Privacy Policy

Last updated: 16 January 2026

1. Data Controller

The data controller responsible for your personal data is:

Aether Labs
[Your Registered Address]
Greece
VAT: [ΑΦΜ Number]
Email: [email protected]

2. Data We Collect

We collect and process the following types of personal data:

  • Account Information: Name, email address, username, and password (hashed)
  • Purchase Information: Billing details, purchase history, and transaction records (processed by Paddle)
  • Technical Data: IP address, browser type, device information, and cookies
  • Usage Data: Pages visited, features used, and interaction with our services
  • Support Data: Communication history, support tickets, and feedback

3. Purpose and Legal Basis

We process your data for the following purposes under these legal bases:

Contract Performance

To provide our services, process purchases, deliver digital products, and manage your account.

Legitimate Interest

To improve our services, prevent fraud, ensure security, and analyze usage patterns.

Consent

For marketing communications and non-essential cookies (you may withdraw consent at any time).

Legal Obligation

To comply with tax, accounting, and other legal requirements.

4. Third-Party Processors

We share your data with the following third-party service providers:

  • Paddle.com Market Limited: Payment processing and billing (Merchant of Record). Paddle handles all payment data, invoicing, and customer billing inquiries. View Paddle's privacy policy at paddle.com/legal/privacy
  • Google Cloud Platform: Hosting and file storage for plugin files
  • Analytics Services: To understand usage patterns and improve our services (only with your consent)

5. Data Retention

We retain your personal data for the following periods:

  • Account Data: Until account deletion or 3 years of inactivity
  • Purchase Records: 10 years (Greek tax law requirement)
  • Support Tickets: 3 years after resolution
  • Technical Logs: 90 days
  • Marketing Data: Until consent is withdrawn

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Limit how we process your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing or cookies at any time

To exercise any of these rights, please email us at [email protected].

7. Cookies and Tracking

We use cookies and similar technologies. Essential cookies are necessary for the site to function. Non-essential cookies (analytics, advertising) require your consent. You can manage your preferences through our cookie banner or in your browser settings.

For more information, see our Cookie Policy.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Secure hosting infrastructure

9. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Continued use of our services after changes constitutes acceptance.

12. Contact and Complaints

For any questions about this privacy policy or to exercise your rights:

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):

Hellenic Data Protection Authority
Kifisias Ave. 1-3, 115 23 Athens, Greece
Phone: +30 210 6475 600
Website: www.dpa.gr