Legal
Privacy Policy
This Privacy Policy explains what information AVXact collects, how we use it, and the choices and rights you have — across the AVXact website and mobile app.
Effective Date: July 1, 2026
1. Overview & Scope
This Policy applies to AVXACT, LLC's ("AVXact," "we," "us") website and iOS mobile app (together, the "Service"). AVXact is a US-based aviation marketplace, and the Service is directed at users in the United States. By using the Service, you agree to the collection and use of information as described here, alongside our Terms of Service.
2. Information We Collect
Account information: name, email address, phone number, password (or OAuth sign-in identifier), and role (buyer, broker, or retail seller).
Listing and aircraft data: specifications, maintenance history, and photographs submitted by sellers. Tail numbers and serial numbers are treated as sensitive and are redacted from non-broker users in off-market contexts.
Verification information: for broker and retail seller onboarding, a government-issued ID uploaded for identity verification. This is stored encrypted and is accessible only to AVXact reviewers during the application review.
Usage and device data: pages viewed, actions taken, IP address, and device/browser information, collected automatically as you use the Service.
Communications: messages, inquiries, and support requests you send through the Service.
3. How We Use Information
We use the information we collect to operate the marketplace (publish listings, route inquiries, manage off-market access), verify broker and retail seller identity, secure accounts (including two-factor authentication), send transactional and account-related communications, respond to support requests, and improve the Service.
6. Data Retention
We retain account and listing information for as long as your account is active and as needed to operate the Service. When you delete your account, associated encrypted audit records are cryptographically destroyed within minutes, rendering the underlying personal data permanently unreadable.
7. Data Security
We use encryption in transit and at rest, signed and time-limited URLs for photo uploads and downloads, and support two-factor authentication (TOTP) on eligible accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Privacy Rights
Regardless of where you live, you may request access to, correction of, or deletion of your personal information by emailing privacy@avxact.com. We will verify your identity before fulfilling a request and will respond within a reasonable time.
9. California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to: know what personal information we have collected about you in the preceding 12 months and the categories of sources, purposes, and third parties involved; delete personal information we hold about you, subject to certain exceptions; correct inaccurate personal information; and opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined by the CCPA/CPRA.
We will not discriminate against you for exercising any of these rights. You may designate an authorized agent to make a request on your behalf; we may require proof of that authorization. To exercise a CCPA/CPRA right, email privacy@avxact.com.
10. Additional State Privacy Rights
Residents of other US states with comprehensive privacy laws generally have a similar bundle of rights: to know what personal information we hold about you, to delete it, to correct it, and to opt out of its use for targeted advertising or sale (we do not engage in either). To exercise any of these rights, email privacy@avxact.com and identify your state of residence; we will apply the protections your state's law provides.
11. Children's Privacy
The Service is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.
12. Mobile App Data
The AVXact iOS app requests access to your camera and photo library so sellers can capture and upload listing photographs, and requests permission to send push notifications for inquiry, off-market access, and account activity updates. You can revoke either permission at any time in your device's Settings app; doing so may limit the features available to you.
13. International Data Transfers
The Service is hosted in the United States and directed at US users. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
14. Changes to This Policy
We may update this Policy from time to time. If we make a material change, we will update the Effective Date above and, where appropriate, notify you directly.
15. Contact Us / Exercising Your Rights
Questions about this Policy, or requests to exercise any privacy right described above, can be sent to privacy@avxact.com.