Privacy Policy
How Aether collects, uses, shares, protects, retains, and deletes your personal information and the Google user data from services you choose to connect.
At a glance: Aether's use of Google user data
Aether (https://aethervipai.app) is a workspace of AI employees that helps people and businesses with email, documents, scheduling, client work, and video content. Connecting a Google Account is optional. If you connect one, Aether accesses only the Google user data needed for the features you use: your basic profile, Gmail messages you ask it to find, read, or send, Google Drive files you ask it to open, Google Calendar events you ask it to check or create, and YouTube channel, video, and analytics data you ask it to review or upload.
Aether uses Google user data only to provide those user-facing features to you. We never sell it, never use it for advertising, and never use it to train generalized AI or machine-learning models. Emails are sent, events are created, and videos are uploaded only after you review them and press Approve. You can disconnect at any time, and we complete deletion requests within 30 days.
1. Introduction
This Privacy Policy describes how Aether ("Aether", "we", "us", or "our") collects, uses, shares, stores, protects, retains, and deletes information when you use the Aether website at https://aethervipai.app, the Aether web application, and any Google or third-party services you choose to connect to Aether (together, the "Service").
Aether is operated by Daniel Rosado, who is responsible for the personal information processed through the Service. You can contact us at danrrico@gmail.com. This is the same contact shown on Aether's Google sign-in consent screen.
By using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Service.
2. Information We Collect
2.1 Information you give us:
- Account information: your name, email address, password or sign-in method, language preference, and workspace membership.
- Content: prompts, chat messages, files, images, videos, documents, contacts, client and project details, feedback, ratings, and instructions you give to AI employees.
- Connection settings: details for services you choose to connect. Passwords, API keys, and authorizations are encrypted and never shown in chat.
- Support and communications: messages you send us and your notification preferences.
- Payment status: subscription and credit status provided by our payment partners. Aether does not store full payment-card numbers.
2.2 Information collected automatically
- Usage information: features and tools used, approvals, credits consumed, and timestamps.
- Device and log information: browser type, device type, operating system, IP address, pages visited, error reports, and security events.
- Information stored on your device to keep you signed in (see section 6, Cookies and Similar Technologies).
2.3 Information we receive from Google when you connect it
If you choose to connect a Google Account, Google shows you a consent screen listing each permission. Each Google product is connected separately and you can accept or decline each one. Depending on what you connect, Aether may access:
- Basic Google Account information (openid, email, profile): your name, email address, profile picture, and Google account ID.
- Gmail (gmail.readonly, gmail.send): the subject, body, sender, recipients, date, labels, thread, and attachments of messages you ask Aether to search for or read, and permission to send an email on your behalf after you approve it.
- Google Drive (drive.readonly or drive.file): the names, IDs, types, folders, modification dates, and contents of files you ask Aether to find or open.
- Google Calendar (calendar.events): titles, descriptions, dates, times, locations, and attendees of your events, and permission to create or update an event after you approve it.
- YouTube (youtube.readonly, yt-analytics.readonly, youtube.upload): channel name, ID, and statistics; playlists; video titles, descriptions, thumbnails, and metadata; YouTube Analytics reports such as views, watch time, subscribers, and engagement; and permission to upload a video to your channel after you approve it.
3. How We Use Your Information
We use the information described above to:
- Provide, operate, and maintain the Service, including your workspace and AI employees.
- Process your requests, generate the content you ask for, and keep the context and memories you choose to save.
- Show approval cards before sensitive actions such as sending, publishing, uploading, deleting, or changing data.
- Administer accounts, credits, and subscriptions.
- Keep the Service secure, prevent fraud and abuse, and fix errors.
- Send account, security, and support messages, and notifications you turn on.
- Comply with legal obligations and enforce our Terms of Service.
3.1 How we use Google user data
Aether uses Google user data only to provide or improve the user-facing features you request inside your own workspace:
- Gmail: to search, read, and summarize the messages you ask about, and to draft replies. Aether sends an email only after you review it and press Approve.
- Google Drive: to find the files you ask for and read their contents so an AI employee can summarize them or work with them.
