliver Discord notifications — PIREP status updates, rank promotions, and inactivity notices — via our Discord bot and server webhooks
—
To record voluntary UPI contributions confirmed by members
—
To assign or revoke Discord roles corresponding to your rank or Lotus Privé pledge status
—
To generate aggregate statistics displayed on the public stats page — no individual data is exposed
Discord — discord.com/privacy
Used for authentication and for delivering bot DMs and webhook notifications. Your Discord ID is shared with Discord when our bot assigns roles or sends you a message.
UPI payment apps
Contributions are paid manually through the UPI app selected by the member. We only receive the member's in-app confirmation and record the amount, goal, IFC name, and optional Discord ID. We do not collect card, UPI, or bank account credentials.
Vercel
Our platform is hosted on Vercel's infrastructure. Request and edge-network logs may be processed by Vercel under their data processing agreement.
Neon PostgreSQL & Upstash Redis
Pilot profile and PIREP data is stored in a PostgreSQL database hosted by Neon, Inc. Contribution totals, goal progress, and session caches are stored in Upstash Redis. Both providers are contractually bound to handle data securely.
Infinite Flight Live API
We query the Infinite Flight Live API using your IF user UUID to fetch your last ATC session. This is a read-only lookup — no personal data beyond the UUID is transmitted.
SimBrief (Navigraph)
Flight planning requests are routed through the SimBrief API using your SimBrief pilot ID. No personal data beyond the pilot ID and routing preferences is transmitted.
—
Pilot profiles and PIREPs — retained for as long as your account is active. On deletion request, personally identifiable data is removed within 30 days.
—
Contribution records — retained as financial records. Your IFC name and payment reference remain; your Discord ID can be anonymised on request.
—
Session tokens — expire automatically after 30 days of inactivity.
—
Lotus Privé showcase — your avatar and IFC name are removed after the monthly pledge grace period lapses.
You have the right to:
—
Request a copy of the personal data we hold about you
—
Request correction of inaccurate data
—
Request deletion of your account and associated personal data
—
Withdraw consent for optional uses such as the Lotus Privé showcase
Email ceo@indianvirtual.site with the subject line "Privacy Request". We will respond within 30 days.
We use a single first-party HTTP-only cookie to maintain your authenticated session via NextAuth.js. This cookie is strictly necessary for the platform to function and does not track you across other websites. We do not use advertising, analytics, or tracking cookies. Manual UPI payments open outside the browser in your selected payment app. Those apps may apply their own privacy and cookie policies.
We implement HTTPS for all data in transit, HTTP-only session cookies, server-side authentication checks on all protected endpoints, and restricted staff-only administrative tools. In the event of a breach affecting your personal information, we will notify affected members via Discord or email within a reasonable timeframe.
The platform is open to users aged 13 and above, consistent with Discord's minimum age requirement. We do not knowingly collect data from children under 13. If you believe a child under 13 has registered, contact ceo@indianvirtual.site and we will remove the account promptly.
This policy is governed by the laws of India, including the Information Technology Act 2000, the IT (Reasonable Security Practices) Rules 2011, and the Digital Personal Data Protection Act 2023. Any disputes are subject to the jurisdiction of courts in India.
We may update this policy from time to time. The date at the top reflects the most recent revision. For significant changes, we will post an announcement in our Discord server. Continued use of the platform after changes constitutes acceptance.
For privacy questions, data requests, or concerns: ceo@indianvirtual.site
Indian Virtual · Terms of Service · ceo@indianvirtual.site
