Privacy Policy

Aether (“we,” “us,” “our”) is an AI-powered business intelligence platform operated by 718 Solutions. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform at aethercoo.ai and related services (the “Service”).

We take data privacy seriously. Your business data is yours. We process it to provide you with insights — we never sell it, share it with other customers, or use it for purposes unrelated to providing the Service.

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Organization name
• Password (stored encrypted, never in plaintext)
• Billing information (processed by Stripe; we do not store full payment card details)

2.2 Business Data You Upload

When you upload files or connect data sources, we process:

• Sales and transaction reports (CSV, XLSX, and other supported formats)
• Payroll and staff data
• Schedule and attendance data
• Any other operational data you choose to upload

This data is processed to generate insights, metrics, and AI-powered recommendations within the Service. We do not access, view, or analyze your business data for any purpose other than providing the Service to you.

2.3 Usage Data

We automatically collect:

• Log data (IP address, browser type, device information, pages visited)
• Feature usage patterns (which pages and features you use, how frequently)
• Performance data (page load times, errors)

2.4 AI Interaction Data

When you interact with the AI Business Advisor:

• Your questions and the AI's responses are processed in real time
• We may retain anonymized, aggregated usage patterns to improve AI response quality
• Your specific business data and conversations are not used to train AI models

We use your information to:

• Provide, maintain, and improve the Service
• Process and analyze your business data to generate insights and recommendations
• Manage your account and billing
• Send service-related communications (system alerts, security notifications, product updates)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do NOT:

• Sell your personal information or business data to third parties
• Use your business data to train AI models
• Share your data with other Aether customers
• Display advertising based on your business data
• Access your data for purposes unrelated to providing the Service

Aether is built as a multi-tenant platform with strict data isolation:

• Each organization's data is scoped by a unique organization identifier
• Database-level Row Level Security (RLS) policies prevent cross-tenant data access
• No user, employee, or system process can access another organization's data
• All API queries, database operations, and data processing are scoped to the authenticated user's organization

5.1 Infrastructure

• Data is stored in Supabase (built on PostgreSQL) with encryption at rest
• The application is hosted on Vercel
• All data transfers use TLS 1.2 or higher encryption
• Authentication is handled through Supabase Auth with industry-standard practices

5.2 Access Controls

• Employee access to production data is limited to authorized personnel only
• We use the principle of least privilege for all internal access
• API keys and credentials are stored securely and rotated regularly

5.3 AI Processing

• AI features are powered by Anthropic's Claude API
• When your data is sent to the AI for analysis, it is transmitted securely and is not stored by the AI provider beyond the duration of the request
• Anthropic does not use API inputs to train its models

• Business data: Retained as long as your account is active. When you delete an upload, all derived data (metrics, insights, entities) from that upload is permanently deleted.
• Account information: Retained as long as your account is active and for 30 days after account deletion.
• Usage logs: Retained for up to 12 months for security and performance analysis.
• Billing records: Retained as required by applicable tax and financial regulations.

Depending on your jurisdiction, you may have the right to:

• Access your personal and business data stored in the Service
• Correct inaccurate information
• Delete your account and all associated data
• Export your data in a machine-readable format
• Restrict certain processing activities
• Object to data processing in certain circumstances

To exercise these rights, contact us at support@aethercoo.ai. We will respond within 30 days.

Your data may be processed in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place for international transfers, including the use of infrastructure providers that maintain industry-standard compliance certifications.

We use essential cookies for:

• Authentication and session management
• Security (CSRF protection)
• User preferences

We do not use third-party advertising cookies or tracking pixels. We may use privacy-respecting analytics to understand Service usage patterns.

We use the following third-party services to operate the platform:

• Supabase — Database and authentication
• Vercel — Application hosting
• Stripe — Payment processing
• Anthropic (Claude API) — AI-powered analysis and insights
• Resend — Transactional email delivery

Each provider has their own privacy policy and maintains appropriate security and privacy standards.

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 14 days before changes take effect. Your continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions or concerns:

Email: support@aethercoo.ai
Company: 718 Solutions
Website: aethercoo.ai