- Google Calendar: to check your availability, show your events, and schedule bookings. Aether creates or changes an event only after you press Approve.
- YouTube: to show your channel's videos and analytics, analyze performance, and suggest content plans. Aether uploads a video only after you press Approve.
- Basic account information: to show which Google account is connected.
4. Google User Data
Aether's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Aether does not use Google user data, including data obtained through Google Workspace APIs, to develop, improve, or train generalized or non-personalized AI or machine-learning models.
In addition:
- We do not sell Google user data or transfer it to data brokers or information resellers.
- We do not use Google user data for advertising, retargeting, or personalized or interest-based ads.
- We do not use Google user data to determine creditworthiness or for lending purposes.
- We transfer Google user data to others only as needed to provide the features you request, for security purposes, to comply with law, or as part of a merger or acquisition with notice to you.
- No person at Aether reads your Google user data unless you give explicit consent for specific messages or files, it is necessary for security purposes such as investigating abuse, it is required by law, or the data is aggregated and anonymized for internal operations.
- Aether never sends an email, creates a calendar event, or uploads a video without your explicit approval.
7. Data Retention
- Account information and workspace content: kept while your account is active. Deleted within 30 days after you delete your account.
- Google authorizations: kept only while the connection is active. Deleted immediately when you press Disconnect.
- Google content: fetched when you ask for it and not copied into Aether in bulk. Only results you choose to keep, such as a summary in a chat, are saved, until you delete them or your account.
- Logs and security records: kept for up to 90 days unless needed longer to investigate abuse or meet legal obligations.
- Backups: overwritten within 30 days and never used to provide any feature.
8. Data Deletion
You control your data. You can delete it in any of these ways:
- Disconnect a Google service: open Integrations in Aether and press Disconnect. The stored authorization is deleted immediately and Aether can no longer access that data.
- Revoke access from Google: visit https://myaccount.google.com/permissions, select Aether, and remove access.
- Delete individual items: delete chats, files, results, or saved memories using the controls in your workspace.
- Delete your account and all data: email danrrico@gmail.com from your account email address with the subject "Delete my data". We verify the request and complete deletion of your account, workspace content, Google-derived data, and connection records within 30 days, and confirm by email.
9. Data Security
All data sent between your browser, Aether, and Google APIs is encrypted in transit with HTTPS (TLS). Stored data is encrypted at rest. Google authorizations, passwords, and API keys for connected services are additionally encrypted with AES-256-GCM, kept in server-only storage that browsers and other users cannot read, and used only by authenticated server operations for your own account. They are never shown in chat or sent to your browser.
Access to workspaces is protected by authentication and row-level access controls, so one customer's data is never visible to another customer. Access by our staff is limited to what is necessary to operate and secure the Service.
If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by law. No online service can guarantee absolute security.
10. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct inaccurate information.
- Delete your information (see section 8).
- Export your information in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time, including by disconnecting Google services, without affecting earlier processing.
- Turn off optional notifications.
10.1 Additional information for EU/UK and California users
EU and UK users (GDPR): we process personal information to perform our contract with you (providing the Service), with your consent (for example, connecting Google services, which you can withdraw at any time), for our legitimate interests in securing and improving the Service, and to comply with legal obligations. You may lodge a complaint with your local data protection authority.
California users (CCPA/CPRA): we do not sell or share personal information for cross-context behavioral advertising. You have the right to know, delete, and correct your personal information, and we will not discriminate against you for exercising these rights.
To exercise any right, email danrrico@gmail.com. We respond within 30 days and may need to verify your identity.
11. YouTube API Services
Aether uses YouTube API Services to provide its YouTube features. By connecting your YouTube account to Aether, you agree to be bound by the YouTube Terms of Service. Google's processing of your information is governed by the Google Privacy Policy.
Aether accesses, uses, stores, and shares YouTube data only as described in this Policy. You can revoke Aether's access to your YouTube data at any time through the Google security settings page, and you can ask us to delete stored YouTube data by emailing danrrico@gmail.com.
12. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact danrrico@gmail.com and we will delete it.
13. International Data Transfers
Aether and its service providers may process information in countries other than your own, including the United States. Where required, we use appropriate safeguards, such as standard contractual clauses, to protect information transferred across borders.
14. Changes to This Policy
We may update this Policy as the Service changes. We will update the "Last updated" date at the top and, for material changes, notify you by email or in the app before they take effect. If a change affects how we use Google user data, we will ask for your consent where required.
15. Google Permissions in Detail
This section lists every Google permission (OAuth scope) Aether may request. For each one we explain exactly what data is accessed, why Aether needs it, which feature uses it, whether it is stored, and for how long. Aether only requests a permission when you choose to connect the matching Google product, and you can connect each product separately.
- openid, email, profile — Data accessed: your Google account ID, name, email address and profile picture. Why: to identify which Google account you connected and show it in Integrations. Feature: Google sign-in and connection status. Stored: yes, the email and account ID are stored with your connection. Kept: until you disconnect or delete your account.
- gmail.readonly (Read Gmail) — Data accessed: message headers (sender, recipients, subject, date), message bodies, labels and thread information for messages you ask about. Why: so Jarvis and other AI employees can search, read, summarize and draft replies to your email when you request it. Feature: inbox summaries, email search, reply drafting. Stored: message content is not stored permanently; it is processed to answer your request, and only the reply or summary you see is saved in your chat. Kept: chat results until you delete the chat or account.
- gmail.send (Send email on your behalf) — Data accessed: the recipient, subject and body of the specific email you approve. Why: to send an email that you reviewed and approved in an approval card. Feature: approved outgoing email. Stored: a record of the sent email (recipient, subject, time) is kept in your workspace history. Kept: until you delete it or your account. Aether never sends email without your explicit approval.
- drive.readonly (Read Google Drive) — Data accessed: file names, file types, folders, modified dates and the contents of files you ask Aether to open. Why: to find and read documents you reference so AI employees can summarize, analyze or use them in your work. Feature: Drive file search and document reading. Stored: file lists and contents are not stored permanently; only the results you see in chat are saved. Kept: chat results until you delete them.
- calendar.events (Google Calendar events) — Data accessed: event titles, times, attendees, locations and descriptions on your calendars. Why: so booking and scheduling employees can check availability and create or update events that you approve. Feature: availability checks, booking, scheduling. Stored: event IDs of events created by Aether are kept so they can be updated or cancelled. Kept: until you disconnect or delete the booking. Aether never creates, changes or deletes events without your approval.
- youtube.readonly (Read YouTube account) — Data accessed: your channel name, channel ID, playlists, video titles, descriptions, thumbnails and public statistics. Why: so a YouTube channel manager employee can understand your channel and suggest content plans. Feature: channel overview and content ideas. Stored: a channel summary may be saved in your workspace. Kept: until you delete it, disconnect, or delete your account.
- yt-analytics.readonly (YouTube Analytics) — Data accessed: views, watch time, audience retention, traffic sources and audience demographics reports for your channel. Why: to show performance and recommend improvements. Feature: analytics dashboards and recommendations. Stored: summarized reports may be cached in your workspace. Kept: cached analytics are refreshed or removed within 30 days, and deleted immediately when you disconnect.
- youtube.upload (Upload videos) — Data accessed: the video file, title, description, tags and privacy setting you approve. Why: to publish a video to your channel after you approve it. Feature: approved video publishing. Stored: the uploaded video ID is kept so you can see its status. Kept: until you delete it or your account. Aether never uploads without your explicit approval.
16. Examples of How Google Data Is Used
These examples show, step by step, what happens to your Google data during common tasks.
- Gmail summary: You ask Jarvis to summarize unread email. Aether requests the recent unread messages from Gmail, sends their text to an AI model only to write the summary, shows you the summary, and keeps the summary in your chat. The original messages are not copied into our database.
- Gmail reply: You ask for a reply to a client. Aether reads that thread, drafts a reply, and shows it in an approval card. Nothing is sent until you press Approve. After you approve, Aether sends that one email through Gmail.
