Security
Protecting Campaign Data Through Secure Infrastructure, Transparent Practices, and Role-Based Access.
Campaigns trust Aether with operational information every day. We believe that trust is earned through secure design, transparent practices, and clear communication—not exaggerated claims or marketing buzzwords.
Campaign Isolation
Every campaign operates inside its own organization. Campaign data is isolated and cannot be accessed by other organizations using Aether.
Authentication
Secure authentication protects every account. Access requires an authenticated user account, and passwords are securely managed through modern identity services.
Role-Based Access
Admin
Complete campaign management and organization administration.
Director
Department management, oversight, and execution.
General User
Assigned operational responsibilities with appropriate permissions.
Team Aether Administrative Access
Authorized Team Aether personnel may retain administrative access for legitimate account-management purposes including provisioning, onboarding, troubleshooting, integration support, security response, and customer-requested assistance.
That access does not transfer ownership of campaign data to Aether and is not intended for unrelated inspection or modification of a campaign's information.
Data Use & Campaign Separation
Aether does not sell campaign data or use customer campaign data as an advertising product. Data belonging to one campaign is not provided to another campaign simply because both organizations use Aether.
Encryption
All communication between your browser, mobile device, and Aether is encrypted in transit using modern industry-standard security protocols.
Your campaign owns your campaign's data.
Aether exists to help campaigns organize, understand, and execute—not to claim ownership of the information entrusted to the platform.
Connected Integrations
When a campaign connects a supported third-party service to Aether, Aether uses provider-supported authorization mechanisms, including OAuth where implemented. Aether accesses the information and capabilities authorized through that connection to provide the integration features requested by the campaign.
Connected services remain subject to the permissions, security practices, and policies of their respective providers. Campaign leadership controls which supported integrations are connected to its Aether organization.
Your Data. Your Exit.
Your campaign data remains your data. Full means full: Aether's Full Data Export provides the organization's saved Aether records in portable CSV form rather than limiting the campaign to a simplified contacts export. The goal is portability, not vendor lock-in.
Following cancellation or completion of yearly usage, Aether may retain campaign data for up to 60 days. We recommend exporting your full data set before that grace period expires.
Campaigns that want to preserve their Aether data between campaign cycles may keep their data stored in Aether for $5 per month until the next campaign rather than allowing the post-subscription retention period to expire.
Security Incident Response
If Team Aether becomes aware of a security incident affecting Aether systems or customer data, we investigate the issue, take reasonable steps to contain and remediate it, determine the affected systems and organizations, preserve relevant information for review, and communicate with affected customers as appropriate to the incident and applicable obligations.
We do not promise that security incidents are impossible. We commit to responding to them responsibly.
Shared Responsibility
Campaign security also depends on campaign practices. Organizations should protect account credentials, remove users who no longer require access, assign roles appropriately, secure connected third-party accounts, maintain independent data exports, and promptly report suspected unauthorized access to Team Aether.
Security Without Lock-In
Security should not require a campaign to surrender control of its own information. Aether combines organization isolation, authenticated access, role-based permissions, supported integration controls, administrative accountability, and full data export so campaigns can operate inside Aether without giving up ownership of their data.
Built on Transparency
We won't claim certifications we haven't earned. We won't make promises no software can honestly guarantee. As Aether grows, we'll continue strengthening security while remaining transparent about how the platform protects campaign information.
Report a Security Concern
If you've identified a security concern or believe you've found a vulnerability, please let us know. Team Aether reviews every report.