Privacy Policy
Effective Date: [TBD — insert before launch] · Last Updated: 2026-03-24
TL;DR
- We collect basic account info from your Google login (email, name, profile photo) and standard technical data (IP address, browser info).
- We do not collect financial account info, brokerage data, payment info, social security numbers, or trading activity.
- Your data is stored on Google Cloud Platform in the United States (us-central1).
- We don't use advertising cookies or sell your data to third parties.
- You can delete your account and data at any time by contacting us.
1. Introduction
This Privacy Policy describes how Aether Finance ("Aether," "we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website at aetherterminal.com, our API, and related services (collectively, the "Service").
By using the Service, you consent to the practices described in this Privacy Policy.
2. Data We Collect
2.1 Account Data
When you create an account using Google OAuth via Firebase Authentication, we receive:
- Email address — used for account identification and service communications.
- Display name — shown on your profile and research posts.
- Profile photo — displayed on your profile (from your Google account).
2.2 User-Generated Content
Research posts, saved dashboard views, widget layouts, and watchlists you create on the Platform.
2.3 Usage Data
Pages visited, features used, timestamps, and search queries within the Platform. Detailed usage analytics are not yet implemented but are planned using privacy-respecting tools (Plausible or PostHog).
2.4 Technical Data
IP address, browser type and version, device type and operating system, and referring URL — automatically collected through standard web server operations.
2.5 Feedback and Support
Bug reports, feature requests, support tickets, and any attached screenshots or files.
3. Data We Do NOT Collect
We want to be clear about what we do not collect:
- Financial account information — we do not connect to your bank or brokerage.
- Payment or billing data — no paid tier exists; no credit card info is collected.
- Social Security numbers or government IDs.
- Trading activity — we do not track trades you make outside the Platform.
- Biometric data.
- Precise geolocation (beyond what is inferable from IP address).
4. How We Use Your Data
- Provide the Service — authenticate your account, display your profile, save preferences.
- Improve the Service — understand aggregate usage patterns to improve features and fix bugs.
- Personalize your experience — remember widget layouts, watchlists, and saved views.
- Communicate with you — service-related emails (security alerts, Terms changes). We do not send marketing emails.
- Ensure security — detect and prevent abuse, fraud, and unauthorized access.
We analyze usage data in aggregate form, not on an individual basis.
5. Data Storage and Security
Your data is stored on Google Cloud Platform infrastructure in the United States (us-central1, Iowa):
- BigQuery — structured data and aggregated analytics.
- Google Cloud Storage (GCS) — images and file uploads.
- Cloud Run — API server (stateless, no persistent user data).
- Firebase Authentication — auth tokens and account metadata.
We implement reasonable security measures including encryption in transit (TLS/HTTPS), encryption at rest in Google Cloud, and access controls. No method of transmission or storage is 100% secure — we strive to protect your data but cannot guarantee absolute security.
6. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Google Cloud Platform | Infrastructure | All stored data |
| Firebase | Authentication | Email, name, photo, auth tokens |
| Vercel | Frontend hosting & CDN | IP address, browser info (logs) |
| Plausible / PostHog | Analytics (future) | Anonymized usage data |
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
7. Cookies and Local Storage
The Platform currently uses minimal browser storage:
- Firebase authentication token — stored in localStorage to maintain your login session (not a cookie).
- User preferences — widget layouts and view settings in localStorage.
We do not use advertising cookies, third-party tracking cookies, or cross-site tracking. If analytics are added in the future, we will use privacy-respecting tools that do not require cookie consent banners and will update this policy accordingly.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (email, name, photo) | While account is active |
| User-generated content | Until deleted by you |
| Usage / server logs | 90 days, then auto-deleted |
| Feedback submissions | Life of your account |
When you delete your account, personal data is purged within 30 days. Research posts and user content are removed. Anonymized aggregate data may be retained. Backups are overwritten within their normal rotation cycle (up to 30 days).
9. Your Rights
- Right to Access — request a copy of the personal data we hold about you.
- Right to Deletion — delete your account and request deletion of your personal data.
- Right to Data Export — export your research posts, saved views, watchlists, and account info.
- Right to Correction — request correction of inaccurate data (most corrections can be made by updating your Google profile).
To exercise any of these rights, email us at privacy@aetherterminal.com. We will respond within 30 days.
10. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. Contact us at privacy@aetherterminal.com if you believe a child has provided us with personal information.
11. International Users
Aether Finance operates from the United States. If you access the Service from outside the U.S., your data will be transferred to and stored in the United States. By using the Service, you consent to this transfer. U.S. data protection laws may differ from those in your country.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on the Platform with a new effective date and notified via email. Continued use after changes take effect constitutes acceptance.
13. Contact Us
Privacy inquiries: privacy@aetherterminal.com
General legal: legal@aetherterminal.com
Website: aetherterminal.com
⚠️ Lawyer Review Required
- State Privacy Laws: Review for CCPA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut) compliance. Consider "Notice at Collection" for California users.
- GDPR: If EU/EEA users are expected, assess GDPR compliance — lawful basis, DPO designation, cross-border transfer mechanisms.
- Security Disclosures: Verify descriptions meet state breach notification requirements.
- Data Retention: Confirm periods comply with data minimization requirements.
- User Rights: Verify rights meet all applicable state privacy law requirements, including response timeframes and appeal processes.
- COPPA: Confirm compliance given no age-gating at registration.