- Drive document: You ask Aether to review a proposal in Drive. Aether lists matching file names, opens the file you pick, uses its text to write the review, and shows you the result. The file itself is not stored by Aether.
- Calendar booking: A client books through your booking page. Aether checks your calendar for free times, proposes a slot, and creates the event only according to the rules and approvals you configured.
- YouTube planning: You ask for next month's video plan. Aether reads your channel's video list and analytics, generates ideas, and saves the plan in your workspace. A video is uploaded only after you approve the final title, description and file.
17. What We Never Do With Google User Data
- We never sell Google user data.
- We never use Google user data for advertising, including personalized, retargeted or interest-based ads.
- We never use Google user data to train, develop or improve generalized or non-personalized AI or machine-learning models.
- We never transfer Google user data to data brokers, information resellers or similar third parties.
- We never use Google user data to determine creditworthiness or for lending purposes.
- We never allow humans to read Google user data, except in the limited cases listed in section 18.
- We never transfer Google user data to anyone except as needed to provide or improve the features you use, to comply with law, for security, or as part of a merger or acquisition with notice to you.
18. When a Person May See Your Data
No person at Aether reads your Gmail, Drive, Calendar or YouTube data as a routine practice. A person may access it only in these cases:
- You give explicit, affirmative consent for specific messages, files or records (for example, when you ask for support and share them).
- It is necessary for security purposes, such as investigating abuse, fraud or a security incident.
- It is necessary to comply with applicable law or a valid legal request.
- The data has been aggregated and anonymized and is used for internal operations, in line with applicable privacy laws.
19. AI Services and Hosting Providers
To perform the tasks you request, Aether sends the minimum necessary content to the following categories of service providers: AI model providers that generate text, images, audio and video; cloud hosting, database and file storage providers; and email delivery providers for notifications you choose to receive.
These providers process data only on our instructions and only to deliver the requested result. We choose providers that do not use customer content sent through their APIs to train their models. Google user data is never sent to any provider for advertising, resale or model training.
20. More About How We Protect Data
- All traffic between your device, Aether and Google uses HTTPS/TLS encryption.
- Data is encrypted at rest by our hosting provider. Google connection credentials are additionally encrypted with AES-GCM and are readable only by server-side code.
- Each user's data is isolated with row-level access rules, so one user cannot read another user's data.
- Access to production systems is limited to the operator and protected with strong authentication.
- Sensitive actions (sending email, creating events, uploading videos) require your approval and are logged in your workspace history.
- If a data breach affecting your personal data or Google user data occurs, we will notify affected users and, where required, authorities without undue delay, and in any case within 72 hours of becoming aware of it where the law requires.
21. Retention Schedule
- Account profile (name, email): kept while your account is active; deleted within 30 days of account deletion.
- Chats, projects, documents and generated media: kept until you delete them or your account.
- Google connection credentials: kept while connected; deleted immediately when you disconnect or revoke access.
- Google content (email, files, events, channel data): processed in memory for your request and not stored, except results you see in chat and cached YouTube analytics (up to 30 days).
- Security and error logs: up to 90 days.
- Backups: overwritten on a rolling basis within 30 days.
22. Frequently Asked Questions
- Does Aether read all my email? No. Aether reads only the messages needed for the task you ask for.
- Can Aether send email or upload videos by itself? No. Every send, calendar change and upload requires your approval.
- Is my Google data used to train AI? No, never.
- Is my data sold or used for ads? No, never.
- How do I stop Aether from accessing Google? Click Disconnect in Integrations, or remove Aether at https://myaccount.google.com/permissions.
- How do I delete everything? Delete your account in Settings or email danrrico@gmail.com; deletion is completed within 30 days.
- Who operates Aether? Daniel Rosado, based in Panama, reachable at danrrico@gmail.com.
23. Contact Us
Operator: Daniel Rosado
App: Aether — https://aethervipai.app
Email: danrrico@gmail.com
For privacy questions, Google user data questions, or deletion requests, email us. Please do not send passwords, API keys, or other secrets by email.