Airsup
Privacy Policy
Contents
1. Who we are
Airsup ("we", "us", "our") is a company incorporated in the United States. We operate the platform at airsup.ai and airsup.dev, which uses AI to connect hardware startups with manufacturing factories.
For questions about this policy, contact us via Support.
2. Data we collect
Information you provide
- Account data: email address, role (startup or supplier), company name.
- Profile data: company description, product details, manufacturing capabilities, location, certifications, minimum order quantities.
- Project data: product briefs, uploaded files, conversation messages with our AI and with matched factories.
Information we collect automatically
- Usage data: pages visited, clicks, session duration.
- Device data: browser type, operating system, IP address, referring URL.
- Cookies and similar technologies: see Section 11.
Information from third parties
- Authentication data from Supabase (our database and auth provider).
- AI processing via Anthropic (Claude models). Your project descriptions and messages may be processed to generate matches and responses.
3. How we use your data
- Create and manage your account.
- Match startups with suitable factories using AI.
- Facilitate communication between matched parties.
- Send transactional emails (magic-link login, match notifications).
- Improve our platform, train internal models, and debug issues.
- Comply with legal obligations.
4. Legal basis for processing GDPR
If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data under the following legal bases:
- Contract performance to provide you the Airsup service.
- Legitimate interests (product improvement, fraud prevention, and security, where not overridden by your rights).
- Legal obligation when required by law.
- Consent for any optional communications or processing where we ask for it.
5. Data sharing
We do not sell your personal data. We share data only in these circumstances:
- Matched counterparties: when an AI match is confirmed, basic profile information is shared between the startup and the factory.
- Service providers: Supabase (hosting & database), Anthropic (AI processing), Vercel (platform hosting), and email delivery providers, all under data processing agreements.
- Legal requirements: when required by applicable law, court order, or to protect our rights.
- Business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.
6. International data transfers
Airsup is based in the United States. Our service providers may also process data in other countries. If you are in the EEA, UK, or Switzerland, your data may be transferred to countries that may not provide the same level of data protection as your home country.
We protect such transfers using Standard Contractual Clauses (SCCs) approved by the European Commission, and by selecting providers that maintain appropriate safeguards (e.g. EU-US Data Privacy Framework where applicable).
7. Data retention
We retain your data for as long as your account is active or as needed to provide the service. You may delete your account at any time by contacting us. After deletion, we may retain certain data for up to 90 days in backups before permanent deletion, and longer if required by law.
8. Your rights GDPR
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erasure ("right to be forgotten"): request deletion of your data.
- Portability to receive your data in a machine-readable format.
- Restriction to ask us to limit processing.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where consent is the legal basis.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us via Support. We will respond within 30 days.
9. California residents CCPA
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:
- Know what personal information we collect, use, disclose, or sell.
- Delete personal information we hold about you.
- Correct inaccurate personal information.
- Opt out of sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
- Non-discrimination for exercising your privacy rights.
To submit a CCPA request, contact us via Support and mention "California Privacy Request". We will respond within 45 days.
10. China residents PIPL
If you are located in the People's Republic of China, your personal information is processed in accordance with the Personal Information Protection Law (PIPL). By using Airsup, you consent to your personal information being transferred to and processed in the United States and other countries where our service providers operate.
You have the right to access, correct, delete, and transfer your personal information, and to withdraw consent. To exercise these rights, contact us via Support.
11. Cookies
We use minimal cookies, primarily session cookies necessary for authentication (managed by Supabase Auth). We do not use advertising or third-party tracking cookies. You can disable cookies in your browser, but some features of the platform (such as staying logged in) will not work.
12. Children
Airsup is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify registered users by email. Continued use of the service after changes take effect constitutes your acceptance of the updated policy.
14. Contact us
Airsup
United States
Contact via Support page