Privacy Policy

Last updated: 16 August 2026

Aethex provides a deterministic verification layer for automated and AI-driven decisions. This policy explains what information we collect, how we use it, and the choices you have. We have deliberately designed Aethex to require as little personal data as possible.

1. Our data-minimisation principle

Aethex operates on events — structured signals describing a decision, such as event types, flags, and categories. It is not a system of record and does not require personal data, customer files, or complete transaction histories to return a verdict. The less sensitive data we hold, the less risk we create for you and your customers.

2. Information we collect

Information you give us. If you contact us — for example by emailing hello@aethexai.net — we receive your email address and whatever you choose to include.
Evaluation and pilot data. Where a prospective customer asks us to run an evaluation, we use anonymised or historical data provided by that customer under a separate written agreement. We do not request personal data for evaluations.
Service data. If you use our API, we process the events you send in order to return a verdict, and we retain records necessary for audit, security, and reliability.
Website analytics. We use privacy-friendly analytics to count page views and understand general traffic patterns. We do not use advertising cookies or sell data.

3. How we use information

To provide, operate, and secure the Aethex service.
To respond to enquiries and provide support.
To maintain audit and reliability records, which is a core function of a verification service.
To improve the accuracy and coverage of our rule sets, using aggregate and non-identifying information.

4. What we do not do

We do not sell personal information.
We do not use customer data to train machine-learning models. Aethex contains no model in its decision path.
We do not require or request end-customer personal data in order to return a verdict.

5. Sharing

We share information only with service providers who help us operate the service (such as hosting, database, and monitoring providers), under obligations of confidentiality; or where required by law. Where we act as a processor for a customer, we do so under a written data processing agreement.

6. Security

We use encryption in transit, access controls, and audit logging. Because Aethex is rule-based and inspectable, there is no opaque model that could surface data through its outputs. We are an early-stage company and describe our security posture accurately: certifications we do not yet hold are not claimed. Prospective customers are welcome to ask us directly about our current status.

7. Retention

We retain information for as long as needed to provide the service and to meet audit, legal, and security obligations, after which it is deleted or anonymised. Retention periods for customer service data are set out in the applicable customer agreement.

8. International transfers and residency

Our infrastructure is currently hosted outside India and the EEA. Where a customer requires data to remain within a particular jurisdiction, we address that in the customer agreement before any production data is processed.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, or to object to certain processing. To exercise any of these, email hello@aethexai.net and we will respond within a reasonable period.

10. Children

Aethex is a business-to-business service and is not directed to children. We do not knowingly collect information from anyone under 18.

11. Changes

We may update this policy. When we do, we will revise the date at the top of this page.

12. Contact

Questions about this policy, or about how we handle information, can be sent to hello@aethexai.net.