Privacy Policy

AETHEX STORE ("we", "us", or "our"), operating in Colombo, Sri Lanka, is committed to safeguarding the privacy and integrity of customer data. This Privacy Policy outlines how your personal information is gathered, processed, and safeguarded when visiting www.aethexstore.com, interacting with our customer portals, or ordering hardware.

We strictly collect the minimal data necessary to provide seamless e-commerce transactions, user authentication, and physical courier fulfillment:

• Account Credentials: If you register or authenticate via email or Google OAuth, your email address, full name, and encrypted authentication tokens are securely managed via Supabase Auth.
• Checkout & Fulfillment Details: When placing an order (as a guest or member), we collect your full legal name, delivery street address, city, postal code, phone/WhatsApp number, and optional vehicle chassis notes for fitment confirmation.
• Payment Verification Data: For Direct Bank Transfer orders, customers upload physical deposit receipts or electronic wire transfer screenshots containing transaction amounts, reference numbers, and timestamps.
• Technical Telemetry: Anonymized edge request headers, IP addresses, and session timestamps used solely for rate limiting, security defense, and server fault diagnostics.

To eliminate delays in manual order fulfillment, AETHEX STORE utilizes automated OCR image processing via the Anthropic Claude 3 Vision API to inspect uploaded bank deposit slips:

• Stateless Analysis: Uploaded slip images are processed transiently to extract only the transaction amount, transfer date, and bank reference code to match against your order total.
• Zero Credential Retention: We never request, extract, or store your personal banking login passwords, PINs, account balances, or debit card numbers.

Our web application utilizes client-side browser storage (localStorage) strictly for functional performance and preference persistence:

We do not deploy cross-site tracking cookies, third-party advertising pixels, or behavioral data broker scripts.

We do not sell, rent, or trade your personal data to external marketing companies. Information is shared strictly with essential operational partners:

• Domestic Courier Networks: Your recipient name, delivery street address, and contact telephone number are transmitted to registered domestic couriers in Sri Lanka for physical parcel delivery and Cash on Delivery (COD) collection.
• Transactional Email Services: We utilize Resend to dispatch order confirmations, slip approvals, and account notifications.
• Database & Cloud Hosting: Our relational order tables and encrypted storage buckets are hosted on Supabase (PostgreSQL) with Row-Level Security (RLS).

All data in transit is encrypted using modern TLS (HTTPS). Server-side secrets and cryptographic keys are guarded using Next.js runtime taint protection to prevent leakage to client bundles. Customer profile and order records in Supabase are governed by strict Row-Level Security (RLS) policies preventing cross-user account access.

You retain full control over your personal information. You can review and update your profile details anytime via the Account Settings portal.

To request a copy of your stored records, or to request the complete deletion of your customer profile following the expiration of your warranty period, email our data privacy officer at support@aethexstore.com or message us on WhatsApp at +94 78 234 9954.