Privacy Policy

This policy explains what personal data Aethra collects when you use our website and product, why we collect it, who we share it with, and the choices you have. It’s written to describe what the product actually does, not a generic template — if something below stops being accurate as the product changes, treat that as a bug and tell us.

Account information: name, email address, and password (stored as a salted hash — we never see or store your plaintext password). If you sign in with Google, we receive your Google account ID and the profile info Google shares for that flow.

Profile information you choose to add: avatar/banner images, phone number, location, job title, current company, a professional summary, skills, work experience, education, projects, certificates, and social links. All of this is optional and is used to power features like Fill-from-Profile and the AI analysis.

Resume and career content: resumes you upload (and the text extracted from them), AI analysis results, optimized resume/cover-letter/LinkedIn text you generate, and any content you post to the community Feed (posts, articles, comments).

Usage and billing data: which features you use, AI-credit consumption, and — if you subscribe to a paid plan — billing details handled by our payment processor, Lemon Squeezy (Aethra does not store your card number).

Cookies: a single httpOnly session cookie used to keep you signed in. We don’t use third-party advertising or tracking cookies.

• To provide the Service — running analyses, generating documents, keeping you signed in.
• To operate billing for paid plans and enforce plan/credit limits fairly.
• To send account-related email — password resets, security notices, and (if you don’t opt out) product updates.
• To detect abuse, enforce our Terms, and keep the Service secure.
• To improve the product — in aggregate, not by reading your resume content for purposes unrelated to giving you the analysis you asked for.

We don’t sell your personal data. We share it only with the service providers that make the product work, each bound to only use it to provide their service to us:

• Anthropic — processes the resume/document text you submit for AI analysis. Anthropic does not use API data to train its models.
• MongoDB Atlas — hosts our database.
• Render — hosts our backend infrastructure.
• Lemon Squeezy — processes payments for paid plans.
• Resend — delivers transactional email (password resets, confirmations).
• Google — only if you choose “Sign in with Google.”

We may also disclose information if required by law, or to protect the rights, safety, or security of Aethra, our users, or the public.

Anything you publish to the Feed as a public post is, by design, visible to other users and to anyone with a direct link — that’s the point of a public post. Draft and scheduled posts are private to you until published. Choose what you post accordingly.

• Edit or remove most profile fields at any time from your account settings.
• Delete individual resumes, analyses, or Feed posts from within the product.
• Delete your account from account settings. It’s deactivated immediately and permanently erased after 30 days — sign in again within that window to restore it in full.
• Turn off non-essential email notifications from your notification settings.
• Contact us to request a copy of your personal data, or to ask a question about how it’s handled.

If you’re in a jurisdiction with statutory data-protection rights (e.g. GDPR or CCPA), those rights apply and we’ll honor requests made under them — reach out using the contact below.

We keep your account data for as long as your account is active. Deleting your account deactivates it immediately — your profile stops being visible, you’re excluded from search, and your session ends. After a 30-day recovery window the account and its content are permanently erased by an automated job. Signing in during that window restores everything.

A few things outlive the purge: payment records are retained where billing or tax law requires it; testimonials you chose to publish are kept but stripped of the link to your account; and we keep a one-way hash of your email (no reversible personal data) so a re-registered address doesn’t receive another free-credit allocation.

Passwords are hashed, never stored in plain text. Traffic to Aethra is encrypted in transit (HTTPS). Access to production data is limited to what’s needed to operate the Service. No system is perfectly secure, and we can’t guarantee absolute security — but we take reasonable, industry-standard measures to protect your data and will let you know if we become aware of a breach affecting you.

Aethra isn’t directed at children under 16, and we don’t knowingly collect personal data from anyone under that age.

We may update this policy as the product changes. We’ll update the “last updated” date above, and for material changes we’ll make a reasonable effort to notify active users directly.

Questions about this policy, or a request about your data? Reach us at support@aethrahq.com.