AerSynx
Request a demo →
Privacy

What this site collects, and why.

This notice covers this website. If your organisation uses the AerSynx platform, the processing of your operational data is governed by the agreement and the data processing terms signed with you, not by this page.

Last updated 04 Nov 2026

01 · What we collect

Three things. First, what you type into the demo request form — your name, work email, organisation, kind of organisation, fleet size (asked only of operators, lessors and CAMOs), users in the first phase, your message and, if you choose to tell us, how you heard about us. Second, measurement of which pages get read: a cookie-free page count for every visit, Google Analytics only if you allow Statistics, and the LinkedIn Insight Tag only if you allow Marketing. Third, if we write to you first, the business contact details we found in a public source — see Business outreach below.

  • Your browser sends an IP address and a user-agent with every request, as it does to every website. Our hosting provider records these in short-lived operational logs to serve the page and to stop abuse.
  • If you email us directly, we keep that correspondence in our mailbox, like any company, and a short note of it in our contact system.
  • There is no advertising pixel on this site, no embedded video and no third-party font. We do not sell your data and we do not use it to build an advertising profile.
02 · Cookies and measurement

Cookies are sorted into three categories, and only the first is used without asking. Necessary storage keeps the site working. Statistics loads Google Analytics, so we can see which pages get read. Marketing loads the LinkedIn Insight Tag, so we can see how our LinkedIn ads perform, and lets Google use its advertising signals. Both Statistics and Marketing start switched off. Until you allow a category, its script is not loaded at all and nothing is sent to Google or LinkedIn; rejecting costs you nothing on this site.

  • Necessary, always on and never sent anywhere: the position you had scrolled to, so the page does not jump when you navigate, and your answer to the cookie question, so we do not ask again on every page.
  • We also count page views with Cloudflare Web Analytics. It sets no cookies and stores nothing in your browser, and Cloudflare does not use your IP address or browser details to recognise you, so it runs without asking. It tells us how many pages were read and where visitors came from, nothing about who they are.
  • Statistics (Google Analytics): the cookies _ga and _ga_ followed by our measurement ID, each kept for two years. Google receives the pages you read and coarse device details, and processes them outside the European Union under the EU–US Data Privacy Framework. IP addresses are anonymised before processing.
  • Marketing (LinkedIn Insight Tag): on this site LinkedIn can set li_fat_id, kept for thirty days, and li_giant, kept for seven days. LinkedIn also uses cookies on its own domain, linkedin.com, such as bcookie (one year), li_sugr (ninety days), UserMatchHistory and AnalyticsSyncHistory (thirty days) and lidc (one day). LinkedIn receives the pages you visit here and can match them to a LinkedIn account if you have one. Marketing also allows Google to use its advertising cookies, such as _gcl_au.
  • You can change each category at any time under Cookie settings, at the bottom of this page and in the footer of every page. Switching a category off deletes that category's cookies on this site and stops anything further being sent. Cookies that Google or LinkedIn keep on their own domains, such as linkedin.com, cannot be removed by this site; you can delete them in your browser or in your LinkedIn settings. Switching off removes nothing you have already told us through the form.
03 · Why, and on what basis

We use what you send to answer you. That is the whole purpose. The lawful basis is our legitimate interest in replying to somebody who asked us a question, and your own step towards a possible contract.

  • Addresses sent to us through the demo form are used to answer you. We do not add them to outreach emails unless you ask us to.
  • We do not sell or share this information with anyone outside the processors listed below.
  • For Google Analytics and the LinkedIn Insight Tag the basis is your consent, and nothing else. The cookie-free page count stores nothing on your device and identifies nobody; we run it under our legitimate interest in knowing which pages are read. We do not claim a legitimate interest in tracking you.
04 · Business outreach

Sometimes we write first. We email people at aviation companies whose work is close to what AerSynx does — parts traders, maintenance organisations, CAMOs, lessors — about their business, at a business address.

  • Where the address comes from: a public business source — the company's own website, a LinkedIn profile, an industry directory or trade-fair list, or a company register. We record the source and the date next to the address, and the first email tells you which one it was.
  • What we keep: your name, your work email address, your company, your role if the source gives it, the emails we exchange, and a note of our sanctions check, with its date and result. Before writing, we check the company and its publicly listed owners and managers against public sanctions lists.
  • Why, and on what basis: to tell you about AerSynx and to answer if you reply. The lawful basis is our legitimate interest in offering software to businesses it may be useful to (GDPR Article 6(1)(f)).
  • How often: one email and at most one follow-up.
  • Saying no: reply with anything to that effect, or write to privacy@aersynx.com. We stop at once and do not ask why. If you also ask us to delete what we hold, we keep only a one-way fingerprint of your address, so it is not added back by mistake. You can object to this use of your data at any time, and we always honour that objection.
  • How long: the same rule as every contact record, described under How long we keep it — the record is anonymised automatically twenty-four months after our last contact.
  • Who sees it: the same contact system described under How long we keep it, inside the AerSynx platform in the European Union, seen only by AerSynx staff. Emails are sent from an AerSynx mailbox.
05 · Where it is processed

The AerSynx platform keeps its data in the European Union: its database, hosting and error monitoring run in the regions listed below. This website is different. It runs on Cloudflare's global network, so a request to it, including a demo form submission, can be handled at a Cloudflare location outside the EU on its way to us. Google Analytics and the LinkedIn Insight Tag can be processed outside the EU, and only if you allowed them.

  • Platform database — Supabase, eu-west-1 (Ireland)
  • Platform hosting — Vercel, dub1 (Dublin, Ireland), for the AerSynx application, not this website
  • Platform error monitoring — Sentry, EU region (Germany)
  • Website and demo form — Cloudflare Workers, on Cloudflare's global network. Your form submission passes through it before it is recorded in our contact system and emailed to us
  • Email delivery — Resend, for system email sent from noreply@aersynx.com, including the demo request that reaches our inbox
  • Mailboxes — Microsoft 365, for email to and from aersynx.com addresses, including privacy@aersynx.com and the emails described under Business outreach when they are sent from aersynx.com
  • Page counts — Cloudflare Web Analytics, cookie-free, served from the edge location nearest you
  • Statistics — Google Analytics, processed outside the EU under the EU–US Data Privacy Framework. Only loaded if you allow Statistics
  • Marketing — LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company, which can process the data outside the EU. Only loaded if you allow Marketing
06 · How long we keep it

A demo request is kept in two places: our mailbox, and a contact record in our own customer-relationship system, which runs inside the AerSynx platform in the European Union and can be seen only by AerSynx staff — never by the platform's customers. The record holds what you sent us and short notes of our conversations with you. We keep both for as long as the conversation is live, and for up to twenty-four months after our last contact, so that we can recognise you if you come back. After that the record is anonymised automatically: your name, email address and the text of our messages are removed, and only anonymous counts remain. Ask us to delete it earlier and we will, without asking why. If you also ask us never to write to you again, we keep only a one-way fingerprint of your email address, so that it is not added back by mistake.

07 · Your rights

Under the GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable form, and object to our processing it. Write to the address below and we will answer within one month.

  • If you think we have handled your data badly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the supervisory authority where you live.
08 · Changes

If this notice changes in a way that affects you, we will change the date at the top of this page. We do not keep an archive of earlier versions yet; when we do, this sentence will say so.

Who we are

AerSynx OÜ, registered in Estonia.