Last updated: 6 July 2026
The data controller is AeroFusion Consultants Limited (trading as atas.aero) (“we”, “us”),
registered in Scotland, Company No. SC825730, registered office 16–18 Weir Street, Falkirk FK1 1RA.
ICO registration C1976476.
Privacy contact: contact@atas.aero. This policy covers the
tools at tools.atas.aero and atas.aero including its subdomains (Cost Intelligence,
Lease & Redelivery, Engine Evaluation, the data-pack uploads, and the Profilers). Our marketing
site and paid engagements may be covered by separate terms.
| Data | Why | Stored? |
|---|---|---|
| Documents/text you paste, or a PDF you upload, into a tool | To produce the indicative analysis | Not stored by default. It is processed transiently to generate the result, then discarded. The only exceptions are choices you make explicitly — the data-pack hold and the “share to improve” opt-in below — and ATAS’s own staff test runs (next row). |
| Indicative analysis output (the aggregate Tier-01 result) | Quality review by a human and to improve the tool | Retained, anonymised. Does not contain your source documents. |
| Full extraction (“data pack”) from PDF processing — the detailed fields extracted from your document, with confidence scores and a short verbatim excerpt around each value (a sentence-level snippet, not the full document) so a reviewer can verify it against the source | So you can request the full data pack / a verified spreadsheet (paid Stage 1(a)) | Stored only with your explicit choice at the end of a run: either held for 14 days with no human access and then automatically deleted, or deleted within 24 hours. A person at ATAS can open it only if you ask us to release it (e.g. to buy the data pack), and that release is logged. |
| Test/demo runs submitted by ATAS staff | Demonstrations and quality testing with realistic data | Stored and visible to ATAS — this is our own, or NDA-covered, test data, not another customer’s. |
| “Share to improve the tools” extraction (opt-in, under NDA) | To build our evaluation set and improve prompts/methodology | Stored only if you opt in under an NDA; anonymised before use; you can withdraw at any time. |
| Email address (optional) | So we can follow up or send updates if you ask | Stored if you provide it. |
| Feedback (rating + comment) | To improve the tools, prompts and methodology | Stored. |
| Feedback “share this run” snapshot (opt-in) | To reproduce and fix a specific result | Stored only if you tick the box; deleted once incorporated into an improved version. |
| “What are you hoping to learn?” (optional, at the data-pack gate) | So the preview can answer your goal, and so Tier-2/3 enquiries reach a person | Stored with the run record (your text + a category) only if you enter it. Never required; never affects what the preview shows. |
| Profiler responses + scores | Aggregated team view for a contracted engagement | Stored only with your consent and a workspace link; aggregates are small-N suppressed. |
| Bot-check signal (Cloudflare Turnstile, when enabled) | To block automated abuse of the free extraction | A pass/fail token is verified server-side per run; we do not store the browser signals Cloudflare processes to produce it. |
| Page-view analytics (Vercel Web Analytics) | Aggregate usage of the tools — which pages are used, when | Cookieless and aggregated; no cross-site tracking, no advertising use. |
| IP address | Rate-limiting / abuse prevention; standard server logs | Used transiently for rate limiting; not used to profile you. |
| Admin sign-in email | Magic-link login to the admin dashboard (staff only) | Stored for admin accounts only. |
Please do not paste special-category personal data. The tools are designed for commercial documents, not personal data.
We use a small number of providers who process data on our behalf:
Where a provider processes data outside the UK/EEA (e.g. Anthropic in the US), we rely on the provider’s data-processing terms incorporating appropriate safeguards (UK IDTA / EU SCCs).
The public tools set no tracking or advertising cookies. We measure aggregate page views with Vercel Web Analytics, which is cookieless — nothing is stored on your device and no user-level or cross-site identifier is created, so no consent banner is required. Analytics data is used solely to improve the service and never for advertising or profiling. If you object to this measurement, contact contact@atas.aero. The admin dashboard uses essential browser storage for sign-in only.
You may request access, rectification, erasure, restriction, objection, or portability, and may withdraw consent at any time. Contact contact@atas.aero. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).
If you are unhappy with how we have handled your personal data, email contact@atas.aero with the subject line “Data protection complaint”. We will acknowledge your complaint within 30 days of receipt (DUAA 2025 / s.164A DPA 2018), investigate it, and reply with the outcome and any steps we are taking. Complaints are owned by the director responsible for data protection and logged (date received, acknowledged, resolved, outcome) so we can evidence the process. You may also complain directly to the UK Information Commissioner’s Office at ico.org.uk at any time.
Secrets are held server-side only; database access is governed by row-level security and data is encrypted at rest and in transit (TLS). A held data pack (§5) is additionally protected by column-level access control, so its contents are withheld even from ATAS staff until you request release; each release is recorded against the staff account that made it.
We may update this policy; the “last updated” date will change. Material changes will be highlighted in the tools.