Privacy policy

Who we are

Aethara (“we”, “us”) operates an independent revenue-role research product at aethara.us. This policy describes how we handle personal information when you browse, sign in, subscribe, use ApexForge, or submit content.

What we collect

• Account email (for magic-link sign-in and billing receipts)
• Subscription status, plan, and payment-processor customer identifiers
• Saved roles, filters, and preferences stored in your browser or account
• Optional resume and career profile text you enter in ApexForge (browser storage by default; see AI section)
• Optional anonymous review submissions you choose to publish
• Basic server logs (IP address, user agent, pages visited) for security and reliability

Authentication

Sign-in uses passwordless email links delivered via our email provider. We do not store passwords. Session tokens are managed by our auth provider (Supabase).

Payments

Pro subscriptions are processed by PayPal on behalf of Aethara. We receive subscription status and customer IDs — not full card numbers. Card data is handled directly by the processor under their privacy policy. See Subprocessors.

ApexForge & AI

ApexForge stores profile and resume inputs in your browser (localStorage) unless you clear them. When ApexForge AI is enabled and you run generation, resume text and job-description context may be sent to our model provider (OpenAI) to produce tailored output. When AI is disabled or unavailable, generation uses on-product logic and does not call an external model. Do not submit data you are not authorized to process.

How we use data

To operate the atlas, enforce Free vs Pro access, run optional AI features you request, send transactional email (sign-in, receipts), respond to support requests, and improve product quality. We do not sell personal information.

Legal bases (GDPR)

Where the GDPR applies, we process personal data on these bases:

• Contract — to provide the account, Pro subscription, and features you request
• Legitimate interests — security, fraud prevention, product reliability, and aggregated analytics
• Consent — where required for optional analytics or non-essential cookies
• Legal obligation — tax, accounting, or lawful requests

Your rights (GDPR & similar laws)

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated personal data
• Export a copy of your data (portability)
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based

Email matthewkindle@aethara.us from your account address. We respond within 30 days where required by law.

California (CCPA / CPRA)

We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. California residents may request access, deletion, and correction by emailing matthewkindle@aethara.us with subject line California privacy request. We will not discriminate against you for exercising these rights.

International transfers

We and our subprocessors primarily operate in the United States. If you access Aethara from the EU/EEA, UK, or other regions, your data may be transferred to the US. We rely on appropriate safeguards offered by our vendors (for example, standard contractual clauses where applicable).

Reviews & moderation

Submitted reviews may be held for moderation. Published reviews are displayed without attaching your email to the public page unless you opt in to attribution.

Cookies & analytics

Essential cookies support sign-in and preferences. We may use privacy-respecting analytics to understand traffic patterns. See our Cookie policy for details.

Retention & deletion

To delete your account and associated personal data, email matthewkindle@aethara.us from your account address with the subject “Delete my account.” We remove personal identifiers within 30 days while retaining anonymized aggregates and records we must keep for legal or billing purposes. Clear ApexForge browser storage in your browser settings if you also want local resume drafts removed.

Children

Aethara is not directed at children under 16. We do not knowingly collect data from minors.

Security

Practices and scope are summarized on our Security & trust page. No method of transmission or storage is 100% secure.

Contact

Privacy questions: matthewkindle@aethara.us