Privacy policy

01Who we are

Aetheros Online (aetheros.online) is this website and the web apps for content creators published on it. It is run by Hoang Huynh aka Aetheros, based in Italy, who is the data controller for the processing described here.

For anything about your data, use the contact page or write to hello@aetheros.online.

02The short version

• Without an account, your work lives only in your browser, on your device.
• With an account, your work is also saved to it, so it follows you to your other devices. It is private to you: our admins see how much is stored, never what it says.
• If you connect your calendars to Sync, it reads them and writes copies of your meetings between them, the way you set it up. That calendar data is used only to run Sync for you.
• If you use Sync to take bookings or invite guests, the people involved share their name and email with you through Sync. We handle those details on your behalf, only to arrange and follow up those meetings, and the emails Sync sends are only about them.
• Only the features that need a server send data to our service, and only what that feature needs: AI writing, transcription, AI pictures, stock search, downloads and link previews.
• The Workspace in Studio (called Assets until 17 October 2026) makes clips and graphics from your videos on your own computer. Only the voice track and text reach our service; faces are located on your computer to frame the clip, never identified.
• Aetheros Offline, the helper app you can install for Studio’s B-roll, works on your own computer and sends us none of your files. Twice a day it asks our site whether a new version exists, without any identifier.
• No ads, no analytics, no tracking cookies. The apps and their fonts are served from our own domain.
• An account is optional. You can download everything we keep about you in one archive, remove your work from a device, or delete the account and everything saved to it, at any time.
• We never sell or rent your data.

03Where your work is saved

The apps always save your work in your browser’s storage (localStorage and IndexedDB) on the device you use: settings, scripts, episodes, plans, decks, shows, images you attach, recent links and output themes. That copy lets every app work offline.

Without an account, that is the only copy. It never leaves the device unless you export it or use a feature listed under “What reaches our service”.

When you are signed in, the apps also save your work to your account, so it follows you to your other devices, and bring back what you changed elsewhere. This covers your items in each app, your themes and the preferences that belong to you (the screen layout of each device stays on that device). Pictures up to 10 MB are copied too; videos, sounds and larger files stay on the device where you added them. The first time you sign in on a device, the work already on it is added to your account.

Your work in your account is private: only you can read or change it. Administrators can see how many items and how much space each app uses, never their content.

Some apps can also work in a folder you choose on your computer or NAS, such as a project folder for an episode. The browser asks for your permission first, and those files stay where they are: we receive none of them. Studio writes your work in each project (scripts, plans, decks, shows) into that folder too, as readable files. When you are signed in, Studio also saves the list of what the folder holds (folder and file names, sizes and dates, never the files) to your account, so your other devices can show the folder read only and say which computer has it.

You stay in control: each app can save a backup and clear its library; the account page can log you out and remove your work from a device; clearing your browser’s site data for aetheros.online removes the device copy; deleting the account removes the account copy.

04Your account

An account is optional: every app works without one. If you create one, we keep your email, the name and picture you choose (or that Google shares when you sign in with Google), the ways you sign in (email code or link, Google), the dates you joined and last signed in, and whether you are a supporter (PRO). We use this to sign you in to every Aetheros app, to unlock PRO features and to keep your work in step across your devices (see “Where your work is saved”).

There is no password. To sign in with your email we send you a one-time link and code. If you choose Google, Google confirms who you are and shares your name, email and picture; we receive no access to your Google data beyond that.

You can change your name and email, connect or disconnect Google, log out on every device and delete the account at any time from the account page. Deleting it removes these data and the work saved to the account at once. Before that, or whenever you like, Download your data on the same page gives you one archive with your account, the work of every app, your pictures and what Sync keeps for you (calendars, meetings, guests, bookings, the emails it sent), in open formats; stored access to your calendars is never included.

05Your calendars in Sync

Sync is the Aetheros calendar. It works only with an account, and only with the calendars you connect: Google Calendar, Microsoft (Outlook.com and Microsoft 365), iCloud and other CalDAV servers, and calendar links (ICS) you paste. Each connection asks for its own consent, even with the Google account you sign in with.

