Privacy.
Aetheris Chat is operated by Aetheris Innovations LLC (Pennsylvania, USA). This policy explains what we collect, why, and how we handle it — for both the businesses who subscribe to Aetheris Chat and for their website visitors who talk to the assistant.
We believe privacy is a practice, not a page. We don't sell data, we don't ad-target, we don't train third-party models on your conversations. The short version is that list.
Who this applies to
Two distinct groups touch Aetheris Chat: subscribers (the local businesses who pay us and embed the widget on their site) and visitors(people who chat with a subscriber's assistant on that site). Different data applies to each.
What we collect from subscribers
- Account information — email, business name. Authenticated via Supabase Auth.
- Knowledge-base content — whatever you ingest: URL contents, uploaded PDFs, text files.
- Branding — color, logo image, welcome message, calendar link.
- Billing — handled entirely by Stripe. We store your Stripe customer and subscription IDs but never see or store payment card details.
- Usage — count of messages, conversations, and leads per chatbot.
What we collect from visitors
- Conversation content — messages typed in the widget, plus the assistant's replies.
- Contact info — name, email, and phone if the visitor shares them in chat or through the lead form. These become a "lead" delivered to the subscriber.
- Session identifier — a random ID stored in the visitor's browser localStorage so the same conversation persists across page loads.
We do not use tracking cookies. We do not collect IP addresses, fingerprints, or cross-site behavior.
How we use the data
- Run the assistant — retrieving relevant chunks of the knowledge base to answer the visitor.
- Deliver leads to the subscriber via their dashboard and (optionally) email or webhook.
- Bill subscribers for their plan.
- Detect and prevent abuse.
We don't use your conversations or knowledge base to train any model — ours or anyone else's.
Third parties who process data for us
We use a small number of reputable vendors to operate the service. They process data under their own privacy policies but only to the extent necessary for the function they provide us:
- Supabase — database + authentication
- Railway — backend hosting
- Vercel — dashboard and widget hosting
- OpenAI — LLM and embedding calls for the chat and RAG retrieval. OpenAI does not retain or train on data passed through its API under our enterprise terms.
- Stripe — billing and payment processing
- Resend — transactional email (sign-in links, lead notifications)
Security
All traffic is TLS-encrypted. Data is stored encrypted at rest in Supabase. Every row in the database is scoped to a client_id, and row-level security at the database layer prevents cross-tenant access even if application code were to misbehave.
Your rights
You may at any time: export your leads (CSV, built into the dashboard), delete an individual chatbot and all its data (Danger zone in Settings), or cancel your subscription through the Stripe Customer Portal.
To request full account deletion or a copy of all data we hold on you, email hello@aetherisinnovations.com. We'll respond within 14 days.
Retention
Conversations, leads, and knowledge-base chunks are retained as long as your subscription is active. Canceled accounts are purged 30 days after cancellation. Deleted chatbots are purged immediately.
Children
Aetheris Chat is intended for business use and isn't directed at anyone under 13. We don't knowingly collect data from children.
Changes to this policy
We may update this page as the product evolves. Material changes will be announced via email to the subscriber address on file at least 14 days before taking effect.