Privacy Policy

Who we are and what this policy covers

BETHL LLC operates Seraph Aerospace, Seraph Vantage, and the website and hosted services that link to this policy. Seraph Aero is a product of BETHL LLC. This policy explains what personal information we handle, how it is used and shared, your choices, and how to contact us.

It covers website visits, accounts, subscriptions, AI credits, hosted AI requests, issue reports, and related support. Independent third-party websites and services have their own policies. An employer or organization that gives you access may separately control information in its workspace.

Send privacy requests to legal@seraphaero.com. We use the information in such requests to verify authority, respond, and keep an appropriate record. Do not email passwords, API secret keys, or full payment details.

Information you provide and account records

• Accounts: email address, authentication identifiers, confirmation and recovery events, and account settings. Authentication credentials are processed through our authentication service; staff do not need your password to provide support.
• Billing: customer, checkout, subscription, invoice and payment identifiers; purchased offers; amounts, currency, renewal and expiry periods; payment, dispute and refund status; and the account to which access or credits belong.
• AI metering: model, request identifiers, timestamps, request status, token counts, estimated reservations, actual credit charges, credit grants or balances, and completed response payloads used to retrieve the same result on a retry. A request fingerprint may be used for reliable retries and reconciliation.
• Support: messages and files you deliberately send, optional contact details, issue descriptions, and the contextual information explained below.

We do not require your payment-card number in our report form or support email. Stripe collects payment details on its checkout and billing pages. Our application works with payment and entitlement records rather than receiving your full card number or card security code.

Issue reports and screenshots

When you submit a report, we receive the summary, description, selected issue area, optional email, page path, browser user-agent details, browser window dimensions, and any screenshot you attach. The page path is limited to the site route; the report form does not include the page’s query string or authentication fragment as its technical page field.

Screenshots are optional. The website does not automatically capture your screen, record a session, or inspect other open tabs. You choose a file, drag one in, or paste an image. The form previews it and may resize and re-encode it before upload. You can remove it before sending. The report’s stored attachment receives a generic filename rather than the original local filename.

Check screenshots and descriptions carefully. They may contain account details, private messages, location information, source code, credentials, or information about other people. Crop or redact what is unnecessary and obtain permission where required.

We store reports and their attachments in private support storage. They are not published as a public issue by this form. Authorized Seraph staff and service providers may access them as needed for support, operations, security, or legal purposes. The report record includes a reference, submission time, and your agreement to the versioned Terms & Conditions and acknowledgement of this policy.

For abuse prevention, the reporting service derives a limited rate-limit identifier from the connecting IP address and hour using a keyed cryptographic operation. It does not put the raw IP address into the support report JSON. Hosting and security providers may separately process IP addresses in their infrastructure logs.

Local workspace files and connected devices

Vantage project files, source code, designs, recordings, and many preferences are stored on your device or in a location you choose. A website account is not an automatic backup of the entire desktop workspace. Reading a local project or connecting hardware does not itself mean the full project or all telemetry is uploaded to our website.

Information can leave the local workspace when you use a feature that requests hosted processing, submit support material, follow an external link, use online maps or research tools, or otherwise choose to share or export content. An assistant may include relevant current-workspace or selected-file context when you send a question, depending on its context controls and your installed version.

Review the context and permissions for the feature you use. Local device access, firmware tools, maps, plugins, and third-party integrations may have their own settings and data flows. We do not promise that every third-party package operates entirely offline.

Hosted AI and your own API key

When you use hosted Vantage Assistant, we process the request to authenticate you, check access and available credit, reserve and settle usage, send the request to the AI provider, and return the result. The provider receives the question, instructions, included conversation or workspace context, and other content required for that request. The response and status pass through our service.

The current hosted text assistant uses OpenAI. Its integration requests store: false for responses. This setting does not mean that no processing or retention occurs: the provider may retain information for abuse monitoring, security, legal compliance, or other purposes under its service terms and configured data controls. We have not represented this account as having zero-data-retention approval.

OpenAI states that API data is not used to train its models by default unless the customer opts in. Provider practices can change and are subject to its terms; see OpenAI’s API data controls. Do not send data that your organization, law, or confidentiality obligations prohibit you from sharing.

