Privacy Policy

Aerisus is a commodity brokering and trade logistics company based in San Antonio, Texas, United States. This policy explains how we handle personal information collected through www.aerisus.com, through email and other correspondence with us, and when we evaluate and carry out trade transactions.

Aerisus decides why and how that information is used. In European data protection terms, we are its controller. Questions about this policy, and requests about your information, go to hello@aerisus.com.

Contact form. The form asks for your name, your email address, and a message. Your phone number, your company, and the product or service you are interested in are optional. Nothing on the site asks you to create an account.

Correspondence. Whatever you include in emails, calls, and documents you send us.

Trade and compliance information. Before we issue offers or sign a contract, both sides complete know-your-customer (KYC) checks, and every counterparty is screened against OFAC, EU, and UN sanctions lists and for anti-money-laundering risk. This can involve company registration details, ownership and beneficial-ownership information, the identity and authority of the people who sign, bank details, and the results of that screening.

Please do not send identity documents or other sensitive information through the contact form. If a transaction needs them, we will agree a suitable way to exchange them.

Hosting logs.Our host, Vercel, records standard request logs when a page loads: the address requested, the time, your IP address, and your browser's user-agent string. Every website needs these to stay online and to defend itself from abuse.

Bot protection on the contact page. The contact form uses Cloudflare Turnstile to check that a message comes from a person, not a script. To do that, Turnstile processes technical signals from your browser, such as your IP address, TLS fingerprint, and user agent. It does not read what you type into the form. It runs on the contact page only. Cloudflare describes this processing in its Turnstile Privacy Addendum.

Domain routing.Cloudflare also runs our domain's DNS. If you type aerisus.com without “www”, that request passes through Cloudflare's network before it is redirected to www.aerisus.com.

Google Analytics, only if you accept it. If you accept analytics cookies, the site loads Google Analytics 4 so we can count visits and see which pages are useful. It then records the pages you view, how you arrived (for example, the site that linked to us), your approximate location derived from your IP address, and your device, browser, and screen size. Google Analytics does not store your IP address. We have switched off Google signals and ad personalization for it, so it is not used for advertising. If you do not accept, the Google Analytics script is never loaded and nothing is sent to Google.

What we do not use. No session recording or heat maps, and no advertising or social-media trackers. The typefaces are served from this site, so displaying a page does not contact a font service.

The site sets the cookies below and no others. It stores nothing in your browser's local or session storage. The Turnstile check on the contact page sets no cookie: we run it without Cloudflare's clearance cookie.

• cookie_consent, set by this site when you make a choice in the cookie banner. It remembers that choice so you are not asked on every page. Strictly necessary. Lasts 180 days.
• _ga, set by Google Analytics only if you accept analytics cookies. It tells one visitor's visits apart from another's. Lasts 2 years.
• _ga_VM7TWJFNL6, set by Google Analytics only if you accept analytics cookies. It keeps track of the current visit. Lasts 2 years.

On your first visit, a banner asks whether you accept analytics cookies. “Reject all” and “Accept all” are equal choices, and nothing optional loads until you choose. You can change your choice at any time with the “Cookie settings” link at the bottom of every page. Switching analytics off deletes its cookies. We ask again after 180 days, or sooner if we change what the site uses.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information. There is currently nothing to opt out of, because we do neither.

We use personal information only for the purposes below. The legal basis we rely on for each is shown after the dash.

• To answer your inquiry and discuss a possible transaction — at your request, and to take steps before entering into a contract.
• To evaluate, negotiate, and carry out trade transactions — to perform our contract with you or your company.
• To complete KYC, sanctions, and anti-money-laundering checks and keep the records they require — to comply with legal obligations, and in our legitimate interest in not dealing with sanctioned or fraudulent parties.
• To keep the website and contact form secure, block automated abuse, and investigate reports of fraud or impersonation — in our legitimate interest in protecting our business, our counterparties, and the people who contact us.
• To understand how the site is used and improve it, with Google Analytics — only with your consent, which you can withdraw at any time.
• To establish, exercise, or defend legal claims — in our legitimate interest, or where the law requires it.

We do not sell personal information, we do not share it for targeted advertising, and we do not use it to build advertising profiles. Where we rely on legitimate interests, you can object, as described under Your rights.

Service providers, each limited to its own role:

• Vercel hosts the website.
• Mailgun delivers contact-form messages to our inbox.
• Zoho hosts our company email, where inquiries are kept.
• Cloudflare runs our DNS and the Turnstile check on the contact form.
• Google provides Google Analytics, only if you accept analytics cookies.

Parties to a transaction, only as far as the transaction requires: banks and other financial institutions, independent inspection agencies, logistics and shipping providers, and the other parties to the trade.

Advisers and authorities. Our professional advisers (lawyers, accountants, auditors), who are bound by confidentiality; and regulators, courts, law enforcement, or other authorities when the law requires it or to protect rights and safety.

Business transfers. If Aerisus is involved in a merger, acquisition, or sale of assets, information may pass to the successor, subject to this policy.

Aerisus is based in the United States, and our service providers process information there. If you contact us from another country, including from Latin America, the European Economic Area, or the United Kingdom, your information is transferred to and processed in the United States, where data protection law may differ from yours. Where the law requires a safeguard for such transfers, we rely on the mechanisms in our providers' data processing terms, such as the European Commission's Standard Contractual Clauses.

Inquiries and correspondence: as long as we need them to reply and, if a business relationship follows, for that relationship and the period after it that records and possible legal claims require.

Transaction and compliance records: for the periods set by the laws and banking rules that apply to the transaction.

Analytics data: kept in Google Analytics for no longer than 14 months, then deleted automatically.

Hosting and security logs:our providers keep them for short periods on their standard schedules, then delete them automatically. The website itself keeps no database of form submissions. If a message cannot be delivered, a copy is written to our host's runtime logs so we can recover it and reply, and those logs expire automatically too.

When we no longer need information, we delete it or make it anonymous.

The site is served only over HTTPS, so what you type into the contact form is encrypted in transit. The website holds no database of submissions, no accounts, and no passwords, and access to our email and records is limited to the people who need it. No system is perfectly secure, so please send through the form only what an inquiry needs.

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy, in a portable format where the law provides for it;
• have inaccurate information corrected;
• have your information deleted;
• restrict or object to our use of it, including use based on our legitimate interests;
• withdraw consent where we rely on it, without affecting what happened before;
• not be treated differently for exercising any of these rights.

To make a request, email hello@aerisus.com. We may need to confirm your identity first. Someone you authorize may make a request for you if they show that authority. We respond within the time the law that applies to you sets, and never later than 30 days.

If we decline a request, we will tell you why. You can appeal by replying to our decision, and we will answer the appeal within the time the law requires. You may also complain to the data protection authority, or in the United States the state attorney general, where you live.

Residents of U.S. states with consumer privacy laws, such as Texas, also have the right to opt out of the sale of their personal data and its use for targeted advertising. We do neither.

This site is for businesses arranging commodity trades. It is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.

When our practices change, this page changes with them and the effective date at the top moves. That date is how you can tell whether anything has changed since you last read it.

Aerisus, San Antonio, Texas, United States. Email hello@aerisus.com. For our website terms, see the Terms of Service.