Privacy Policy

1. Who We Are

BuyJet.aero is operated by AeroMatch Group DWC-LLC, Dubai South Free Zone, Registration No. 12896, registered office at Business Centre, Floor 3, Building A3, Business Park, Dubai South, Dubai, UAE ("AeroMatch", "we"). AeroMatch is the controller of personal data processed through the Platform. Contact: info@buyjet.aero.

2. Data We Collect

• Account data: name, email, phone number, company details, country, password (hashed).
• Verification data (sellers): documents evidencing ownership of, or authority to sell, a listed aircraft — e.g., registration certificates, corporate authorizations, mandate letters, and identity documents of signatories.
• Listing data: aircraft details, photos, price, and the contact details you choose to associate with a Listing.
• Lead and communications data: messages and inquiries sent through the Platform's contact forms, and related metadata.
• Payment data: billing details and transaction records for listing/storefront fees (card data is processed by our payment provider (Stripe, once paid features launch); we do not store full card numbers).
• Usage data: device, browser, IP address, pages viewed, search filters, saved searches, favorites, and similar analytics data (see Cookies Policy).
• Public registry data. We ingest publicly available civil-aircraft registry data published by aviation authorities (currently: US FAA, Australia CASA, Canada CCAR, Netherlands ILT, Norway NLR, Spain AESA, Cayman Islands CAACI). Where a registry file contains personal data — for example an individual owner's name — we store it solely to support listing verification and we do not display it publicly, except for US FAA registry data, which the FAA itself publishes and which we display consistent with that public source. Registry attributions are listed on our Data Credits page (/data-credits).

3. How Contact Details Are Displayed

Your email and postal address are never displayed publicly on a Listing. Buyer inquiries are routed through the Platform's lead forms. If you choose to display a phone number on your Listing, it will be publicly visible; this is optional and controlled by you.

4. Purposes and Legal Bases (PDPL)

We process personal data: (a) to provide the Platform and perform our contract with you (accounts, Listings, leads, payments); (b) to perform Verification checks, prevent fraud, and screen against applicable sanctions lists (compliance with legal obligations and our legitimate interests in platform integrity); (c) to send service communications and, with your consent, marketing and saved-search alerts (consent, withdrawable at any time); (d) to improve and secure the Platform (legitimate interests); and (e) to comply with law, regulation, and lawful requests from competent authorities.

5. Sharing

We share personal data with: (i) service providers acting on our instructions (hosting, payments, email/SMS, identity/sanctions screening, and, if adopted in the future, analytics providers); (ii) the seller you contact, when you submit a lead on a Listing; (iii) Services Hub providers (inspection, escrow, insurance, finance), only where you request contact with, or are referred to, that provider; (iv) professional advisers; and (v) authorities where required by law. We may receive a fee from Services Hub providers for referrals. We do not sell or share personal information as defined by the CCPA/CPRA. If that ever changes, we will update this policy and provide any required opt-out before doing so.

6. International Transfers

We operate from the UAE and use service providers that process data in the EU and the United States: Neon (database hosting, Frankfurt, Germany), Vercel (application hosting) and Vercel Blob (file storage), and Resend (email delivery, Ireland). Our safeguards for these transfers are our contractual commitments with those processors, together with your consent given at signup.

7. Retention

We keep personal data only as long as needed for the purposes above: account data for the life of the account plus 2 years; Verification documents for 5 years after the Listing ends; lead communications for 2 years; payment records for at least 5 years as required by UAE law.

8. Your Rights

All users (PDPL): you may request access to, correction or deletion of, or restriction of processing of your personal data; object to processing; withdraw consent; and request data portability, subject to legal limits. Contact info@buyjet.aero. You may lodge a complaint with the UAE Data Office.

US state residents (California, Virginia, Colorado, Connecticut, Utah, and similar): you may have rights to know/access, correct, delete, obtain a portable copy, opt out of targeted advertising and of "sale"/"sharing" of personal information, and not be discriminated against for exercising rights. Submit requests to info@buyjet.aero. We will verify your identity and respond within the statutory period. Authorized agents may submit requests with proof of authority.

9. Security

We apply appropriate technical and organizational measures (encryption in transit, access controls, logging). No system is perfectly secure; notify us immediately of any suspected account compromise.

10. Children

The Platform is not directed to anyone under 18 and we do not knowingly collect their data.

11. Changes

We will post any updated version here with a new date and notify registered users of material changes.