Our backend stores completed AI response payloads, including generated output and usage information, so a retry with the same request identifier can return the completed result without generating and charging for it again. These records are access-controlled, not a public transcript. The integration does not automatically submit the entire local workspace. Saved conversations or request content may also exist in your local application, provider systems, or support materials you choose to send. A support report is a separate submission from an assistant request.

If you configure your own API key, your chosen provider processes those requests under its own terms and bills that connection separately. Review your desktop AI configuration, key storage, and provider settings. Do not put a secret key in a screenshot, issue report, or ordinary support message.

Website requests, logs and online maps

Hosting, delivery, authentication and security services necessarily process technical request information such as IP address, request path, time, response status, browser or device details, and security events. We use available operational information to deliver the site, diagnose failures, reconcile actions, and protect the Services.

Opening an online map requests map styles, tiles, fonts, and related resources from the map service. The provider can receive your IP address, browser request information, and the map area requested. The report form does not request your device’s precise geolocation. Location may nevertheless be present in a screenshot, project, map view, or text that you choose to share.

Cookies, browser storage and preferences

The website uses browser session storage to retain the signed-in session for the relevant browser session. The how-to guide uses local storage to save chapter progress on that browser. Clearing these stores can sign you out or reset locally saved progress. Local desktop settings and files have their own lifetimes.

Authentication, hosting, security, email links, and Stripe pages may use their own cookies or similar technologies. Their controls and policies apply to those services. The current site code does not install third-party behavioral advertising pixels or a session-replay recorder.

We do not currently sell personal information or share it for cross-context behavioral advertising, and do not use the site for targeted advertising. There is therefore no current advertising sale or sharing activity to opt out of through a Global Privacy Control signal. If that practice changes, we will provide any required notice and controls before beginning it. The site does not otherwise change its essential operation based on a browser’s Do Not Track header.

You can use browser controls to clear or restrict storage and manage third-party cookies. Restricting essential storage may prevent sign-in, billing handoff, or saved progress from working. The report agreement checkbox is not consent to unrelated tracking or marketing.

Why we use information

• Provide accounts, authentication, requested software access, hosted features, and support.
• Process and verify purchases; maintain balances, reservations, invoices, refunds and entitlement records; resolve billing errors.
• Investigate submitted issues, reproduce faults, improve the affected product, and communicate about a report when contact information is supplied.
• Protect against abuse, unauthorized access, fraud, duplicate charges, misuse of credits, and technical failures.
• Keep appropriate legal, tax, accounting, consent and security records; meet legal duties; and establish or defend claims.

We do not use a report agreement as permission to send unrelated marketing. Essential account, confirmation, recovery, billing, security, and support messages are connected to the Service you requested. Where separate permission is required for optional communications or a new use, we will request it.

Where a law requires a processing basis, relevant bases may include performing a contract or requested service, complying with legal obligations, legitimate operational and security interests subject to applicable safeguards, and consent where required. A privacy acknowledgement does not replace consent for a purpose that legally requires separate consent.

Service providers and other disclosures

We disclose information only as needed for the relevant purpose and legal basis. Current services used by the product or site include:

Providers may process data as our service providers or under their own terms for their independent functions. We may also disclose information to comply with a valid legal obligation, protect rights and safety, investigate fraud, or participate in a business transfer with appropriate confidentiality and legal safeguards. We may share information with an organization or person when you authorize us to do so.

We do not publish your private support screenshot as marketing material merely because you submitted it. We do not sell personal information. External sites, providers and integrations are responsible for their independent practices.

Retention, deletion and backups

Retention depends on the category, the Service, operational need, and legal requirements. We do not promise a single deletion deadline for every system.

