Privacy Policy
1. Controller
Aethernova IA SL, Av. Porto da Coruña 3, 15003 A Coruña, Spain.
Privacy contact: info@aethernova.ai
2. Data we process
- Contact form: name, email address, optional organisation and message.
- XETHER waitlist: email address, profession or sector, organisation size, optional name, consent record, signup source and registration date.
- Security and operation: IP address, user agent and technical logs generated by the hosting and abuse-prevention infrastructure.
- Analytics: limited cookieless technical measurements may be sent with analytics storage denied; browsing data and persistent analytics identifiers are enabled only after consent.
Please do not include unnecessary sensitive information in free-text messages.
3. Purpose and legal basis
- Responding to enquiries: pre-contractual measures requested by you or our legitimate interest in handling professional communications.
- Managing the XETHER waitlist: your consent to store this information, confirm your registration and notify you about the product launch.
- Operating and protecting the website: our legitimate interest in preventing abuse and maintaining the service.
- Analytics: limited cookieless measurement under our legitimate interest in obtaining aggregate service diagnostics; analytics cookies and persistent identifiers rely on consent, which you can withdraw through the cookie settings.
4. Retention
Contact enquiries are retained for 12 months unless they lead to a contractual relationship or a legal obligation requires longer retention. Waitlist records are retained until the launch notification is sent or consent is withdrawn, with an absolute maximum of 24 months from registration. Technical and analytics data follow the limited retention periods configured with each provider.
5. Processors
We use Neon for the European PostgreSQL database, Vercel for hosting, Resend for contact, waitlist confirmation and private admin emails, Upstash for abuse prevention and distributed rate limiting, and Google Analytics in cookieless mode before consent and with analytics cookies only after consent.
6. International transfers
Where a provider processes data outside the European Economic Area, the applicable data-processing agreement and safeguards are used, including Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. The production database and rate-limiting infrastructure are configured in European regions.
7. Your rights
You may request access, rectification, erasure, objection, restriction, portability or withdrawal of consent by writing to info@aethernova.ai. You may also lodge a complaint with the Spanish Data Protection Agency.
8. Cookies and security
Non-essential cookies and persistent analytics identifiers stay blocked until you consent. Limited cookieless measurements may still be sent under advanced consent mode. See the Cookie Policy. We apply technical and organisational safeguards, although no system can guarantee absolute security.