Final Phase Solutions, Inc. ("Final Phase Solutions," "we," "our," or "us") operates AetherFlow, an enterprise ECM (Enterprise Content Management) migration platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at aetherflow.app or use the AetherFlow platform.
By accessing or using AetherFlow, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the site or platform.
This policy covers information we collect from:
When you create an AetherFlow account, we collect:
When you use the AetherFlow platform, we automatically collect:
AetherFlow processes content and metadata from your source and target ECM systems to perform migrations. This data is processed in-transit according to your configured workflows. We do not read, analyze, index, or use your business content for any purpose beyond executing your migration jobs. Customer data is never used to train AI/ML models or sold to third parties.
If you contact us via email, support tickets, or our contact form, we retain those communications to resolve your inquiry and improve our support.
AetherFlow takes the security of your data seriously. We implement industry-standard technical and organizational safeguards:
In the event of a data breach that affects your personal data, we will notify affected customers within 72 hours of becoming aware of the breach, as required by applicable law. Notification will include the nature of the breach, data affected, and remediation steps taken.
We use the following third-party services to operate AetherFlow. Each service has its own privacy policy and data processing terms:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, and file storage | Account data, platform activity, migration job metadata |
| Stripe | Payment processing and subscription management | Name, email, billing address, payment method (tokenized) |
| Resend | Transactional email delivery | Email address, name (for personalized notifications) |
| Render | Cloud infrastructure and application hosting | Application data processed in-transit |
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share aggregated, anonymized usage statistics that do not identify individual users.
We may disclose your information if required to do so by law, court order, or in response to a valid government request — and will notify you of such requests to the extent permitted by law.
Regardless of where you are located, you have the following rights with respect to your personal data:
Access
You can request a copy of all personal data we hold about you. We will provide it in a machine-readable format within 30 days.
Correction
You can update your account information at any time from your profile settings. Contact us if you need to correct data you cannot update yourself.
Deletion
You can delete your account and associated personal data at any time. Migration job history and content data will be permanently deleted within 30 days of account closure. Some data may be retained as required by law or for legitimate billing dispute resolution.
Portability
You can export your migration job configurations, run history, and account data via the platform export feature or by contacting us.
Restriction
You can request that we restrict processing of your personal data in certain circumstances — for example, while a dispute is being resolved.
Objection
You can object to certain types of processing, such as direct marketing. If we are processing your data based on legitimate interests, you may object and we will review the request.
To exercise any of these rights, contact us at privacy@aetherflow.app. We will respond within 30 days.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases:
For customers in the EEA, we act as a data processor for your migration content and a data controller for your account data. We offer Data Processing Agreements (DPAs) for Enterprise customers. Contact privacy@aetherflow.app to request a DPA.
Data transfers outside the EEA are covered by Standard Contractual Clauses (SCCs) with our infrastructure providers.
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:
To submit a CCPA request, email privacy@aetherflow.app with the subject line "CCPA Request." We will verify your identity and respond within 45 days.
We retain your data for as long as necessary to provide the AetherFlow service and comply with our legal obligations:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 90 days after deletion |
| Migration job configurations | Duration of account + 90 days after deletion |
| Migration run logs | 24 months from job completion |
| Billing records | 7 years (tax and legal compliance) |
| Support communications | 3 years from ticket resolution |
| Security logs | 12 months |
| Anonymized usage analytics | Indefinitely (cannot be linked to individuals) |
Customer migration content (documents, metadata processed during migration) is not retained by AetherFlow beyond what is needed for the active migration job. It flows through our infrastructure to your target system and is not stored long-term.
AetherFlow is an enterprise B2B platform not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us at privacy@aetherflow.app and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Your continued use of AetherFlow after the effective date of any changes constitutes your acceptance of the revised policy. If you disagree with the changes, you may close your account before the effective date.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
We aim to respond to all privacy inquiries within 5 business days and resolve them within 30 days.
You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.