Privacy Policy

1. What We Collect

Aethyro Cloud collects the following to operate the service:

• Account information: Your email address and (if applicable) name when you sign up.
• Conversation data: Your messages and AI responses are stored in our database so you can access your chat history across sessions.
• Credit ledger: Records of credit purchases and usage, linked to your account.
• Usage metadata: Anonymous product analytics (page views, feature usage) via Google Analytics — never the content of your messages.
• Billing data: Managed by Stripe. We do not store your full payment card details.
• Support communications: Messages you send us directly.

2. How Your Data Is Processed

Aethyro Cloud is a browser-based service powered by cloud infrastructure:

• Your messages are transmitted securely (TLS) to our backend and forwarded to Anthropic's Claude API to generate responses.
• Conversations are stored in our database (hosted on Supabase, US region) so you can access your history.
• Anthropic processes your messages under their own privacy policy. By default, Anthropic does not use API-submitted content to train models.
• Row-level security ensures only your account can read your conversations.

If your use case requires strict data residency or prohibits third-party AI processing (e.g., HIPAA-regulated PHI), please contact us before using the Service.

3. How We Use Your Data

We use your data only to:

• Provide and maintain the Aethyro Cloud service
• Restore your conversation history when you log in
• Send transactional emails (email confirmation, password reset, payment receipts)
• Respond to support requests
• Improve the product using anonymized, aggregate usage patterns

4. Third-Party Services

Aethyro Cloud uses the following third-party services:

• Anthropic — AI inference for all chat responses. Subject to Anthropic's Privacy Policy.
• Supabase — database and authentication. Data hosted in the US. Subject to Supabase's Privacy Policy.
• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Google Analytics — anonymous website traffic analysis. No message content is transmitted.

5. Data Retention

Your conversation data and account information are retained for as long as your account is active. Upon account deletion request, we delete your personal data and conversations within 30 days, except where retention is required by law (e.g., billing records for tax purposes).

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and associated data
• Data portability (receive your data in a machine-readable format)
• Opt out of non-essential communications

To exercise these rights, email [email protected]. We respond within 30 days.

7. Security

We protect your data using industry-standard security practices including encrypted transmission (TLS), secure credential storage, and access controls. Messages you send are transmitted to Aethyro servers over TLS and forwarded to Anthropic's API to generate responses. We do not sell or share your conversation data with third parties.

8. Children's Privacy

Aethyro is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on our website. Continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions or requests: [email protected]

We take privacy seriously and aim to respond to all requests within 2 business days.