Security
Protecting Campaign and Business Data Through Secure Infrastructure, Transparent Practices, and Role-Based Access.
Campaigns and businesses entrust Aether with operational information. We believe that trust is earned through secure design, transparent practices, and clear communication—not exaggerated claims or marketing buzzwords.
Organization Separation
Political campaigns and businesses work within their respective Aether organizations. Organization membership and access controls are designed to keep one customer's records separate from those of other customers.
Authentication
Secure authentication protects every account. Access requires an authenticated user account, and passwords are securely managed through modern identity services.
Role-Based Access
Admin
Organization administration and management within assigned permissions.
Director
Department oversight and execution within assigned permissions.
General User
Assigned operational responsibilities with appropriate permissions.
Team Aether Administrative Access
Authorized Team Aether personnel may retain administrative access for legitimate account-management purposes including provisioning, onboarding, troubleshooting, integration support, security response, and customer-requested assistance.
That access does not transfer ownership of customer organization data to Aether and is not intended for unrelated inspection or modification of an organization's information.
Data Use & Organization Separation
Aether does not sell campaign or business operational data or use customer organization data as an advertising product. Data belonging to one customer organization is not shared with another simply because both use Aether.
Encryption
All communication between your browser, mobile device, and Aether is encrypted in transit using modern industry-standard security protocols.
Your organization owns its data.
Aether exists to help campaigns and businesses organize, understand, and execute—not to claim ownership of information entrusted to the platform.
Connected Integrations
When an organization connects a supported third-party service to Aether, Aether uses provider-supported authorization mechanisms, including OAuth where implemented. Aether accesses the information and capabilities authorized through that connection to provide the integration features requested by the organization.
Connected services remain subject to the permissions, security practices, and policies of their respective providers. Authorized organization administrators control supported connections according to their available permissions and product configuration.
Your Data. Your Exit.
Your organization retains ownership of the records it provides. Aether offers data export capabilities, with available formats and included records depending on the product and enabled features. Political organizations can use the Full Data Export feature to retrieve supported saved records in portable CSV form.
For Political, following cancellation or completion of yearly usage, Aether may retain campaign data for up to 60 days. Business retention and export arrangements depend on the applicable subscription or agreement. We recommend exporting available records before the applicable access period ends.
Political campaigns may have the option to preserve their Aether data between campaign cycles for $5 per month, where offered. This campaign-specific option does not automatically apply to Business subscriptions.
Security Incident Response
If Team Aether becomes aware of a security incident affecting Aether systems or customer data, we investigate the issue, take reasonable steps to contain and remediate it, determine the affected systems and organizations, preserve relevant information for review, and communicate with affected customers as appropriate to the incident and applicable obligations.
We do not promise that security incidents are impossible. We commit to responding to them responsibly.
Shared Responsibility
Security also depends on each customer organization's practices. Organizations should protect account credentials, remove users who no longer require access, assign roles appropriately, secure connected third-party accounts, maintain independent data exports, and promptly report suspected unauthorized access to Team Aether.
Security Without Lock-In
Security should not require a campaign or business to surrender control of its own information. Aether combines organization isolation, authenticated access, role-based permissions, supported integration controls, administrative accountability, and full data export so organizations can operate inside Aether without giving up ownership of their data.
Built on Transparency
We won't claim certifications we haven't earned. We won't make promises no software can honestly guarantee. As Aether grows, we'll continue strengthening security while remaining transparent about how the platform protects campaign and business information.
Report a Security Concern
If you've identified a security concern or believe you've found a vulnerability, please let us know. Team Aether reviews every report.