Legal
What Aircraft Worldwide collects, why we hold it, who else sees it, and how to get a copy or have it deleted.
Effective 30 July 2026
Aircraft Worldwide operates this marketplace and is the controller of the personal data described here. For questions or to exercise any right below, use our contact page.
Account. Your name, email address, phone number, city/region/country, and — if you register as a company — company name and description. Optionally a profile photo. Your password is handled by our authentication provider and is stored only as a hash; we never see it.
Selling. Listings you create, including photographs and any certification or traceability documents you upload.
Buying. Order records: what you bought, the amount, our commission, and the shipping name and address you entered. Buying does not require an account — if you check out as a guest we still create a minimal profile from the name, email and phone you provide, so the order and receipt work.
Messages. Messages and public questions you send through the site, and who they were sent to.
Usage. Coarse product events — a listing viewed, shared, messaged, or sold, and the sharing channel — used to run the marketplace and see what people are looking for. No cross-site tracking, no advertising identifiers.
Never.We do not receive or store card numbers, CVVs or bank details. Those are entered on the payment provider's own page.
The other side of your transaction.This is the important one. When a sale completes, the buyer and the seller each see the other's name, email and phone number, and the seller receives the shipping address — because the two of you deal directly from that point, including arranging shipping. That exchange is the point of the service.
Publicly. Your display name, seller location (city and state), verified status, rating, sales count, profile photo, and your active listings are visible to anyone. Your email, phone and full address are not public.
Processors — the only external services that receive personal data, each acting on our instructions:
We do not sell personal data, and we do not share it with advertisers or data brokers. We may disclose data where legally required, or to protect the rights and safety of users — including reporting suspected unapproved parts to an aviation authority.
Our providers are based in the United States and data is processed there. If you are in the EU, EEA, UK or Switzerland, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard under our processors' own terms.
Account data is kept while your account is open. Listings are kept while they are live, and a sold listing is retained rather than deleted because it is the record behind a buyer's receipt.
Order records are kept for seven years after the transaction, for tax and accounting purposes, even if you close your account. Where an order relates to a closed account, the personal details on it are reduced to what the record requires.
Usage events are kept in a rolling window and are not tied to an advertising profile.
Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format.
Deleting your account is self-service: go to your account page, open Profile, and use Delete account. That removes your profile, your photo, your unsold listings and your messages. Order records survive as described in section 6, with your personal details reduced.
If you are in the EU/UK you may complain to your local supervisory authority. If you are a California resident, you have the rights to know, delete, correct and opt out of "sale" or "sharing" under the CCPA/CPRA — we do not sell or share personal information as those terms are defined, and we will never discriminate against you for exercising a right.
We use a small number of first-party cookies and no third-party tracking cookies: a signed session cookie that keeps you logged in, a language preference, and an administrator session cookie for the operator. There is no advertising or analytics cookie, which is why you are not asked to accept a cookie banner.
Data is encrypted in transit. Passwords are hashed by our authentication provider. Session cookies are HTTP-only and signed so they cannot be tampered with in the browser.
Certification and traceability documents are stored in a private bucket and are never listed or browsable in bulk. They are served only through short-lived links generated for one document at a time, and search engines are instructed not to index them. However, anyone who can view a listing can open that listing’s paperwork — that is the point of publishing it, because a buyer cannot assess a part without seeing its 8130-3 or EASA Form 1. Treat anything you attach to a listing as visible to prospective buyers, and redact any detail on those forms you would not show them.
No system is perfectly secure. If a breach affects your personal data and is likely to present a risk to you, we will notify you and the relevant authority as required by law.
The marketplace is for people aged 18 and over. We do not knowingly collect data from children, and we will delete it if we discover we have.
If we change this policy we will update the effective date above, and for material changes we will make that clear on the site. Continuing to use Aircraft Worldwide after a change means you accept the updated policy.
