Aither — Privacy Policy

Provisional Pilot Version — Effective 2026-09-17. These terms are provisional and apply during the Aither beta pilot. A final, attorney-reviewed version will be published before general availability. Questions or concerns: info@aitherpro.com.

Aither is a marketing platform for exterior remodeling contractors (roofing, siding, windows, doors, gutters, insulation). Contractors use Aither to manage their websites, listings, ads, leads, and reporting from a single dashboard. This privacy policy explains what data Aither collects, how we use it, when we share it, and the choices available to you.

This policy applies to:

Contractor businesses that subscribe to Aither
Employees of those contractor businesses who use the Aither platform
Homeowners who interact with contractor websites, forms, and chats that Aither hosts
Visitors to aitherpro.com

1. Who we are

Aither is operated by Aither, Inc., a Delaware corporation. Contact us at info@aitherpro.com for any privacy question.

2. Information we collect

From contractor businesses (our customers)

Business information the contractor provides during intake: legal name, DBA, physical office addresses, phone numbers, email addresses, website, employee count, trades served, licenses, insurance, credentials, awards, financing partners, service areas, brand identity, community involvement, team members, reviews and social profile URLs.
Employee information the contractor provides for team profiles and content authorship: name, title, role, bio, expertise, years of experience, headshot photo, contact information, on-camera consent, background check status where applicable.
Content the contractor creates or approves for use on their website: page copy, project stories, photos, videos, methodologies, promises, FAQs.
Files the contractor uploads: logos, license PDFs, certificates of insurance, warranty documents, project photos.
Account information: email address and password for Aither sign-in.

Through integrations the contractor authorizes

When a contractor connects a third-party service to Aither, we access data from that service on the contractor's behalf. Data we may access includes:

Google Business Profile (locations, hours, services, categories, description, posts, photos, reviews, insights)
Google Search Console (queries, clicks, impressions, indexation)
Google Analytics (traffic, conversions, page performance)
Google Ads and Local Services Ads (spend, campaign performance, lead history)
Google Tag Manager (tracking configuration)
Meta (Facebook Page, Instagram Business, Meta Ads performance)
CallRail (tracking numbers, call recordings and transcripts)
CompanyCam (job photos, job locations)
HubSpot (via Aither HQ — appointments, deals, contacts)
WordPress (one-time content extraction during migration)

Each integration has its own privacy notice from its provider; you should review theirs alongside this one.

From homeowners who interact with contractor websites

When a homeowner visits a website that Aither hosts for a contractor, or fills out a form, calls a tracked phone number, or chats through a widget we operate, we collect:

Information the homeowner provides in a form or chat: name, phone number, email, address, project details, photos they upload
Call metadata and, where the contractor enables it, call recordings and transcripts
Website usage information: pages viewed, referring source, timestamps, IP address, browser and device information, cookies as described in section 8
Location information at zip-code or city level, derived from IP or provided by the homeowner

We collect homeowner data on behalf of the contractor who operates the website. The contractor is the primary data controller for that homeowner's information; Aither is the processor.

From visitors to aitherpro.com

Basic web analytics on aitherpro.com itself — pages viewed, referring source, browser and device information. No account, no forms, no chat on aitherpro.com as of this policy's effective date.

3. How we use information

Contractor business data

Provide the Aither service to the contractor
Generate, optimize, and publish the contractor's website, listings, ads, and content
Report on the contractor's marketing performance
Communicate with the contractor about their account, billing, and product changes
Improve Aither's product using aggregated, de-identified insights that do not identify any specific contractor or homeowner

We do not use one contractor's confidential content to train models that another contractor uses.

Homeowner data (collected through contractor websites, forms, calls, chats)

Route the homeowner's inquiry to the contractor who operates the site
Attribute the inquiry to the channel that produced it (page, ad, search term, referrer)
Enable the contractor's team to follow up
Enable Aither's chat widget to answer the homeowner's questions from the contractor's approved facts
Improve response quality, spam filtering, and site performance for that contractor

Homeowner data is used only for the contractor who operates the website the homeowner interacted with. Aither does not mix homeowner data across contractors and does not sell or share homeowner data for third-party marketing.

Integration data (from Google, Meta, CallRail, CompanyCam, HubSpot, etc.)

