Privacy notice
Draft for owner review. This is not the final legal text.
Last updated 16 October 2026.
This notice says what personal data this website collects and why, under the UK GDPR and the Data Protection Act 2018.
Who we are
Aethyra AI is a trading name of Witnes Technologies Limited, registered in England and Wales, company number 17319638. Registered office: Unit A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE, UK.
Aethyra AI is the controller for personal data collected through this website.
- Company number: 17319638
- Contact email: info@witnes.app
- Booking link: https://cal.com/mathews-matiiri-4xx4jj
What we collect
When you ask for a free snapshot, the form collects:
- Business name
- Website or Google Business Profile link
- Town
- Niche
- That you agreed to this notice
- utm_source, utm_campaign, and the referring page, when your browser sends them
The business name is also stored in the name field of the snapshot record, because that older field is still required. The form does not ask for a separate personal name.
If you subscribe on the page or in the footer, we collect your email address and a record that you asked for the list. We email a confirmation link first. The address is added to one Resend segment, used only for this list, only after you open that link, and only when the newsletter account is connected. You can unsubscribe from any of those emails, or ask us to delete the contact.
If the form check is switched on, Cloudflare Turnstile checks the snapshot and newsletter forms. It receives that check, including your IP address, so it can tell a person from an automated submission. The secret for that check stays on our server.
If you buy Fix or Visibility, payment card details are collected by Stripe, not stored on this site. We keep a record of the completed checkout: the offer, the amount, the payment status, the Stripe customer id, and the email Stripe collected. After payment, the onboarding form collects how we can get Google Business Profile access, an optional website, optional competitors, and how you prefer to be contacted. Do not send a password in that form.
We email you when those messages are connected: a note that the snapshot request arrived, a newsletter confirmation link, and a receipt after Fix or Visibility is paid.
We do not ask you to create an account.
Why we use it
- To prepare your snapshot and reply to you.
- To do the Fix or Visibility work, if you buy it.
- To send the occasional newsletter, only after you confirm the email from the page or the footer.
- To keep the site reliable and to reject spam submissions.
Legal bases
- Taking steps at your request before a contract, for the snapshot and for paid work you ask for (UK GDPR Article 6(1)(b)).
- Consent, for the newsletter (Article 6(1)(a)). You can withdraw that consent at any time.
- Legitimate interests, for security and for knowing which campaign referred you (Article 6(1)(f)). The interest is running a small service without handing your details to anyone who does not need them.
How long we keep it
Snapshot requests are kept for as long as we need them to write your report, reply, and keep a record of what we sent. We delete what we no longer need. A newsletter address is stored as unconfirmed until you open the link. After that it stays in the Resend segment, and in our own record if that database is connected, until you unsubscribe or ask us to delete it. Payment records are kept for as long as tax and accounting rules require.
Who else sees it
We do not sell your personal data. Service providers process it on our instructions:
- Vercel, which hosts the website
- Supabase, which stores form submissions once that database is connected
- Stripe, which takes payment if you check out
- Resend, which sends the snapshot confirmation, the newsletter confirmation, and receipts, and which stores newsletter contacts after you confirm. The address is added only to the segment for this list
- Cloudflare, only if the form check is switched on, which receives the Turnstile check for the snapshot and newsletter forms
- An email provider, to send your snapshot report
If a provider stores data outside the UK, we rely on an adequacy regulation or the UK International Data Transfer Agreement.
Your rights
You can ask us to:
- Access the personal data we hold about you
- Correct it
- Delete it
- Restrict how we use it
- Object to processing based on legitimate interests
- Receive a portable copy, where the law gives you that right
- Withdraw newsletter consent
Write to info@witnes.app. We will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See the cookie notice.