1. Information we collect
We collect the account information you provide, such as your email address and authentication records. When you contact us, we collect the contents of your message.
Our website uses first-party visitor and session identifiers and PostHog to measure page visits, interaction events, device and browser type, approximate location, referrer domain, and estimated active time. Direct visits without a referrer remain unattributed. We do not fingerprint visitors. You can turn off optional interaction analytics on the homepage; we also respect browser Do Not Track and Global Privacy Control signals. Security, account, and request records still apply.
When you use the API or website, we collect operational information such as request time, route, response status, latency, usage counts, account or key identifier, IP address, and device or browser information. We may use cookies or browser storage required for sign-in, security, and account preferences.
2. Billing information
Stripe processes paid subscriptions. Aura receives billing identifiers, plan, payment status, and subscription dates from Stripe. Aura does not store full payment-card numbers. Stripe handles payment information under its own privacy policy.
3. How we use information
- Provide accounts, API access, subscriptions, and customer support.
- Measure usage and enforce plan limits.
- Secure, debug, maintain, and improve Aura.
- Send service, billing, security, and policy notices.
- Comply with law and protect Aura, customers, and the public.
4. How we share information
We share personal information with service providers that help operate Aura, including hosting, authentication, email, and payment services. We may also disclose information when required by law, to protect legal rights or safety, or as part of a business sale or reorganization.
Questions submitted to Aura chat are sent to OpenRouter and the selected model provider to interpret the request. Do not submit sensitive personal information. Aura retains submitted questions, returned data, usage, and cost records for operating and improving the service. PostHog receives the interaction stage, not the question or answer text. We do not record unsent keystrokes or visual session replays.
We do not sell personal information or use it for targeted advertising.
5. Retention and security
We retain information while your account is active and as reasonably needed for operations, security, dispute resolution, and legal obligations. Retention periods vary by record type. We use reasonable administrative and technical safeguards, but no internet service can guarantee absolute security.
6. Your choices
You may update account information, revoke API keys, or cancel a subscription through your account when those controls are available. You may ask to access, correct, or delete your personal information by contacting us. We may verify your request and retain information where required by law or legitimate operational needs.
7. Children
Aura is a developer service and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
8. Changes and contact
We may update this policy as Aura changes. Updates will be posted here with a new effective date. Questions or privacy requests may be sent to admin@aura.tl.