Privacy Policy
Version 2026-07-30
Draft — not yet reviewed by a lawyer
This document was drafted by the PlaneSell engineering team to describe how the platform actually behaves. It has not been reviewed by a qualified legal professional and must be before PlaneSell accepts real users. It is published here so the behaviour it describes can be checked against the software.
This policy describes what PlaneSell does with personal data. It is written to match what the software actually does — the technical policy it implements is published at docs/data-retention.md in our repository.
What we collect
Account data: your name, email address and a hash of your password. We never store your password itself.
Activity you create: aircraft you save, searches you save, and messages you send to sellers through the platform.
Session data: a session identifier, and the IP address and browser description of devices you sign in from, so you can see and revoke them.
Listings, if you sell: your seller profile and the aircraft you publish.
We do not use analytics or advertising trackers, and we set no cookies other than the one that keeps you signed in.
What we do not collect
We do not collect payment details, because PlaneSell does not process payments. We do not buy personal data from third parties, and we do not enrich your profile from other sources.
Aircraft registry data we hold comes from public registers and describes aircraft, not people. The Dutch ILT register we ingest deliberately publishes no owner names, and we do not attempt to identify owners from other sources.
Why we are allowed to hold it
Contract: your account, your listings and your messages exist because you asked for a service that requires them.
Legitimate interests: security logging, fraud prevention, and keeping a record of enquiries for the seller who received them.
Consent: optional alerts about saved searches. You can turn these off without affecting anything else.
Legal obligation: retaining evidence that you accepted these terms.
Who sees it
Sellers never receive your email address. Messages stay on the platform, and a seller sees only the name on your account and what you write to them. The reverse is also true: we do not give you a seller’s address or telephone number.
We use a third-party provider to deliver transactional email such as password resets. No other processor receives your personal data.
How long we keep it
Sessions expire after 30 days. Password reset links expire in one hour, confirmation links in 24 hours. Security audit records are kept for 24 months. Your account data is kept until you delete it.
Your rights
You can download everything we hold about you as machine-readable JSON, at any time, from your account page. That covers your right of access and of data portability.
You can delete your account from the same page. Because deletion is irreversible we ask for your password again first. What happens is described plainly before you confirm, and in full below.
You also have the right to correct inaccurate data, to object to processing based on legitimate interests, and to complain to your national data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.
What deletion actually does
We do not think “deleted” should be vague, so precisely:
- Your name, email address and password are irreversibly replaced. There is no archive copy.
- Saved aircraft, saved searches, sessions and pending links are deleted outright.
- Enquiries where the seller never replied are deleted entirely.
- Where a seller did reply, the conversation remains in their account with your messages replaced by a removal notice. They have their own interest in a negotiation they took part in, and we cannot erase it from their side on your instruction alone.
- Listings you published are withdrawn from sale and your seller profile is anonymised.
- Aircraft records and price history remain, because they describe an aircraft and a market rather than you.
Cookies
PlaneSell sets exactly one cookie: planesell_session, which keeps you signed in. It is strictly necessary for a service you asked for, so it does not require consent and there is no cookie banner. It is HttpOnly, SameSite=Lax, and secure in production.
If we ever add analytics, this policy will change and we will ask first.
Contact
Data protection enquiries: privacy@planesell.com. The controller is the operator of PlaneSell; full legal entity details are to be completed before launch.