• Account records: used while the account is active and retained afterward where necessary for transactions, fraud prevention, legal duties, disputes, or establishing what access was granted.
• Payment and credit records: retained as needed to verify purchases, reconcile usage or refunds, respond to disputes, and satisfy accounting and legal obligations. Deleting an account does not automatically erase required transaction evidence.
• Reports and screenshots: retained for investigating and tracking the issue, recording resolutions, handling follow-up, and legitimate security or legal needs. The current reporting system does not apply a published fixed automatic deletion timer. Contact us to request deletion of a report or attachment.
• AI data and logs: retention varies between the local application, our accounting records and stored completed response payloads, the hosting platform, and the AI provider. The current backend does not apply a published fixed automatic deletion timer to completed AI responses. You may request deletion of retained content, subject to applicable legal and accounting limits. The provider’s data controls apply to its retained copies.
• Browser and local files: remain under the relevant browser, device or storage settings until removed, expired, or otherwise managed there.

When we delete information from active systems, limited copies may remain in backups, security records, or legally required archives until their applicable retention process completes. Such copies are not a reason to continue an unrelated use. We assess deletion requests in light of applicable rights and lawful exceptions, and explain relevant limits where required.

Security and confidentiality

We use measures appropriate to the information and Service, including authenticated account access, access-controlled backend records and private support storage. The report form validates input and attachment types and limits upload size. Hosted AI uses account and balance checks, and billing flows verify payment records.

No website, device, email channel, or service provider can guarantee absolute security. Protect your account and API keys, use a trusted device, and redact unnecessary sensitive information. If you believe an account, report or file has been exposed, contact legal@seraphaero.com. We will address incidents and provide notices where required by applicable law.

Your choices and privacy requests

Depending on your location and which law applies, you may have rights to know or access personal information, obtain a portable copy, correct inaccuracies, request deletion, restrict or object to certain processing, withdraw consent, or opt out of certain data uses. Some laws also provide an appeal process for a denied request. These rights have conditions and exceptions.

Write to legal@seraphaero.com with the request, the account email if relevant, and a report reference if you have one. For a report submitted without an account, give enough information for us to identify it without sending additional sensitive content unnecessarily. We may request proportionate verification or proof that you are authorized to act for someone else.

We will respond within the period required by the law that applies to the request, explain any applicable exception or extension, and identify available appeal steps where required. To appeal, reply to the decision or email the same address with “Privacy appeal” in the subject. You may also contact the competent privacy regulator or attorney general. We do not discriminate against you for exercising applicable privacy rights.

You can choose not to submit an optional screenshot or email. You can delete a selected screenshot before sending. You can manage browser storage and avoid hosted AI for content you do not want sent to an AI provider. Choosing not to supply information necessary for a requested Service can prevent us from providing that particular Service.

Account deletion, subscription cancellation, credit expiry and deletion of local files are separate operations. Tell us explicitly which actions you want; we will help you identify the relevant controls and legal limits.

Location-specific rights and international processing

US state privacy laws may provide rights where their scope and eligibility conditions are met. For example, applicable state rights can include access, correction, deletion, portability, and opting out of sale, targeted advertising, or certain profiling. We do not currently sell information or use the website for targeted advertising or legally significant automated profiling. We do not claim that every state law applies to every user or to our business.

If European, UK, or other privacy law applies, you may have additional rights relating to processing bases, objection, consent, portability, and complaints to a supervisory authority. We will assess and honor a request according to the applicable law, rather than conditioning mandatory rights on these terms.

Seraph and its providers may process information in countries other than your own, including the United States. We do not promise that all data remains in a particular country. Where legally required, appropriate safeguards must apply to relevant transfers; contact us for information about a particular Service or transfer.

Children and young users

The Services are not directed to children under 13, and we do not knowingly seek personal information from them. Do not create an account or submit a report containing personal information if you are under 13. Older minors must meet the authorization requirements in the Terms & Conditions.

If you believe a child’s information was provided improperly, contact legal@seraphaero.com so we can investigate and take appropriate action, including deletion where required.

Policy changes and contact

We identify this policy by its effective date and version, and retain a linked copy of the version used by the report agreement. Changes describe future practices; they do not create a right to use previously collected information contrary to an earlier binding promise. We will provide additional notice and obtain consent where required for a material change or new purpose.

Operator: BETHL LLC, through the Seraph Aerospace brand.
Privacy and legal requests: legal@seraphaero.com.
Product and billing support: team@seraphaero.com.

Include an account or report reference where helpful. We will request only the verification reasonably needed to handle the request; we do not need your password, full card number, or API secret key.