Privacy Policy

1. What We Collect

We collect information you provide directly:

• Account data: name, email address, hashed password
• Integration credentials: API keys for Resend, Meta, X, and other platforms you connect (stored encrypted)
• Usage data: agent runs, campaign results, social posts created
• Billing data: managed by Stripe — we never store full card numbers
• Technical data: IP address, browser type, pages visited, timestamps

2. How We Use Your Data

We use your data to:

• Provide and improve the Aether platform
• Execute AI agent tasks on your behalf using credentials you supply
• Send transactional emails (password resets, billing receipts)
• Enforce plan limits and billing
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal data. We do not use your data to train AI models.

3. Third-Party Services

We share data with third-party providers only as necessary to deliver the Service:

• OpenAI — processes your prompts and agent inputs to generate AI outputs
• Stripe — handles payment processing and subscription management
• Neon / PostgreSQL — hosts our database
• Vercel — hosts and deploys the application
• Resend — sends transactional emails
• Meta / X — receive content you authorize us to post on your behalf

4. Data Security

We protect your data using industry-standard measures:

• All data in transit encrypted via TLS/HTTPS
• Passwords hashed using bcrypt (never stored in plaintext)
• Authentication via signed JWT tokens with 30-day expiry
• API keys and secrets stored encrypted at rest
• Database access restricted to application servers only

Despite our precautions, no system is 100% secure. Please use a strong, unique password for your account.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel or your account is terminated, we delete your personal data within 30 days, except where required by law (e.g., billing records retained for 7 years for tax compliance).

6. Cookies

We use a single, essential session cookie (aether_session) to keep you logged in. This cookie is HttpOnly, Secure, and SameSite=Lax. We do not use tracking or advertising cookies.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at privacy@useaether.net. We respond within 30 days.

8. Children's Privacy

Aether is not directed at children under 18. We do not knowingly collect personal data from minors. If we discover we have collected data from a child under 18, we will delete it immediately.

9. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for any international transfers of personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about your privacy? Contact our privacy team at privacy@useaether.net.