Privacy Policy
Effective Date: January 1, 2026 · Last Updated: August 1, 2026
AETHER PBR Vault Inc. ("we", "us", or "our") operates aetherpbr.com and is committed to protecting your personal data. This policy describes what data we collect, how we use it, and your rights under GDPR and applicable privacy regulations.
Data We Collect
- —Account information: name, email address, and encrypted password provided at registration.
- —Usage data: pages visited, assets downloaded, and search queries — used exclusively to improve recommendation quality.
- —Payment data: all payment processing is handled entirely by Paddle.com (Merchant of Record). AETHER PBR Vault never stores raw card details or payment instrument data.
- —Technical data: browser type, IP address, and session cookies required for authentication.
How We Use Your Data
- —To provide and maintain your account and download history.
- —To manage your subscription tier and credit balance.
- —To send transactional emails (purchase confirmations, download receipts). Never marketing emails without explicit consent.
- —To detect and prevent fraudulent activity or Terms of Service violations.
- —To improve the platform through aggregated, anonymized analytics.
Data Sharing & Third Parties
- —We do not sell, rent, or trade your personal data to any third party.
- —Sub-processors: Supabase (database & auth), Cloudflare R2 (asset storage), Paddle.com (payment processing & order management as Merchant of Record). Each operates under its own GDPR-compliant DPA.
- —We may disclose data if required by law or to protect the rights and safety of AETHER PBR Vault users.
Security & Retention
- —All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- —Authentication is handled via Supabase Auth with bcrypt-hashed passwords.
- —Account data is retained for as long as your account is active. You may request deletion at any time.
- —Download logs are retained for 12 months for abuse prevention, then purged.
Your Rights (GDPR & CCPA)
Request a copy of all data we hold about you.
Correct inaccurate personal data at any time.
Request deletion of your account and associated data.
Export your data in machine-readable format (JSON).
Object to processing based on legitimate interests.
Request we limit processing while a dispute is resolved.
To exercise any of these rights, email privacy@aetherpbr.com. We respond within 30 days.
Data Controller: AETHER PBR Vault Inc.
Contact: privacy@aetherpbr.com