Populate reports, dashboards, and alerts for the contractor
Enable Aither to make approved changes to the contractor's listings, ads, and social posts
Enable Aither to detect and respond to problems (rank drops, ad account issues, tracking breakage)

4. Legal bases for processing (EU/UK visitors)

Where GDPR or UK data protection law applies, we process personal information on the following bases:

Contract: to provide the service the contractor has subscribed to
Legitimate interest: to attribute leads, prevent fraud, and improve the service, where our interests do not override the data subject's rights
Consent: where required (for example, marketing cookies)
Legal obligation: to comply with tax, accounting, and other laws

5. How we share information

We share information only in these situations:

With the contractor whose account the data belongs to. Homeowner leads always go to the contractor who operates the site the homeowner visited.
With Aither HQ. Aither HQ is the shared hub across Aither's app suite. Data flows both ways per the ownership map documented in Aither's system requirements. All Aither apps share the same tenant boundary as the contractor's Aither subscription.
With service providers we use to run the platform. As of the effective date of this policy, these include Vercel (hosting), Supabase (database and auth), Cloudflare R2 (file storage), Inngest (background jobs), Stripe (payments), Google (LLM inference), Anthropic (LLM inference), and Sentry (error tracking). Each processes data on our behalf under written contracts that restrict their use to providing services to us.
With third-party integrations the contractor connects. When the contractor authorizes an integration (Google, Meta, CallRail, etc.), data flows between Aither and that provider as needed to operate the connection.
When required by law: to comply with a valid legal request or protect against fraud, abuse, or safety threats.
If Aither is acquired or restructured: information may transfer as part of the transaction, subject to notice and continued protection under this policy.

Aither does not sell personal information, and does not share it with third parties for their own advertising or marketing.

6. Data retention

Contractor account data: retained for as long as the contractor's Aither subscription is active. On cancellation, contractor data is exportable for 30 days and then permanently deleted within 90 days.
Homeowner leads: retained on the contractor's account per the contractor's own retention practices. Aither retains a copy for reporting and reconciliation for the life of the contractor's subscription.
Call recordings and transcripts: retained for the life of the contractor's subscription, then subject to the 90-day deletion window on cancellation.
Marketing performance data (daily aggregates): retained indefinitely for historical reporting; may move to cheaper storage after several years.
Deletion requests from individual homeowners: handled through the contractor's Aither HQ contact record. Personal details are removed or anonymized within 30 days; aggregated marketing totals are retained.

7. Your choices and rights

Depending on where you live, you may have rights to:

Access the personal information we hold about you
Correct inaccurate information
Delete information (subject to legal retention requirements)
Object to or restrict processing
Data portability (receive a machine-readable copy)
Withdraw consent where processing is based on consent
Opt out of "sale" or "share" for cross-context behavioral advertising (California — we do not sell or share for this purpose, but you can confirm through the mechanism below)
Lodge a complaint with a data protection authority

To exercise any right, contact info@aitherpro.com. If your data is held on behalf of a specific contractor (as is typical for homeowners), we will route your request to that contractor and support them in fulfilling it.

California specific: Aither does not sell personal information as defined by the CCPA and does not share personal information for cross-context behavioral advertising as defined by the CPRA. You may exercise your right to know, delete, correct, or limit use of sensitive personal information by emailing info@aitherpro.com.

8. Cookies and tracking

Websites Aither operates (aitherpro.com and every contractor website Aither hosts) use cookies and similar technologies for:

Essential: session, security, and load balancing
Analytics: to understand which pages are used and which sources produce leads
Advertising (only on contractor websites, only when the contractor runs paid ads): conversion tracking so ad platforms can attribute leads back to campaigns

Contractor websites publish their own cookie notice tailored to what they run. This policy covers only aitherpro.com and any Aither-branded surface.

9. Security

We take reasonable technical and organizational measures to protect information, including encryption in transit and at rest, role-based access controls, per-tenant data isolation, and periodic security review. No system is perfectly secure; we describe how we handle incidents in section 10.

Aither is not currently SOC 2 certified but implements SOC 2-aligned controls internally with the intent to pursue certification when required by a customer contract.

10. Data breach response

If Aither discovers a data incident that materially affects personal information we hold, we will:

Investigate and contain the incident
Notify affected contractors within 72 hours of confirmation
Support contractors in notifying their affected homeowners as required by applicable law
Notify regulators as required

11. Children's privacy

The Aither platform is not directed to children under 16. We do not knowingly collect personal information from children. Homeowner websites Aither operates on behalf of contractors should not knowingly be used by children; if a contractor becomes aware their site has collected information from a child, the contractor is responsible for deleting it and can contact us for support.

12. International data transfers

Aither is based in the United States. Personal information we collect is processed in the United States. Where personal information transfers from other regions (EU, UK, other), we rely on standard contractual clauses or other lawful transfer mechanisms with our subprocessors.

13. Changes to this policy

We will update this policy from time to time. Material changes will be communicated to contractors at least 30 days before they take effect. The "effective date" at the top of this policy will always reflect the current version.

14. Contact

Email: info@aitherpro.com