Privacy policy

Last updated: April 2026

1. Data controller

The data controller is ÆTHERNA, a sole proprietorship headquartered in Saint-Denis (97490), France.
Contact: contact@aetherna.fr

2. Data collected

When you use ÆTHERNA, we collect:

• Account data — first name, last name, email address (via Clerk)
• Wedding data — names of the couple, date, venue, budget, guest list, seating plan, tasks, vendors
• Payment data — handled exclusively by Stripe (we never store your bank details)
• Technical data — IP address, browser type, pages visited (server logs)

3. Purpose and legal basis

• Performance of contract (art. 6.1.b GDPR) — provision of the wedding planning service
• Legitimate interest (art. 6.1.f GDPR) — service improvement, security, fraud prevention
• Consent (art. 6.1.a GDPR) — marketing communications (where applicable)

4. Retention period

Your data is retained for as long as your account is active. After 6 months of inactivity, a reminder email is sent. You then have 3 months to log back in. After that delay, your data is permanently deleted.

Billing data is kept for 10 years in accordance with French accounting obligations.

5. Subprocessors

Your data is processed by the following subprocessors:

• Clerk (USA) — authentication · SCCs in place
• Supabase (Europe) — database
• Stripe (USA) — payments · PCI-DSS certified
• Resend (USA) — transactional email · SCCs in place
• Vercel (USA) — hosting · SCCs in place

Transfers outside the EU are governed by the European Commission's Standard Contractual Clauses (SCCs).

6. Your rights

Under GDPR, you have the following rights:

• Access — obtain a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a structured format
• Objection — object to the processing of your data
• Restriction — limit processing in certain cases

To exercise these rights, contact us at contact@aetherna.fr. We will respond within 30 days.

7. Cookies

ÆTHERNA only uses cookies that are strictly necessary for the service to operate (authentication, session preferences). We do not use any advertising cookies or third-party tracking.

8. Complaints

If you believe that the processing of your data does not comply with regulations, you may file a complaint with the CNIL (French Data Protection Authority) — cnil.fr.