Privacy Policy

1. What We Collect

Aethyro collects minimal information necessary to operate the service:

• Account information: Your name, email address, and payment information when you sign up.
• Usage metadata: Anonymous product usage statistics (features used, session duration) — never content.
• Support communications: Messages you send us directly via email.
• Billing data: Managed by Stripe. We never store your full payment card details.

We do not collect: your prompts, AI outputs, client files, business documents, or any data you process through the Service.

2. How Your Data Stays Local

Aethyro is architected so that all AI processing happens on your hardware:

• Language model inference runs via locally installed models (Ollama or compatible runtimes)
• Your prompts and responses are processed entirely on your machine
• Documents and files you feed to the AI never leave your local environment
• No API calls are made to external AI providers using your content

This design means Aethyro is compatible with HIPAA, attorney-client privilege requirements, GDPR data residency requirements, and other data protection regulations — because your sensitive data never leaves your control.

3. How We Use Account Data

The limited account data we collect is used only to:

• Provide and maintain your subscription
• Send transactional emails (receipts, trial expiration notices)
• Respond to support requests
• Improve the product using anonymized, aggregate usage patterns

4. Third-Party Services

Aethyro uses a small number of third-party services for business operations:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Google Analytics (website only, not in-app) — anonymous website traffic analysis.

None of these services receive your client data, AI prompts, or business documents.

5. Data Retention

Account data is retained for as long as your account is active. Upon account deletion, we delete your personal information within 30 days, except where retention is required by law (e.g., billing records for tax purposes).

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and associated data
• Data portability (receive your data in a machine-readable format)
• Opt out of non-essential communications

To exercise these rights, email leer4030@gmail.com. We respond within 30 days.

7. Security

We protect account data using industry-standard security practices including encrypted transmission (TLS), secure credential storage, and access controls. Because client data never reaches our servers, the attack surface for sensitive data breaches is fundamentally limited by architecture.

8. Children's Privacy

Aethyro is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on our website. Continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions or requests: leer4030@gmail.com

We take privacy seriously and aim to respond to all requests within 2 business days.