What Sync reads. The list of your calendars (name, colour, whether Sync may write to it) and the meetings in a window from 30 days back to 180 days ahead: title, start and end, time zone, place, meeting link, whether you organise the meeting, your answer to the invitation and the identifiers that let Sync recognise it. Sync does not read meeting descriptions or attachments, and does not keep the details of the other attendees.

What Sync stores. Those meeting details are kept in your account, so the unified calendar shows them on every device you sign in on. Only you can see them. Sync’s activity log records what Sync did, never what your meetings say, and administrators see counts only. The access Sync needs to reach a calendar (a token from Google or Microsoft, an app-specific password for iCloud or another CalDAV server, the address of a private calendar link) is encrypted in Supabase Vault, used only by the Sync service and never sent to your browser.

What Sync writes. Following the master calendar and the mode you choose, Sync writes copies of your meetings into your other connected calendars, with full details or as “Busy” only, as you decide for each calendar. Copies carry no attendees, so nobody receives an invitation from a copy, and a hidden mark so Sync can recognise them. When you create a New Sync, Sync writes the meeting into the calendar you pick; if you add a guest’s email, your calendar provider sends the invitation from your own account.

Your private feed. Sync can give you a private address (ICS) of your unified calendar, to read it in other apps. Anyone who has that address can read the meetings in it, so share it with care. You can reset it in Sync: the old address stops working at once.

How changes arrive. Google and Microsoft notify our service when one of your calendars changes; the notification says which calendar changed and nothing else. iCloud, other CalDAV servers and calendar links are checked every 10 to 15 minutes.

Other people. Meeting titles and places can mention other people, and a guest’s email reaches your calendar provider when you invite them. Sync handles these details on your behalf, only to show and copy your meetings.

Google data. Sync’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data is used only to provide Sync’s features to you. It is never sold, never used for advertising, never used to develop or train AI models, and no person reads it unless you ask us to for support, it is needed for security, or the law requires it. We apply the same rules to the data of every other calendar you connect.

Removing a calendar. In Sync, Calendars › Remove deletes the copies Sync wrote into your other calendars, stops the notifications, and deletes the stored access and the meetings read from that calendar. You can also withdraw Sync’s access at any time from the security settings of your Google or Microsoft account; Sync then stops updating that calendar. Deleting your Aetheros account removes all of this from Aetheros, stored access included. Copies Sync already wrote stay in your calendars once it loses access, so remove your calendars in Sync first if you want the copies gone.

06Booking pages and guests in Sync

Sync can give you a public booking page (aetheros.online/sync/#yourname) and help you take guests, such as podcast guests, from the first invitation to the thank-you after the show.

What your page shows. Anyone with its address sees your name, your picture, your opening line, the booking links you leave open and the times you are free. Free times are worked out from the calendars you mark as busy for bookings; the page never shows what your meetings are, who is in them or which calendar they come from. You can pause a booking link or change your address at any time.

When someone books. The person booking gives their name, email, time zone and the answers to the questions you added. Sync writes the meeting into the calendar you chose, with them as an attendee, so your calendar provider sends them the invitation from your account. The booking is saved in your account with those details and a private link that lets them move or cancel it. While they fill in the form, the time they picked is held for a few minutes so nobody else can take it.

Guests. When you invite a guest through Sync, Sync keeps their name and email, the episode and the Sync you link them to, the result of their tech check (the rating and the suggested fixes, never audio or video), the agenda versions sent, whether their email address can still be reached, and where they stand, from invitation to thank-you. Each invited guest gets a personal link to your page that fills in their name and email when they book; the link shows nothing else about them. Agendas are built from the Story episode you choose, saved in your account: the guest receives the titles and timings of its parts, the sub-story titles if you pick the outline, and the full script only if you decide to send it.

Who is responsible. For the people who book a Sync with you or whom you invite as guests, you decide why their details are collected and what you ask them. Aetheros handles those details on your behalf, only to arrange, confirm, change and follow up those meetings, and to keep the page secure. If you book a Sync on someone’s page or are invited as a guest, the host sees your details and can help with requests about them; you can also contact us.

