Privacy Policy
Last updated: May 2026
Who we are
CompAeros is an aircraft marketplace intelligence and transaction-readiness platform. For questions about this policy, contact us at [email protected].
What we collect
We collect information you provide directly: account details (name, email address), onboarding profile (role, aircraft preferences, mission parameters), deal room and comparison data you create, contact form submissions, and communications you send us.
We also collect information automatically when you use the platform: usage analytics (pages visited, features used), session identifiers stored in Cloudflare D1, and cookie consent preferences.
How we use your data
We use your data to: provide and improve the platform, personalise aircraft intelligence to your mission profile, communicate with you about the service, qualify buyer and broker workflows, and comply with legal obligations.
We do not sell your personal data. We do not use your data to train AI models for external purposes.
Lawful basis
We process your data under the lawful bases of: contractual necessity (to provide the service you signed up for), legitimate interests (to improve the platform and prevent abuse), and consent (for marketing communications and optional analytics).
Data retention
Account data is retained while your account is active and for 12 months after deletion, unless a longer period is required by law. Session data is retained for 30 days. Contact form submissions are retained for 24 months.
Your rights
You have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact [email protected]. We will respond within 30 days.
Third-party services
The platform uses Cloudflare (hosting, CDN, D1 database, R2 storage, Workers), Google (OAuth sign-in), and Google Fonts (typography). Each sub-processor operates under its own privacy policy. We do not currently use third-party analytics services beyond what Cloudflare provides by default.
Cookies
We use essential cookies for authentication sessions and cookie consent preferences. See our Cookie Policy for details.
Security
We use HTTPS-only with HSTS preload, Content Security Policy, server-side session management, and row-level data scoping. See our Security page for technical details.
Changes to this policy
We may update this policy as the platform evolves. Material changes will be communicated by email to registered users or by a prominent notice on the site.