How Aethova Handles Your Data
Last updated: October 8, 2025
This Privacy Notice explains what personal data we collect on aethova.com, how we use it, and your choices. This site currently provides a contact flow for prospective customers of Aethova’s BRIDGE™ platform.
Controller
Aethova, LLC (“Aethova,” “we,” “us”) is the controller of personal data collected on aethova.com. Contact us at privacy@aethova.com. Mailing address available upon request. If you are in the EEA/UK, you may also contact your data protection authority.
What We Collect
If you submit our contact form, we collect:
- Identifiers — name, work email
- Message content — the information you include in your request
- Technical/anti-spam data — IP address, user agent, timestamp, and similar metadata
How We Use Your Data
- Respond to your inquiry and schedule meetings
- Provide information about BRIDGE™ and relevant services
- Prevent spam and abuse of the form endpoint
- Operate, secure, and improve the website
Legal Bases (EEA/UK)
- Legitimate interests (responding to inbound requests; site security)
- Consent (where required for optional communications)
California Notice at Collection
We collect the following categories of personal information for the purposes stated below. We do not “sell” or “share” personal information as those terms are defined by the CCPA/CPRA.
- Identifiers (name, work email): respond to inquiries; schedule meetings; site operations. Retention: up to 12 months unless we engage further.
- Internet/technical data (IP, user-agent, timestamp, anti-spam metadata): security, fraud prevention, diagnostics. Retention: up to 12 months (shorter where feasible).
- Free-text message content: respond to your request; evaluate fit for services. Retention: up to 12 months unless we engage further.
Sensitive information: We do not intentionally collect it via our contact form. Please do not include it. To exercise rights, see Your Choices & Rights. We honor Global Privacy Control (GPC) signals where applicable.
Cookies & Tracking
We use Google Analytics 4 (GA4) to understand how visitors use our website and improve our content. GA4 may collect information such as your IP address (anonymized), browser type, device information, pages visited, and how you interact with our site. This data helps us analyze website traffic and user behavior.
Cookie Consent: In the EEA/UK and for all visitors, we request your consent before loading Google Analytics. You can accept or decline analytics tracking via the cookie banner displayed on your first visit. Your choice is stored locally in your browser and you can change it at any time by clearing your browser's local storage.
Global Privacy Control (GPC): We recognize and honor GPC signals. If your browser sends a GPC signal, we automatically decline analytics tracking without showing the consent banner. We do not "sell" or "share" personal information as defined by privacy laws.
GA4 Configuration: When you consent to analytics, we configure GA4 with privacy-first settings including IP anonymization, disabled cross-device tracking, disabled ad personalization, and a 90-day cookie expiration. You can opt out of Google Analytics at any time using the Google Analytics Opt-out Browser Add-on.
Who Processes Your Data
- Hosting/CDN: Vercel, Inc. (United States) — website hosting and security
- Form Processing: Basin/UseBasin — receives and stores contact form submissions
- Analytics: Google LLC (United States) via Google Analytics 4 — collects anonymized usage data only after you consent
International Transfers
Your information may be processed in countries outside your own, including the United States. Where required, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs) and—where applicable—vendor participation in the EU-U.S. Data Privacy Framework or the UK Extension. We also apply supplementary measures as appropriate.
Retention
- Contact submissions: retained up to 12 months from last interaction to manage your inquiry, unless we begin a business engagement. If you opt in to receive updates or marketing, we retain your contact details for that purpose until you unsubscribe or we determine the address is inactive.
- Operational logs/anti-spam data: retained up to 12 months for security and troubleshooting (shorter where feasible).
Your Choices & Rights
Depending on your location, you may have rights to request access, correction, deletion, portability, or to object/restrict certain processing. Submit requests using the contact information provided in the Controller section above. If we decline a request, you may appeal by replying to our decision email; if unresolved, you may contact your supervisory authority or state attorney general.
Your Rights by Region
- EEA/UK: GDPR rights incl. access, rectification, erasure, portability, objection, and restriction; right to lodge a complaint with your DPA.
- United States (state laws): Similar rights under applicable state laws (e.g., CA, CO, CT, VA, UT, OR, TX, and others). We do not sell/share personal information and do not use it for targeted advertising.
Children’s Data
This site is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has provided personal information, contact us at privacy@aethova.com and we will delete it.
Security
We use industry-standard technical and organizational measures appropriate for a static marketing site (e.g., HTTPS, security headers, access controls). No method of transmission is 100% secure.
Changes
We may update this Notice. The “Last updated” date will reflect the most recent version.