Protection. Booking pages are protected by Cloudflare Turnstile and by limits per visitor. For those limits our service keeps a scrambled form of your IP address (a hash), never the address itself, for one day.

07Emails Sync sends

Sync sends emails to arrange your meetings: the confirmation of a booking (with a calendar file and the private link to move or cancel), a note to the host when someone books, moves or cancels, invitations to book a Sync, the agenda of an episode and its updates, a reminder the day before and a thank-you after the show. Hosts can write these emails in their own words.

The emails come from a Sync address on aetheros.online, and replies go to the other person: a guest’s reply reaches the host, so the guest sees the host’s email address, and the host sees the email of the person who booked. Sync never sends marketing, and it only writes to people about a meeting a host is arranging with them.

One email service for the apps. Sync is the first app to send emails through the Aetheros email service. Other apps will use the same service, with the same rules and the same record, and this section will name them before they start.

Stopping emails. Invitations, reminders and thank-yous carry a link to stop them. When someone unsubscribes, or an email to them bounces or is reported as spam, we keep a scrambled form of their address (a hash, never the address itself) with the reason and the date, so the app does not write to it again. Emails about a booking the person made themselves still reach them, unless their address does not work. We do not track whether emails are opened and we do not rewrite their links. Each host can send a limited number of invitations a day.

The emails are delivered by Resend, the same service that delivers the sign-in emails of your account. We keep a record of each email (kind, recipient, subject, date and whether it was delivered) for 180 days; the text of an email waiting to be sent is deleted once it has gone. Resend keeps its delivery logs for 30 days.

08The Workspace in Studio

The Workspace is a supporter feature of Studio (called Assets until 17 October 2026) that turns an episode into vertical clips and motion graphics. It works on the project folder you chose on your computer.

What stays on your computer. Your videos, the frames Studio analyses, the face finding used to frame a clip vertically, and every clip and graphic it renders. B-roll is rendered by Aetheros Offline, the helper app you install on the same computer (see “Aetheros Offline”). Face finding only locates where faces are, to place the crop; it never identifies anyone, and only the crop positions are saved, in your project file.

What reaches our service. The voice track for transcription, as described under “What reaches our service”, and text sent to Anthropic to find the moments worth posting and to plan and write graphics: the transcript, the beat texts, the episode title and its takeaways. Neither is kept by us once the answer is delivered.

What we keep. For each account and day, which Studio runs were used, with a fingerprint of the source file (never its content), for 30 days, to apply the daily limit.

Other people in your recordings. Their voices go to transcription and their faces are located on your computer. You are responsible for having their consent to record and publish them.

09Aetheros Offline

Aetheros Offline is a free helper app you can download from aetheros.online/offline and install on a Mac or a Windows PC. It renders Studio’s B-roll and finds your project folders on your computer. It is optional: the apps work without it.

What it reads and writes. It works only on your computer and accepts connections only from that computer (127.0.0.1), and only from the Aetheros pages you allowed in it. It reads the project folders you choose, or folders it finds by their Studio catalogue file with the same project id, and writes the files you ask for only inside a project’s 03 Story, 04 Graphics and 06 Edit folders, without overwriting any file.

What it sends. None of your files, frames or renders: they go from the helper to your project folder, on your computer. The helper talks to the Aetheros page open in your browser on the same computer, never to our service. Twice a day it downloads one public file from aetheros.online to see whether a new version exists. That request carries no identifier, account or content; like any web request, our web host sees your IP address and a user agent with the app’s version and your system, in its standard server logs. Downloading the app from this site is logged the same way.

What it keeps on your computer. Its settings (the browsers you allowed and the project folders it found), a seven-day history of jobs and seven days of logs, with nothing from your videos in them. On a Mac they are in ~/Library/Application Support/Aetheros Offline and ~/Library/Logs/Aetheros Offline; on Windows in %APPDATA%\Aetheros Offline. We have no access to them. Clip pages written by the assistant run in an isolated window with no network and no file access, and every attempt to reach either is logged there.

Removing it. Quitting the app stops it. Uninstalling it, and deleting the folders above, removes it and its data from your computer. The steps are on the Aetheros Offline page.

