SEC 01 / 01Privacy Policy

Privacy Policy.

Last updated May 7, 2026

This Privacy Notice for Ebrius LLC ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://aeto.app or use Aeto.

Questions or concerns? Contact us at support@aeto.app.

1. What Information Do We Collect?

Information you provide to us: We collect personal information you voluntarily provide when you register for an account, use the Services, or contact us. This includes names, email addresses, job titles, mailing addresses, and any other information you choose to provide.

Payment information: Payment data is processed through Stripe, a third-party payment processor. We do not store your payment card details. Please review Stripe's privacy policy for details on how they handle payment data.

Information collected automatically: When you visit our Services, we automatically collect certain information, including your IP address, browser type and version, device characteristics, operating system, language preferences, referring URLs, device name, country, location information, and information about how and when you use our Services. This information does not reveal your specific identity but helps us maintain security and understand usage patterns.

2. How Do We Process Your Information?

We process your personal information for the following purposes:

To facilitate account creation and authentication
To deliver and maintain our Services
To respond to user inquiries and provide support
To send administrative and service-related communications
To fulfill and manage orders and subscriptions
To request feedback and improve our Services
To send marketing communications (you may opt out at any time)
To protect our Services and prevent fraud
To identify usage trends and improve user experience
To comply with legal obligations

3. Legal Bases for Processing (EU/UK/Canada)

If you are located in the EU, UK, or Canada, we process your personal information only when we have a valid legal basis to do so, including:

Consent: You have given us permission to process your information for a specific purpose.
Contract performance: Processing is necessary to fulfill our contractual obligations to you.
Legitimate interests: Processing is necessary for our legitimate business interests, provided those interests do not override your rights.
Legal obligations: Processing is necessary to comply with applicable law.

4. When and With Whom Do We Share Your Information?

We share information with vendors, service providers, and other third parties who perform services for us. They cannot use your personal information for their own purposes unless we have instructed them to do so. Our current service providers include:

Google — Analytics and advertising
Stripe — Payment processing
Supabase — Authentication and infrastructure
Resend — Email communications
PostHog — Product analytics
GoDaddy — Domain and hosting services

We may also disclose your information if required by law, in response to legal requests, or to protect our rights and the safety of our users.

5. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies (such as web beacons and pixels) to collect and store information. You can manage your cookie preferences through your browser settings. Refusing cookies may affect some features of our Services.

6. How Long Do We Keep Your Information?

We retain personal information only as long as necessary for the purposes described in this Privacy Notice or as required by law. Account data is typically retained for no more than three (3) months following account termination, unless a longer retention period is required by law.

7. How Do We Keep Your Information Safe?

We implement organizational and technical security measures designed to protect your personal information. However, no system is 100% secure, and we cannot guarantee that unauthorized third parties will never defeat our security measures. You use our Services at your own risk.

8. Do We Collect Information from Minors?

We do not knowingly collect data from or market to children under 18 years of age. If you believe we have inadvertently collected information from a minor, please contact us at support@aeto.app so we can promptly delete it.

9. What Are Your Privacy Rights?

Depending on your location, you may have rights to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal information
Restrict or object to the processing of your information
Request portability of your data
Withdraw consent at any time (where we rely on consent as the legal basis)
Opt out of targeted advertising or the sale of your data (where applicable)

To exercise any of these rights, contact us at support@aeto.app.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (DNT) feature. We do not currently respond to DNT browser signals, as a uniform standard for doing so has not been finalized.

11. US State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or another US state with applicable privacy laws, you may have additional rights regarding your personal information. These may include the right to know what personal information we have collected, the right to delete that information, and the right to opt out of its sale. To make a request, contact us at support@aeto.app.

12. Updates to This Notice

We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. We encourage you to review this notice periodically.

13. Contact Us

If you have questions or comments about this Privacy Notice, contact us at:

Ebrius LLC
P.O. Box 3749, Merrimack, NH 03054, United States
Email: support@aeto.app
Phone: (617) 823-3401