Privacy

1Who is responsible

Aether is operated by an individual based in Sri Lanka. For anything on this page, including a request to see or delete your data, write to mathishagammanpila91@gmail.com. This notice is written with the Personal Data Protection Act No. 9 of 2022 in mind; where that Act gives you a right described below, the address above is how you exercise it.

2What is collected, and why

Two different things are kept, and they are worth separating, because the rules for them differ.

About you, as an account holder:

Email address

To identify your account and to let you sign in. Supplied by you, or by Google if you choose to sign in that way.

Name

Shown in the interface so people in the same workspace can tell who did what. Optional — the account works without it.

Sign-in identifier

An opaque id issued by Clerk, our authentication provider. It links your sign-in to your workspace and is not usable outside this service.

Workspace and role

Which organisation you belong to and whether you may view, build or own. This is what decides what you are allowed to read.

Activity record

Who changed which figure, when, and what it was before. Written to an append-only log that nobody — including your own workspace — can edit or delete.

The information you put into the service:

Financial models, budgets, actuals and commentary. For the small-business tools, also customer and supplier records, credit ledgers, invoices, bank lines and stock movements. Some of that — a customer’s name and phone number, for instance — is personal data about people who are not you. It is stored so the service can do the job you asked it to do, and it is treated as yours: it is not read, mined, sold, or used to train anything.

3What is not collected

There is no analytics, no tracking pixel, no advertising, and no behavioural profiling. The service sets no cookies of its own; the only cookies in your browser are the ones the sign-in provider needs to keep you signed in. Nothing you enter is used to train a machine-learning model. There is no mailing list, so there is nothing you need to unsubscribe from.

4Who else is involved

Four services, and no others. The browser reaches nothing that is not in this list — that is enforced by a Content Security Policy, not merely intended.

Clerk

Authentication. Holds your email, your name and your sign-in credentials, and issues the session. If you sign in with Google, Google confirms your identity to Clerk.

Neon

The Postgres database where everything above is stored.

Vercel

Hosting. Serves the pages and runs the server code.

Google Fonts

The two typefaces the site is set in. Your browser requests them when a page loads.

One thing is worth stating because it looks like an integration and is not: the small-business tools can open a prefilled payment reminder in WhatsApp. That is a link you click. Nothing is sent anywhere until you choose to send it, and the service has no connection to WhatsApp.

5How it is kept apart

Each organisation is a separate tenant, and the separation is enforced by the database itself through row-level security rather than by application code remembering to filter. The application connects using a role that has no power to bypass those rules. Membership is checked against the database on every request before anything is read — not taken from the sign-in token, and never from the address bar.

This is tested rather than asserted: an automated suite attempts to read, alter and plant rows across tenants on every change, and a release does not ship unless every one of those attempts is refused.

6Where it is kept, and for how long

Data is stored on infrastructure operated by Neon and Vercel, which means it may be held on servers outside Sri Lanka. It is kept for as long as your workspace exists. Delete a record in the application and it is gone from the working data; the append-only activity log keeps the fact that a change happened, because a log that can be edited is not a log.

Ask for your workspace to be deleted and everything in it is removed, the log included, within 30 days.

7What you can ask for

Write to the address in section 1 to get a copy of your data, correct something that is wrong, have it deleted, or ask a question about any of this. A reply comes within 30 days. There is no form and no account tier — it is one person reading the email.

8Using it without an account

The guest model runs entirely in your browser. Nothing you type into it is sent to the server, nothing is stored, and nothing survives closing the tab. No account, and no personal data.

9Changes

If this notice changes, the date at the top changes with it. Anything that materially affects what is collected or who it is shared with will also be said by email to account holders before it takes effect.