10What reaches our service

Some features need a server. They go through the Aetheros API (api.aetheros.online), a service we run on hardware we manage and publish through Cloudflare.

• AI features (writing, refining, suggestions, summaries, infographics, guest briefs and interview questions). The text you send, such as a brief, a part of a script, an instruction or your notes about a guest, passes through our service to Anthropic, which generates the answer. We do not store the content of requests or answers. Notes about a guest are information about another person: add only what they have made public or agreed to share.
• Video downloads. The link you paste is used to read the video’s details and to prepare the file you ask for. Prepared files are temporary and deleted automatically shortly after.
• Transcription (transcripts and captions, with the speakers told apart). The voice track you choose, extracted from your recording, or the audio of a link you paste, passes through our service to OpenAI, which writes the text. The audio is deleted as soon as the text exists, and the transcript is held in our service’s memory for up to an hour so your app can collect it, never on disk. Other people’s voices in the recording are information about them: transcribe only what you have the right to.
• AI pictures (backgrounds for thumbnails, a supporter feature). Your description, and the picture you choose to rework, pass through our service to OpenAI, which makes the pictures. They are returned to you; we keep neither the description nor the pictures.
• Stock search (free stock videos and photos in Studio). Your search words pass through our service to Pexels or Pixabay; results are cached for up to a day so the same search is not sent twice. The files you add come from their servers, straight to your computer, or through our service when their servers do not allow a direct download; nothing is kept.
• Link previews (website cards for the links you add). The address you add is used to read the public page’s title, description and image. Answers are cached briefly so the same page is not fetched twice.
• Guest tech checks. A guest invited to a show opens a personal link and tests their microphone, headphones, camera, network and computer. The audio and video are measured in the guest’s own browser and never leave it. Only the verdict (levels, a green, amber or red rating and the suggested fixes), with the name the host entered, is relayed to the host’s screen through our service. The relay keeps it in memory only, never on disk, and closes the room after a period without activity. When the host invited the guest through Sync, the same verdict is also saved with the guest in the host’s account (see “Booking pages and guests in Sync”). To measure the connection, the check contacts public servers run by Cloudflare and Google, which see the guest’s IP address.
• Human check. Before these features work, Cloudflare Turnstile confirms that a person is using the app. It processes technical signals from your browser for that purpose only.

For security and fair use, the service processes your IP address and standard request details. It keeps a daily count of AI usage per IP address, which resets every day, and records the IP address of requests it blocks. We use these records only to keep the service available and to stop abuse.

11Who else is involved

We rely on a small number of providers, each for one job:

• Cloudflare: network protection, the tunnel that publishes our service, the Turnstile human check (in the apps and on Sync booking pages), and the speed and connection tests of guest checks.
• Supabase: the account service (sign-in, your profile and the emails with your code and link), the storage of the work saved to your account, and the Sync service, which connects your calendars and keeps the access to them encrypted. All of this is hosted in the European Union.
• Google: sign-in with Google if you choose it, Google Calendar if you connect it to Sync, and a public connection-test (STUN) server used by guest checks, which sees the guest’s IP address.
• Microsoft: Outlook.com and Microsoft 365 calendars, if you connect them to Sync, and Microsoft Teams links for the Syncs that ask for one.
• Resend: delivers the emails of your account (sign-in codes and links) and the emails the apps send (today Sync), and tells us when an email bounces or is reported as spam.
• Apple and other calendar services: iCloud, other CalDAV servers and the calendar links you connect to Sync, each under its own terms.
• Anthropic: the Claude models behind the AI features, Studio included. Requests are sent through Anthropic’s API under its commercial terms, which by default exclude using them to train its models.
• OpenAI: transcription and AI pictures. Requests are sent through OpenAI’s API, whose terms by default exclude using them to train its models.
• Pexels and Pixabay: stock search and the stock files you add, each under its own licence, which Studio records with every file.
• Video platforms: when you ask for a download, the video and its details are fetched from the platform that hosts it.
• Buy Me a Coffee: handles support payments when you choose to become a supporter. We never see your card details.
• Our web host: serves these pages, the Aetheros Offline downloads and the file the app checks for updates, and keeps standard server logs.

