You’re trusting us with your name. Here’s how we look after it.

• You connect LinkedIn through a secure sign-in page run by our LinkedIn integration partner, Unipile. We never see or store your LinkedIn password.
• Email inboxes on the Full program are connected the same way. The sending domains we set up for you are separate from your main company domain, so your everyday email isn’t put at risk.
• We use the access to do the work you’ve agreed to: posting approved comments, sending approved connection requests and messages, and reading replies so your editor can respond.

• Access tokens and service credentials are encrypted at rest with AES-256-GCM, and all traffic is encrypted in transit with TLS.
• Your workspace holds your voice brief and brand rules, the drafts and edits, what was sent and the replies, and the people we’re talking to on your behalf.
• Payments are handled by Stripe. We never see or store your full card number.
• Drafting uses AI model providers. They process only what’s needed for each draft and aren’t permitted to train on it.

• Each client’s workspace is separated at the database level; one client can never see another’s data.
• Inside Aethrel, access is by role: your editors work on your account, and Aethrel’s administrators can see it to run and support the service.
• Your own portal is read-only: you see everything that went out and the results, without being able to change anything by accident.
• Every draft, edit, approval and send is written to an audit trail that can’t be edited or deleted, recording who did what and when.

• Pause everything yourself, at any time, from your portal. Nothing goes out until your editor resumes it with you.
• End our access whenever you like: ask us to disconnect your account, or sign out of all sessions from LinkedIn’s own settings. Stopping access doesn’t remove anything already posted.
• Anyone who says no or unsubscribes is never contacted again, and on request we delete a person’s details everywhere, keeping only a scrambled marker so they stay on the do-not-contact list.
• When you leave, you can ask us to delete your data. Billing records and the audit log are kept for the period the law or our agreements require. The details are in our Privacy Policy.

Aethrel runs on Google Cloud (Firebase) for data and sign-in, and Vercel for the application. Each partner processes data only to provide its part of the service. We don’t sell or share your information for anyone else’s purposes.

We don’t hold security certifications yet, and we won’t claim ones we don’t have. If you need answers for a security review, email hello@aethrel.com and we’ll go through it with you.

If you think you’ve found a security issue, email hello@aethrel.com with “Security” in the subject. We’ll reply quickly and keep you updated while we fix it.