Privacy Policy.

Overview

This Privacy Policy explains how Aethynex Protocol, Inc. ("Aethynex," "we," "our," or "us") collects, uses, stores, shares, and protects personal information when you use the Aethynex platform. Including our website, dashboards, creator portfolios, and all related services.

This policy applies to all users of the Platform, including Creators, Brands, and visitors. By using the Platform, you consent to the practices described in this policy.

Data We Collect

We collect the following categories of information depending on how you use the Platform:

We collect and store records of all Protocol transactions including pitch submission timestamps, response timestamps, response type (Accept / Decline / No Response), Capital Bond authorization and capture events, and Review Fee disbursements. This data is retained for operational, legal, and RRI Score calculation purposes.

We automatically collect standard technical data including IP addresses, browser type and version, device type, operating system, pages visited, time spent on pages, and referral URLs. This data is used for security monitoring, platform optimization, and aggregate analytics.

How We Use Data

We use collected data exclusively for the following purposes:

• Operating and maintaining the Aethynex Platform and Protocol
• Processing Capital Bond authorizations, captures, and voids via Stripe
• Disbursing Creator Review Fees
• Calculating and updating RRI Scores
• Sending pitch notifications, settlement confirmations, and account alerts
• Displaying verified Creator Portfolio statistics sourced from connected APIs
• Providing customer support and resolving account issues
• Detecting and preventing fraud, abuse, and Terms of Service violations
• Complying with legal obligations and responding to lawful requests
• Improving the Platform through aggregate, anonymized usage analytics

We do not use your data for advertising targeting, behavioral profiling, or sale to third-party data brokers under any circumstances.

Third-Party API Data

When a Creator connects a social account, Aethynex pulls statistics directly from that platform's official API where one is available. Connected platforms with an official API display a Verified badge on the Creator's portfolio. Platforms marked with an asterisk (*) below do not have an official developer API; stats for those platforms are self-reported by the Creator. The following data may be retrieved and displayed depending on which platforms a Creator connects:

* These platforms do not have an official developer API. Stats are self-reported by the creator and are not verified by Aethynex. They will not display a Verified badge on the creator's portfolio.

By connecting a social platform account to Aethynex, you authorize us to retrieve and display the above data on your public Creator Portfolio. You may disconnect any platform at any time from your dashboard. Disconnection will remove the live data feed but statistics already displayed may persist until the next refresh cycle.

Aethynex's use of data retrieved from third-party APIs is subject to those platforms' own developer policies and terms of service. We access only data explicitly authorized by each platform's API and your account permissions.

Payment Data

All payment processing on Aethynex is handled by Stripe, Inc. Aethynex does not store, process, or have direct access to full payment card numbers, CVV codes, or bank account details.

When you provide payment information through the Aethynex Platform, that information is transmitted directly to Stripe using industry-standard encryption. Stripe stores and processes it in accordance with their Privacy Policy and PCI DSS compliance standards.

Aethynex stores only the following payment-related information for operational purposes: the last four digits of payment cards on file, card type, expiration month and year, and transaction records (amounts, timestamps, and outcome status).

Data Sharing

Aethynex does not sell personal data. We share data only in the following limited circumstances:

When a Brand submits a Pitch to a Creator, the following Brand information is shared with that Creator: brand or company name, contact name, campaign brief content, requested deliverables, estimated budget range, and timeline. When a Creator accepts a Pitch, their contact email is shared with the Brand to enable direct communication.

We share data with carefully selected third-party service providers who assist in operating the Platform. These providers are contractually obligated to use your data only for the purpose of providing services to Aethynex and to maintain appropriate security standards. Current service providers include:

• Supabase. Database, authentication, and account data management
• Netlify. Website hosting and content delivery
• Resend. Transactional email delivery

Stripe will be added to this list once payment processing goes live.

We may disclose personal data when required by law, court order, or governmental authority, or when Aethynex holds that disclosure is necessary to protect the rights, property, or safety of Aethynex, our users, or the public.

In the event of a merger, acquisition, or sale of all or a portion of Aethynex's assets, personal data may be transferred to the acquiring entity. Users will be notified via email and/or prominent notice on the Platform prior to data transfer and will be given the opportunity to delete their accounts.

Public Portfolio Data

Creator Portfolios on Aethynex are publicly accessible by default. This means the following information is visible to anyone on the internet, including search engines, brands, and other users, without requiring a login:

• Creator handle, name, and profile photo
• Bio and professional title
• Location and language
• API-verified platform statistics
• Rate card and minimum deal size
• Content format offerings
• Past brand partnerships
• Featured work
• Availability status
• RRI Score

Do not include information in your Creator Portfolio that you do not wish to be publicly visible. Your email address is never displayed publicly and is used only for internal notifications.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Specific retention guidelines:

Security

Aethynex implements industry-standard security measures to protect your personal data including:

• TLS/SSL encryption for all data in transit
• Hashed and salted password storage. Passwords are never stored in plain text
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments
• PCI DSS compliant payment processing via Stripe

Despite these measures, no security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

Cookies

Aethynex uses cookies and similar tracking technologies for the following limited purposes:

We do not use advertising cookies, third-party tracking pixels, or behavioral profiling cookies of any kind. You may configure your browser to refuse cookies, but doing so may affect Platform functionality including login persistence.

Your Rights

You have the following rights with respect to your personal data held by Aethynex:

To exercise any of these rights, contact us at privacy@aethynex.com. We will respond within 30 days. Identity verification may be required before processing your request.

GDPR & CCPA

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing personal data is primarily contractual necessity. We process your data to fulfill our obligations under the Terms of Service. Where we process data for analytics, our legal basis is legitimate interest. You have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising CCPA rights. To submit a CCPA request, contact privacy@aethynex.com.

Children's Privacy

The Aethynex Platform is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will immediately suspend their account and delete their personal data. If you believe a minor has registered on the Platform, please contact us immediately at privacy@aethynex.com.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Material changes, such as new categories of data collection, new sharing partners, or changes to your rights, will be communicated to registered users via email at least 30 days before taking effect.

The "Last Updated" date at the top of this policy reflects the most recent revision. We encourage you to review this policy periodically. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

Contact

For privacy-related inquiries, data requests, or to report a concern: