Privacy Policy
This Privacy Policy explains what personal data Aetherin ("we", "us") collects when you use our website and workspace (the "Service"), why we collect it, how we use and share it, and the rights you have. We keep this deliberately short and specific.
1. Data we collect
Data you give us
- Account data: email address, display name, password hash, and the language and time zone you select.
- Purchase data: credit pack purchased, amount, currency, order reference and payment status. Card details are entered on our payment provider's checkout and are never stored on our servers.
- Support data: the content of messages you send to support@aetherin.net.
Data generated when you use the Service
- Usage data: features used, credit consumption, token counts, timestamps, error events and approximate performance metrics.
- Content you submit: prompts, files and other inputs you send to the workspace, together with the outputs generated for you, stored so that you can access your history.
- Technical data: IP address, browser type and version, device type, and referring page, collected in server logs for security and troubleshooting.
Cookies
We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies or third-party tracking pixels on this site. If we introduce analytics cookies in future, we will ask for consent where required.
2. How we use your data
- to create and secure your account and authenticate sign-in;
- to provide the Service, including processing your requests and maintaining your credit balance;
- to process payments, issue receipts and handle refunds and disputes;
- to provide customer support and respond to your enquiries;
- to detect, prevent and investigate fraud, abuse and security incidents;
- to comply with legal, tax and accounting obligations;
- to understand aggregate usage so we can improve the product.
We do not sell your personal data, and we do not use your submitted content to train our own models.
3. Who we share data with
We share data only with service providers that help us run the Service, and only to the extent necessary:
- Creem — merchant of record and payment processor, which handles card payments and tax remittance. Creem receives your email address, order details and billing information you provide at checkout.
- Hosting and infrastructure providers — to serve the website and store account data.
- AI model providers — your prompts and content may be transmitted to third-party model providers strictly to generate the output you requested. These providers process the data under their own terms and do not receive your payment details.
- Email delivery providers — to send sign-in links, receipts and service notices.
- Authorities — where we are legally required to disclose data, or where disclosure is necessary to protect rights, safety or the integrity of the Service.
4. International transfers
Our providers may process data in countries other than yours, including the United States and the European Union. Where required, transfers rely on appropriate safeguards such as standard contractual clauses. Because requests are routed to model providers to generate results, your inputs may be processed outside your country of residence.
5. Retention
- Account data: retained while your account is active, and for up to 90 days after deletion to allow recovery and to meet accounting obligations.
- Content and history: retained until you delete it or close your account.
- Payment records: retained for as long as required by tax and accounting law (typically 6–10 years), held by Creem and by us in summary form.
- Server logs: typically 30 days.
6. Security
We use TLS for all traffic, hash passwords with a modern algorithm, restrict administrative access, and keep the surface area of the Service small. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authority where legally required.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email support@aetherin.net; we respond within 30 days. You may also lodge a complaint with your local data protection authority.
8. Children
The Service is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
9. Do Not Track and third parties
This site does not run third-party advertising or behavioural tracking, so there is no cross-site profile to opt out of. Links to external sites are governed by those sites' own policies.
10. Changes
We may update this policy as the Service evolves. Material changes will be posted here with a new "last updated" date. Continued use after the effective date means you accept the updated policy.
11. Contact
Aetherin · support@aetherin.net · aetherin.net