Cloudflare, Google, Microsoft, Apple, Resend, Anthropic, OpenAI, Buy Me a Coffee and Supabase (for support and service operations) may process data outside the European Economic Area. Those transfers rely on the safeguards the GDPR provides, such as the EU-US Data Privacy Framework or standard contractual clauses.

12Why we are allowed to

• To provide what you ask for (performance of a contract): running an AI request, a transcription, a stock search or a Studio run, preparing a download, reading a link preview, managing your account, keeping your work in step across your devices and running Sync on the calendars you connect.
• Legitimate interest: keeping the service secure, enforcing fair-use limits, blocking abuse, answering your messages, and letting Aetheros Offline tell you when a new version is out.
• On your behalf: the details of other people that appear in your calendars, of the people who book a Sync with you and of the guests you invite, handled only to run Sync for you; and the voices and faces of other people in the recordings you use in Studio.
• Legal obligations: when the law requires us to keep or share information.

13How long we keep data

• Data on your device: until you delete it.
• Your account and the work saved to it: until you delete it from the account page. Items you delete in an app are removed from the account at once; a short marker that the item was deleted is kept for up to 90 days so your other devices remove it too. Sign-in codes and links expire within the hour and work once.
• Calendars in Sync: meetings are read from 30 days back to 180 days ahead; meetings that ended more than 30 days ago are deleted every night, and meetings removed from your calendars leave Sync within 30 days. Sync’s activity log is kept for 90 days. The stored access to a calendar stays until you remove that calendar or delete the account.
• Booking pages in Sync: a time held while someone fills in the form is released after a few minutes; bookings are deleted 180 days after the meeting; the scrambled visitor counters after one day.
• Guests in Sync: kept in your account until you delete them or the account.
• Emails sent by Sync: our record of each email for 180 days, the text of a waiting email until it is sent, Resend’s delivery logs for 30 days.
• Addresses that unsubscribed, bounced or reported an email as spam: the scrambled form and the reason, for as long as the email service runs, so the choice keeps being respected; ask us through the contact page to remove it.
• Content of AI requests and answers, including AI pictures: not kept by us once the answer is delivered.
• Transcription: the audio is deleted as soon as the text exists; the transcript is held in memory for up to an hour, never on disk.
• Stock search results: cached for up to a day.
• Studio runs: which runs each account used, with a fingerprint of the source file, for 30 days.
• Aetheros Offline: its settings, seven days of job history and seven days of logs stay on your computer until you delete them; its update checks appear only in our web host’s standard logs.
• Prepared download files and cached previews: deleted automatically after a short time.
• Guest check results on the relay: held in memory only, and gone when the room closes after a period without activity.
• Usage counters: reset every day. Security records: kept briefly, then overwritten.
• Messages you send us: kept as long as needed to handle your request, then deleted.

14Cookies and storage

We use no advertising or analytics cookies. The browser storage described above is strictly necessary for the apps to work, so no consent banner is needed.

Cloudflare may set technical cookies to protect the service and to run the human check. They are not used to track you across websites.

15Your rights

Under the GDPR you can ask to access, correct, delete, restrict or receive a copy of your personal data, and you can object to processing based on legitimate interest. You can exercise many of these rights directly: the account page downloads a copy of all your data in one archive (access and portability), the apps export and delete your work, and the account page removes it from a device or deletes the account with everything saved to it. In Sync, Calendars › Remove disconnects a calendar and deletes what Sync stored from it. If you booked a Sync, the private link in your confirmation lets you move or cancel it; for anything else about a booking or a guest invitation, ask the host or us.

For anything else, contact us. You also have the right to lodge a complaint with a supervisory authority; in Italy that is the Garante per la protezione dei dati personali.

16Children

Aetheros Online is not meant for children under 14, or under the age of digital consent in their country if higher. We do not knowingly process their data.

17Changes to this policy

When a feature changes how data is handled, we will update this page before the change takes effect and adjust the date at the top. Significant changes will also be announced on the site.