HOMELEGALPRIVACY POLICY
// PRIVACY_DOCUMENT

PRIVACY POLICY

Effective Date: March 29, 2025  ·  Last Updated: March 29, 2025

PIPEDA (Canada)GDPR (EU)CCPA (California)

AETHER MESH is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our software, website, and related services. We operate under a zero-log architecture for network traffic — we do not monitor, record, or store the content of your internet activity.

01

WHO WE ARE

AETHER MESH is an independent software publishing and development company incorporated in Ontario, Canada, with its principal place of business at 85 The Pond Rd, North York, Ontario, M3J 0L7, Canada. For the purposes of applicable privacy legislation, AETHER MESH is the "data controller" responsible for your personal information.

For privacy-related inquiries, contact our privacy officer at: [email protected]

02

INFORMATION WE COLLECT

We collect the following categories of personal information:

CategoryExamplesPurpose
Account InformationName, email address, billing addressAccount creation, subscription management, customer support
Payment InformationCredit card details (tokenized), billing historyProcessing subscription payments via Outseta
Device & Technical DataIP address, operating system, software versionLicense validation, software updates, security
Usage DataFeature usage, crash reports, diagnostic logsProduct improvement, bug resolution
CommunicationsSupport tickets, email correspondenceCustomer support and service delivery

What we do NOT collect: AETHER MESH does not log, monitor, inspect, or store the content of your network traffic, the websites you visit, the games you play, or any data transmitted through our tunneling software. Our network utility software operates on a strict zero-log basis for all user traffic.

03

HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

  • To create and manage your account and subscription;
  • To process payments and send billing-related communications;
  • To provide, maintain, and improve the Software and Service;
  • To authenticate your licence and prevent unauthorized use;
  • To send important service notices, security alerts, and updates;
  • To respond to your support requests and inquiries;
  • To comply with legal obligations and enforce our Terms of Service;
  • To detect, prevent, and address fraud, security breaches, or technical issues.

We do not sell your personal information to third parties. We do not use your personal information for targeted advertising.

04

LEGAL BASIS FOR PROCESSING (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data on the following legal bases:

Legal BasisProcessing Activity
Contractual NecessityAccount management, subscription processing, licence delivery
Legitimate InterestsSecurity, fraud prevention, product improvement, diagnostic logging
Legal ObligationCompliance with applicable tax, financial, and regulatory requirements
ConsentMarketing communications (where separately obtained)
05

SHARING YOUR INFORMATION

We do not sell, trade, or rent your personal information. We may share your information with trusted third-party service providers who assist us in operating the Service, subject to confidentiality obligations:

Third PartyPurposeData Shared
OutsetaSubscription & payment managementName, email, billing address, payment tokens
X (Twitter) AdsConversion tracking (pixel)Hashed email (optional), conversion events
Cloudflare R2Software distributionNo personal data — file hosting only
Email service providerTransactional emailsEmail address, name

We may also disclose your information where required by law, court order, or governmental authority, or to protect the rights, property, or safety of AETHER MESH, our users, or the public.

06

DATA RETENTION

We retain your personal information for as long as your account is active or as necessary to provide the Service. Upon account termination, we will delete or anonymize your personal data within ninety (90) days, except where we are required to retain it for longer periods to comply with legal obligations (such as tax and financial records, which are retained for seven (7) years as required under Canadian law).

Diagnostic and crash log data is retained for a maximum of twelve (12) months and is automatically purged thereafter.

07

COOKIES AND TRACKING TECHNOLOGIES

Our website uses the following tracking technologies:

TechnologyProviderPurpose
Analytics (Umami)Manus / Self-hostedPrivacy-respecting page view analytics — no personal data collected
Conversion PixelX (Twitter) AdsTracking subscription conversion events for advertising measurement
Session CookiesOutsetaAuthentication and subscription session management

The X Ads conversion pixel fires only when you click a subscription button. It may transmit a hashed version of your email address if you have provided one, solely for conversion attribution. You may opt out of X's advertising tracking at X's privacy settings.

08

INTERNATIONAL DATA TRANSFERS

AETHER MESH is based in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection for commercial organizations subject to PIPEDA. Where we transfer personal data to third-party processors located outside Canada, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

09

YOUR RIGHTS

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

RightDescriptionJurisdiction
AccessRequest a copy of the personal data we hold about youPIPEDA, GDPR, CCPA
CorrectionRequest correction of inaccurate or incomplete dataPIPEDA, GDPR
DeletionRequest deletion of your personal data ('right to be forgotten')GDPR, CCPA
PortabilityReceive your data in a structured, machine-readable formatGDPR
ObjectionObject to processing based on legitimate interestsGDPR
Opt-Out of SaleWe do not sell personal data — this right is automatically satisfiedCCPA
Withdraw ConsentWithdraw consent for consent-based processing at any timePIPEDA, GDPR

To exercise any of these rights, contact us at [email protected]. We will respond within thirty (30) days. We may need to verify your identity before processing your request.

10

CHILDREN'S PRIVACY

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at [email protected] and we will delete it promptly.

11

SECURITY

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include AES-256 encryption for data in transit and at rest, access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

12

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by sending an email notification to registered users. We encourage you to review this Policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated Policy.

13

CONTACT & COMPLAINTS

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our privacy officer:

AETHER MESH — Privacy Officer
85 The Pond Rd, North York, Ontario, M3J 0L7, Canada

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. If you are located in Canada and are not satisfied, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.