HANGAR VISTA POLICIES
Privacy policy
How Hangar Vista handles information used by the aircraft marketplace.
Preview policy · Revised October 16, 2026. Legal operator details and final policy review remain pending.
Information we collect
Accounts contain your email address, password hash, verification status, session records and security events. We store account passwords as salted hashes, not readable passwords. Contact profiles may contain your name, email and phone. Seller listings contain aircraft specifications, descriptions, prices, location and any coordinates you provide. Uploaded media can include photos, video, walkaround sequences, 3D models and private PDF logbooks. We also store private listing conversations, access grants, favorites, saved searches, business profiles and support tickets you submit.
Public and private information
Published aircraft information and listing media are intended for marketplace visitors. An enabled dealer or broker profile is displayed with its active inventory. Drafts and account contact profiles are not public listings. Listing conversations are limited to their participants. Logbook PDFs require the seller’s permission for the selected buyer account. Administrator status does not grant access to those PDFs. Review uploads for personal information before sharing them.
Why we use information
We use this information to operate accounts, display aircraft, connect buyers and sellers, save preferences, manage document access, troubleshoot problems, respond to support and privacy requests, and moderate abuse. Account information is not automatically linked to an account at another business. Listing publication generates promotional drafts and queues narration with public photos and video. When a publishing service is connected, these public details and media may be shared through configured promotional channels with a link to the listing. Private logbooks, account contacts and conversations are excluded.
Cookies, local storage and analytics
A secure account cookie keeps you signed in and expires after seven days unless replaced or revoked sooner. Your browser may keep interface preferences, guest analytics identifiers and temporary form state. Listing analytics record approximate interactions using hashed, listing/day-scoped visitor identifiers. Analytics rows do not store raw IP addresses or email addresses and are pruned after 90 days during event processing. Account security rate limits may use hashed IP/email identifiers. Hosting providers can separately process network and security logs. Clearing browser data may remove saved interface state or sign you out; account favorites and searches remain server-side.
Hosting, email and embedded media
The site uses OpenAI Sites hosting with Cloudflare-based database and file storage. Infrastructure providers process data to operate these services. If account email delivery is configured, the connected mail server handles the recipient address and email content, including verification/reset links. YouTube, Vimeo and externally linked media may receive network/browser information when their players or resources load and have their own privacy practices. Resend processes transactional account emails and generic message/support notices. iCloud hosts our incoming business mailbox. No paid checkout or automatic social posting is connected.
Optional AI support
Help-topic searches stay in your browser. AI use requires an explicit checkbox and an eligible signed-in account. When enabled, the current question and public help facts are sent to the configured model service. The application does not automatically send account records, support tickets, listing messages or private logbooks to that service. Do not include secrets or sensitive records in your question. The application does not retain an AI conversation transcript; the model host may separately log requests according to its configuration. AI is unavailable until a model service is connected.
Retention and your choices
Marketplace records remain while needed to operate your account and listings. Sellers can edit, mark sold or delete their listings; deleting a listing also removes its associated media and conversations. Removing a favorite or saved search deletes that saved record. Sessions and email codes expire; security events are pruned after 90 days during processing. Support tickets inactive for more than 180 days are deleted when a support ticket endpoint is used; there is no scheduled purge job. Backups and infrastructure logs may follow separate retention periods. Copies previously downloaded by other users cannot be recalled.
Privacy requests and contact
Use Help & support → Contact the team → Privacy / account deletion request to ask about access, correction, export or deletion. Include the account or listing involved, without passwords, recovery codes or private documents. We may need to verify account ownership before acting, and may retain records needed for security, disputes or applicable obligations. Account deletion/export currently requires a human review; submitting a request does not perform it automatically. You can also contact social@hangarvista.com without signing in; see /support. Legal operator details remain under review.
Age and policy changes
Accounts are intended for adults age 18 or older. Do not provide information about children or use the service to collect it. We may update this policy as features and providers change, with the revision date shown here. Material changes should be communicated before they take effect.