Privacy

The short version

We keep what is needed to check that buyers are airlines and MROs, to pass your parts request to the suppliers you choose and to stop misuse, and we delete it on fixed dates (see How long we keep it). We do not sell data, show advertising or use analytics trackers. Nobody can pay to rank higher.

Just looking things up

Looking at AOG Finder needs no account; searching stock needs an approved company (see Buyer companies). Our hosting provider keeps short technical logs of page addresses. Our fonts are served by us. For offline use, your browser keeps copies of the front page and this page, but never a copy that shows your address or where your company's approval stands; your requests are never stored offline.

Buyer companies

AOG Finder is for airlines, MROs and repair shops. Search results, the documents of stock listings, requests for quote and parts requests are open only in a browser where you confirmed your work email, once your company is approved. To ask, you type your work email, your company's name and whether it is an airline, an MRO or a repair shop, and press Confirm in the email we send; nothing is kept before that click.

Then we keep your company's email domain (for an address at a free email service such as Gmail, the address itself: a whole free-mail domain is never approved), the company name and kind you typed, your address and those of colleagues who ask while it waits, and the decision: approved or denied, who on the AOG Finder team made it, when, and any note, with a log of each decision. Only the AOG Finder team decides, by hand, and only the team sees these records. The team gets an email when a company asks, and we email you when it is approved. Once a company is approved, everyone at its domain gets in after confirming their own address. A denied visitor is told so on the site, with an address to write to. When a company is denied, its open parts requests are closed: they leave the Parts Pool and take no more offers.

When you request a part

You give us the part number and any alternates, the quantity, an optional description, the tail number, the aircraft type and ATA chapter if you know them, the conditions, certificate and trade terms you accept, the aircraft's status and the priority, where the part goes (an airport, or a street address and its country), when it is needed, whether you are an airline, an MRO or other, and your name, company, email and phone. You also confirm the part is not for a place or party under sanctions; a request cannot be sent without it. A request can be sent only from a browser where you confirmed the email of an approved company, and with an address at that same company (for an address at a free email service, that same address).

The first request from an email address waits for one click in an email to that address; nothing goes to any supplier before it. A parts request can be confirmed until a day after its needed-by time; after that it is not sent. A request that was never sent is deleted after 7 days.

Each offer is emailed to you, and your private status page shows the offers with the supplier's contact person and proof files. Anyone who has the link to that page can open it, so keep the email to your team. A parts request, its offers and their files are deleted 12 months after the request was made, or 2 days after its needed-by time if that is later.

We keep a scrambled form of your network address (a salted hash, not the address itself) with each parts request and offer, to stop spam and misuse. Each supplier that received your request keeps its own copy under its own responsibility.

When you answer as a parts supplier

An offer keeps what you enter: the part number, serial or batch number, quantity, condition, certificate type and (tag) date, where the part is, the price, lead time, trade terms, a note, and a contact name, phone and email. The proof files are the certificate, the shop report for overhauled, repaired and serviceable parts, and a photo of the part if you add one. The requester sees all of it, and the proof files. An offer cannot be changed once sent; you can withdraw it until the requester selects it.

Proof files are JPG, PNG or PDF; the photo of the part is JPG or PNG. Photos are re-encoded, which removes their location and camera data. PDFs are checked for scripts, attachments and encryption and then kept as uploaded, so details such as the author stay in them. Certificates and shop reports usually show the names and signatures of the staff who signed them. Files are stored privately in our database with our hosting provider in the EU, never at a public address, and only the requester can open them, through their private link.

To catch dropshipping and copied documents, we compare serial numbers and file fingerprints across offers and stock listings. A match is flagged to the requester (“Duplicate serial: check before ordering”) and to the AOG Finder team. Withdrawn offers stay on record for that check until the request is deleted.

Stock listings

A vetted supplier can list parts it has in its own stock. A listing shows what the supplier enters: the part number, an optional description, the serial number, condition, certificate type and date, where the part is (city and country), the price and currency, the supplier's company name, and when it last confirmed the part in stock. Buyers of approved companies who search that part number see these. A listing also carries the certificate, the shop report for overhauled, repaired and serviceable parts, and a photo of the part if the supplier adds one, with the same file rules as offers. Like an offer, a listing keeps a scrambled form of the network address it was added from.

The certificate, shop report and any photo are shown only in a browser where a buyer of an approved company confirmed their email address once, with one click in an email we send; that address is then remembered like a requester's (see below). A listing the supplier has not confirmed in stock within 72 hours is hidden from everyone, and we email the supplier a reminder about 60 hours after the last confirmation. Sold and withdrawn listings are hidden at once.

A supplier can also upload a stock sheet (.xlsx or .csv) and the files it names. The sheet is read on our server and not kept. Each row goes through the same rules as a part added by hand: a row that fails is shown back with the reason and nothing of it is kept. A part the supplier lists already is confirmed in stock by the upload, unless the sheet gives it another condition or certificate; nothing else of the listing changes. The supplier's listings the sheet does not have are shown back to it, to mark sold or withdraw. A row that passes waits for its certificate, shop report and any photo its row names: until they are in, we keep the row's listing details, the file names written in the sheet, the files that arrived already and a scrambled form of the network address it came from (as for offers), shown only on the supplier's own Parts Pool page and never to buyers. If a later sheet has the same part, the waiting row takes that sheet's details and file names (and the scrambled address of that upload), and a file it no longer names is deleted. Once its files are in, it becomes a listing like any other. A row still waiting 30 days after its last change is deleted with its files.

