Aetherion AI
Operating Workspace
This notice explains what Aetherion Labs collects, why it is needed, who may process it, how long it is kept and which choices and rights are available.
Your account
You control
Your projects
You choose
AI operations
You request
Service controls
We protect
Aetherion Labs is the controller for account and service administration data. For personal data a customer places in its own project, the customer may be controller and Aetherion may act as processor.
Examples
Name, email, profile, authentication identifiers, preferences and account status.
Purpose
Create and secure the account, personalise the workspace and communicate essential service information.
Lawful basis
Contract performance, legitimate interests in operating and protecting the service, and legal obligations where applicable.
Examples
Prompts, briefs, source files, generated outputs, assets, versions, project events and configuration.
Purpose
Generate, edit, preview, store, recover, publish and support the projects the user asks Aetherion to handle.
Lawful basis
Contract performance. A customer may also act as controller for personal data placed inside its projects.
Examples
Selected project context, instructions, model requests, outputs, usage records and diagnostic information.
Purpose
Perform requested AI operations, estimate and record usage, troubleshoot failures and improve the reliability of workflows.
Lawful basis
Contract performance and legitimate interests in service reliability, safety and abuse prevention.
Examples
Plan, subscription state, transaction references, invoice data and credit activity. Card details are handled by the payment provider.
Purpose
Process subscriptions, maintain financial records, prevent fraud and provide billing support.
Lawful basis
Contract performance, legal obligations and legitimate interests in payment security.
Examples
Support tickets, messages, attachments, product notifications and contact history.
Purpose
Respond to requests, investigate problems, maintain service history and send communications selected by the user.
Lawful basis
Contract performance, legitimate interests and consent where a communication legally requires it.
Examples
IP address, browser and device data, session and request identifiers, security events, cookie choices and site usage.
Purpose
Keep the service secure, diagnose performance, understand product use and remember privacy choices.
Lawful basis
Legitimate interests, legal obligations and consent for non-essential cookies where required.
Aetherion uses specialist providers for hosting, database, payments, communications, analytics and AI operations. They process data only for the services they provide and under applicable contractual safeguards.
Service-provider access
Providers receive only the data reasonably required for their role. Aetherion does not sell personal data.
International transfers
Where information is made accessible outside the United Kingdom or another protected region, Aetherion uses an applicable adequacy decision, recognised contractual safeguards or another lawful transfer mechanism.
Legal and safety disclosures
Information may be disclosed where required by law or reasonably necessary to protect users, the service, Aetherion Labs or the public.
Account and project data
Kept while the account or relevant project remains active, then deleted or anonymised according to product deletion flows, recovery cycles and any legal hold.
Billing records
Kept for the period required by applicable company, tax, accounting, anti-fraud and dispute-resolution obligations.
Support and security records
Kept for as long as reasonably necessary to resolve the request, protect the service, handle disputes and maintain an appropriate audit trail.
Cookie and analytics data
Kept according to the cookie setting and provider retention configuration described in the cookie information available on the site.
Ask for access to your personal data
Ask for inaccurate data to be corrected
Ask for deletion where the right applies
Ask for processing to be restricted
Object to processing based on legitimate interests
Ask for portable data where the right applies
Withdraw consent without affecting earlier lawful processing
Complain to the UK Information Commissioner or another competent authority
Essential storage supports login, security and saved choices. Analytics or other non-essential technologies are controlled through the cookie preference interface where consent is required.
Read cookie information