HangarVault

Privacy Policy

Last updated: March 30, 2026

1. Introduction

HangarVault ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our aviation marketplace platform ("Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email address, phone number, and display name when you create an account.
  • Identity verification data: When you complete identity verification through Stripe Identity, we receive verification status and a verification session ID. Stripe may collect government-issued ID images, selfie photos, and other biometric data as part of their verification process. This data is processed and stored by Stripe according to their privacy policy.
  • Payment information: Credit card details and billing information are collected and processed by Stripe. We do not store full credit card numbers on our servers.
  • Listing information: Aircraft details, photos, descriptions, and contact information you provide when creating listings.
  • Communication data: Comments, messages, and other content you post on the platform.
  • Professional credentials: A&P/IA certificate information if you choose to verify your aviation mechanic credentials.

2.2 Information Collected Automatically

  • Usage data: Pages visited, features used, bidding activity, and interaction patterns.
  • Device information: Browser type, operating system, device identifiers, and IP address.
  • Cookies and similar technologies: We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze platform usage.

3. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service
  • Process transactions, including auction bids and buyer's premium payments
  • Verify user identities to maintain platform integrity
  • Send notifications about bidding activity, auction results, and listing updates
  • Communicate important platform updates and policy changes
  • Detect, prevent, and address fraud, shill bidding, and abuse
  • Comply with legal obligations
  • Analyze usage patterns to improve the platform experience

4. Stripe Identity — Biometric Data Collection

Our identity verification process is powered by Stripe Identity. When you complete identity verification, Stripe may collect and process:

  • Images of your government-issued identification document
  • Selfie photographs for facial matching
  • Facial biometric data derived from selfie images for identity comparison
  • Name, date of birth, and address extracted from your ID

This biometric data is processed by Stripe and is subject to Stripe's Privacy Policy. HangarVault receives only the verification status (verified, pending, or failed) and a verification session identifier. We do not store your ID images or biometric data on our servers.

You may request deletion of your biometric data from Stripe by contacting us at privacy@hangarvault.com, and we will facilitate this request with Stripe.

5. Information Sharing & Disclosure

We may share your information in the following circumstances:

  • Service providers: We share information with third-party service providers who help us operate the platform, including Stripe (payments and identity), Supabase (data storage), Resend (email), and Escrow.com (transaction escrow).
  • Transaction counterparties: When you win an auction or complete a sale, limited contact information is shared with the other party to facilitate the transaction.
  • Legal requirements: We may disclose information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Transaction records, including bid history and auction results, are retained for a minimum of 7 years for compliance and dispute resolution purposes. You may request deletion of your account and associated data by contacting us, subject to our legal retention obligations.

7. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Row-level security policies on our database
  • Secure authentication through Supabase Auth
  • Regular security reviews and updates

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights — CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request a copy of the personal information we have collected about you in the past 12 months.
  • Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
  • Right to Opt-Out: You have the right to opt out of the sale of your personal information. As noted above, we do not sell personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at privacy@hangarvault.com or call us at the number provided below. We will verify your identity before processing your request.

9. Your Rights — GDPR (European Residents)

If you are a resident of the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You may request deletion of your personal data under certain circumstances.
  • Right to Restrict Processing: You may request restriction of processing of your personal data.
  • Right to Data Portability: You may request a copy of your data in a machine-readable format.
  • Right to Object: You may object to processing of your personal data for certain purposes.

Our legal bases for processing personal data include: performance of a contract (providing the Service), legitimate interests (platform security and fraud prevention), consent (identity verification and marketing), and compliance with legal obligations.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

11. Cookies Policy

We use the following types of cookies:

  • Essential cookies: Required for authentication and core platform functionality.
  • Analytics cookies: Help us understand how users interact with the platform to improve the experience.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions about this Privacy Policy, your data rights, or our privacy practices, please contact us at:

For CCPA or GDPR requests, please include "Privacy Rights Request" in your subject line and provide sufficient information for us to verify your identity.