“All still in stock” confirms every active listing of the supplier at once, and a stock sheet confirms the listed parts in it; we keep only the time of the confirmation, as for one listing.

Serial numbers and file fingerprints of listings are compared with other suppliers' listings and offers, as for offers. A listing and its files are deleted 12 months after it was sold or withdrawn, or 12 months after it was last confirmed in stock, the same 12 months offers are kept.

When you request a quote

Only a browser where a buyer of an approved company confirmed their email address once can press “Request a quote” on a stock listing, and only with that same address. You give the quantity, and optionally the date you need the part by, the airport to deliver it to and a note, with your name, company and that email, and optionally a phone number. You also confirm the part is not for a place or party under sanctions; a request for quote cannot be sent without it. We keep these with the listing you asked about, the supplier's contact as we sent it to you, and a scrambled form of your network address (as for requests). The listing itself does not change.

We email the supplier your request for quote: the listing, the quantity, any needed-by date, airport and note, and your name, company, email and any phone, so they can send you their quote; replying reaches you. We email you a copy with the supplier's request email and AOG phone; replying reaches them. You then deal directly, and each of you keeps the other's details under your own responsibility.

You get a private page for the request, and about a day later one email asking “Did they have the part?”. The answer is a Yes or No button on that page, given once; opening the email or the page answers nothing. A requester is asked the same about an offer they selected, on the request's private page. The supplier's record, shown to buyers with its listings and offers, counts only these answers (“Had the part 3 of 4 times”, or “No reports yet”), never who gave them. The AOG Finder team sees each “No” with the buyer's name, company and email, to check it with both sides. A request for quote and its answer are deleted 12 months after it was made, or earlier with its listing; an offer's answer goes with its request.

If your company is a vetted parts supplier

Only the AOG Finder team adds and vets suppliers. We keep your company's request email (which you confirm with one click), AOG phone, ATA chapters, aircraft types and stock locations, and a written note of each vetting decision: which airlines' approved vendor lists your company is on, and what was checked. Only the AOG Finder team sees the notes. Every request email has a link to pause them; the team sees that you paused. Your Parts Pool link shows open requests to whoever holds it, so keep it to your desk. When a buyer requests a quote for one of your listings, we email you their request and email them your company name, request email and AOG phone, and your record (buyers' answers to “Did they have the part?”) is shown with your listings and offers.

We keep these records while your company is a vetted supplier, and afterwards as the record of the vetting decision until you ask us to delete them.

Remembered addresses, cookies and browser storage

A remembered address. When you press Confirm in the email (for a parts request, or for your work email to use AOG Finder), we remember that the address was confirmed (in a normalised form), so later parts requests from it go out at once. Confirming shows the address is reachable; it does not prove who you are. The address is forgotten 12 months after its last use.

The two cookies are first-party and set only when you do something that needs them, so there is no cookie banner. Browser storage stays on your device and is never sent to us by itself. “Remove these links and my details from this device” on Your requests clears the links; your browser settings clear everything.

Emails we send

Emails go through Resend, our email provider, which handles their content to deliver them. Resend keeps a copy of each email we send, links included, for 30 days, and stores its records in the United States under its data processing agreement. We keep a record of each send (what kind of email it was, and whether it was delivered, bounced or marked as spam, with any error or bounce message, which can quote the address), not its content. Records of a request are deleted with it; other records after 12 months. We do not track whether emails are opened or links clicked.

Who else handles your data

Our hosting provider Railway runs the website and the database, which also holds the proof files, in its EU region. Resend sends our emails. Both Railway and Resend are companies based outside the EU; we use them under their data processing agreements. The AOG Finder team's mailbox, which holds the team's email copies, is hosted by Zoho in its EU data centre. The suppliers you send requests to, wherever they are, decide for themselves what they do with your details.

Data outside the EU

AOG Finder works worldwide for parts. When you send a request to a supplier outside the EU, your details go there because you chose them, to do what you asked. Suppliers in the Parts Pool may be anywhere, but the Pool never shows your contact details.

We refuse parts requests and requests for quote for delivery to Russia, Belarus, Iran, North Korea and Syria, or to airports in Crimea and the Russian-occupied areas of Ukraine, and offers and stock listings of parts held in those five countries. For a street address we rely on your statement that the part is not for a sanctioned place or party, and for suppliers on our vetting.

Why we may use your data

To do what you ask: passing your request or offer to the companies you choose, and showing you the answers. Our legitimate interests: keeping AOG Finder free of spam and misuse, vetting suppliers, and checking by hand that buyers are airlines and MROs. Legal duties: sanctions rules on aircraft parts. We do not rely on consent, and we make no automated decisions with legal or similar effects on you. Lists follow simple rules shown on each page: offers by readiness to ship, needed-by time and lead time; suppliers by the aircraft types and systems they stock.

How long we keep it

Deletion runs every night. Deleted data can stay in our hosting provider's backups for up to 4 weeks, then it is gone.

Your rights

Wherever you are, you can ask to see your data, to have it corrected or deleted, to restrict or object to how we use it, or to get a copy in a common format. Write to privacy@datawings.fi; we answer within one month. You can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the data protection authority where you live.

Changes to this page

When what we do with data changes, this page changes first, with a new date at the top.