Privacy policy

1. Data controller

• Owner: Stellaris Golf LLC (Aetheron Labs)
• Identification: Sociedad de responsabilidad limitada (LLC) registrada en Florida, Estados Unidos
• Address: 407 Lincoln Road, STE 12N, Miami Beach, FL 33139, Estados Unidos
• Privacy contact: hello@aetheronlabs.com

2. What data we process and why

• Contact form and proposal builder: name, company, role, email, phone and message. To reply and prepare a proposal. Legal basis: your request (pre-contractual steps).
• Client onboarding: company and contact person details, website, texts and images you provide and your questionnaire answers. To deliver the service you purchased. Legal basis: contract.
• Payments: handled by Stripe. We only receive the payment confirmation, amount and associated email; we never see your full card details. Legal basis: contract and legal obligations (invoicing).
• LinkedIn connection: your profile or page ID, display name and the authorization (token) to publish, on your behalf, the posts you have approved. Legal basis: contract and your explicit authorization.
• Instagram and Facebook connection: ID and name of your Facebook Page and Instagram professional account, the authorization (Page token) to publish the posts you have approved and, if you hire comment management, the text of public comments on your posts and the username of their authors. Also your posts' insights (reach, engagement) for your reports. Legal basis: contract and your explicit authorization.
• Correspondence: emails we exchange with you, to deliver the service and handle issues. Legal basis: contract or legitimate interest.

3. Use of artificial intelligence

We draft content (posts, carousels, press releases, reports) with the help of AI models. Only the information needed for each piece is sent to those models (public data about your business and what you gave us for that purpose). Under those providers' terms your data is not used to train third-party models, and nothing is published without your approval or that of the person you designate.

4. Who we share data with (processors)

• Hostinger International Ltd. — website and server hosting (European Union).
• Anthropic PBC and OpenRouter Inc. — AI models used to draft content (United States).
• Stripe — subscription billing (European Union / United States).
• Google LLC — email and report storage (United States / European Union).
• Meta Platforms and LinkedIn — only to publish the content you approved on your accounts, through their official APIs.
• Press distribution agencies — only for the Authority product and with the release you validated.
• We do not sell or share your data with third parties for advertising.

5. International transfers

Some providers are located in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified or, otherwise, on the European Commission's Standard Contractual Clauses.

6. Instagram, Facebook and LinkedIn data

We use the data provided by these platforms only for what you authorized: publishing approved content, reading the insights of your own posts and, if hired, handling comments on your posts. We never publish without approval, never message people on our own initiative, never build profiles of platform users, and never use or sell this data for advertising. We comply with Meta Platform Terms and LinkedIn's terms.

You can revoke access at any time: on Facebook, Settings → Business integrations → remove "Aetheron Redes"; on Instagram, Settings → Apps and websites; on LinkedIn, Settings → Data privacy → Permitted services. Once revoked we can no longer publish and we delete the stored authorization.

7. How long we keep data

• Contacts and proposals not purchased: up to 12 months after the last contact.
• Clients: for the duration of the service and afterwards for as long as legally required (invoicing and tax, usually 6 years).
• LinkedIn, Instagram and Facebook authorizations (tokens): until the service ends or you revoke access; deleted within 30 days.
• Third-party comments handled: as long as needed to reply, up to 90 days.

8. Your rights

You may request access, rectification, erasure, objection, restriction and portability of your data by writing to hello@aetheronlabs.com. We will reply within one month. If you believe we did not handle your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

How to ask us to delete your data, including data obtained from Instagram, Facebook or LinkedIn: see the "Data deletion" page.

9. Security

Platform authorizations are stored in restricted-access files on our server, separate from the website; they are never displayed or emailed. Each client's onboarding and validation pages use private, client-specific links.

10. Changes

If we change this policy we will publish the new version here with its date and, for significant changes, notify clients by email.