Privacy Policy

1. Data We Collect

We collect information necessary to provide our services and improve your experience:

• Account information - email address, username, and password hash when you create an account
• Payment information - processed securely through SellAuth and Stripe. We do not store credit card numbers on our servers
• License data - license keys, activation timestamps, and hardware identifiers for license validation
• Usage analytics - page views, feature usage, and session data collected via PostHog to improve our products
• Support interactions - messages sent through our AI support chat, and messages inside Discord support tickets. Our bot reads every message in a ticket channel, including images you attach, so it can answer you. It does not read any other channel
• Discord verification data - if you verify for our Discord server we store your Discord user ID and username, your IP address and whether it looks like a VPN, and an encrypted Discord token that lets us re-add you if the server is ever lost

1a. Discord Support Tickets

When you open a support ticket in our Discord, a private channel is created for you and our support bot reads what you write there so it can help. Here is exactly what happens to those messages:

• Your messages, and any screenshots you attach, are sent to Anthropic to generate a reply. They are not used to train any AI model, ours or theirs
• Your messages are stored on our servers so staff can pick up where the bot left off
• When the ticket is closed we save a transcript of the conversation, post a copy in a staff-only Discord channel, and send you a copy by direct message
• Our bot only reads channels inside our own ticket categories. It never reads direct messages, and it never reads general server channels

If you would rather not have the bot involved, say so in your ticket and staff will mute it for that channel, or email us instead of opening a ticket. Muting stops the bot reading and stops a transcript being saved from that point.

2. How We Use Your Data

• Account creation and management
• Order fulfillment and license key delivery
• Customer support and troubleshooting
• Product analytics and feature improvement
• Transactional emails (order confirmations, license keys, password resets)
• Fraud prevention and abuse detection

3. Session Recording

We use PostHog to record anonymized browsing sessions on our website. These recordings help us understand how users interact with our site so we can improve usability and fix issues. All form inputs, including passwords and payment fields, are automatically masked and never captured. You can opt out of session recording by enabling "Do Not Track" in your browser settings.

4. Data Sharing

We do not sell your personal data. We share data only with the following third-party services necessary to operate our business:

• SellAuth - payment processing and order management
• Stripe - secure credit/debit card payment processing
• Resend - transactional email delivery
• PostHog - product analytics and session recording
• Vercel - website hosting and edge delivery
• Anthropic - generates the replies our support bot sends. Receives your support messages, any images you attach, and your email and order count where you have a linked account. Does not use this data for model training
• Supabase - our database and account storage
• Discord - hosts our server, our support tickets, and the transcript copies described above
• Cloudflare - the human check on our verification page. Receives your IP address
• proxycheck.io - tells us whether an IP address is a VPN, so a banned user cannot verify a new account. Receives your IP address at verification only

5. Cookies

We use cookies and similar technologies for authentication, session management, and analytics. Essential cookies are required for the site to function. Analytics cookies (PostHog) help us understand usage patterns. You can manage cookie preferences in your browser settings, though disabling essential cookies may affect site functionality.

6. Data Retention

We retain account data for as long as your account is active. License and order data is retained for the duration of your license plus 12 months. Analytics data is retained for up to 24 months.

• Support and ticket messages - 180 days after the ticket closes, then deleted automatically. We keep them that long because card and PayPal disputes can be raised up to 180 days after a payment, and the conversation is our evidence
• Ticket records - the ticket number, category, dates and status are kept after the messages are deleted, so we can see your support history without keeping what was said
• Verification IP data - 30 days, then erased. Failed verification attempts are deleted entirely after 90 days
• The transcript copies - the copy sent to your own direct messages is yours and stays until you delete it. The staff copy in Discord is kept for as long as that channel exists

You may request deletion of your account and associated data at any time by contacting support.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of analytics and session recording
• Export your data in a portable format

To exercise any of these rights, contact us via Discord or email.

8. Security

We implement industry-standard security measures to protect your data, including encrypted connections (TLS), hashed passwords, and secure payment processing through PCI-compliant providers. No system is 100% secure, and we cannot guarantee absolute security of your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect immediately upon posting. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy, contact us via Discord or email us at support@aetherscripts.io.