Privacy Policy

Effective date: June 18, 2026

Etheon (“we”, “us”, or “our”) operates the Etheon platform at etheon.site. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the platform you agree to the practices described here.

1. Information We Collect

Account information. When you register, we collect your email address, full name, and a hashed password. We do not store your password in plain text.

Payment information. We do not store your card number, CVV, or banking details. Payment processing is handled by Stripe, Inc. We receive and store transaction identifiers, amounts, and payment status. See Stripe's privacy policy at stripe.com/privacy.

Usage data. We collect standard server-side logs including IP addresses, browser type, pages visited, and timestamps. This data is used to operate and secure the platform.

Communications. If you contact support, we retain the content of that communication to help resolve your request.

2. How We Use Your Information

  • To create and manage your account
  • To process deposits, subscriptions, and related transactions
  • To send account and transaction notifications
  • To respond to support requests
  • To detect and prevent fraud and abuse
  • To comply with legal obligations

We do not sell your personal information to third parties.

3. Cookies

We use session cookies to maintain your authenticated session. We do not use third-party advertising cookies. Analytics may use first-party cookies to measure aggregate usage. You can disable cookies in your browser settings; doing so will prevent you from remaining logged in.

4. Data Sharing

We share data only with the following categories of parties:

  • Stripe — payment processing. Your payment data is governed by Stripe's terms.
  • Supabase — database and authentication infrastructure hosted in the ap-southeast-1 region.
  • Vercel — hosting and edge infrastructure.
  • Law enforcement — when required by applicable law or valid legal process.

5. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or financial compliance reasons (typically 7 years for transaction records).

6. Security

We use TLS encryption for all data in transit. Data at rest is encrypted using AES-256 at the infrastructure layer. Access to production data is restricted to authorised personnel. We conduct periodic security reviews. No system is perfectly secure; in the event of a breach affecting your data we will notify you as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Object to or restrict certain processing
  • Receive a portable copy of your data

To exercise any of these rights, email us at legal@etheon.io. We will respond within 30 days.

8. Children

The Etheon platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will remove the account.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email or by a notice on the platform.

10. Contact

For privacy questions or requests, contact us at legal@etheon.io or support@etheon.io.