Privacy Policy — Aurora Vault

1. Information We Collect

Aurora Vault collects information that is necessary to provide and improve our services. We collect information in the following ways:

Account information you provide when registering (name, email, company)
Workspace content you create or upload to our platform
Usage data and analytics to understand how our service performs
Communications when you contact our support team
Billing information processed securely by our payment provider (Stripe)
Technical data including IP address, browser type, and device information

We never collect more data than necessary, and we are explicit about what we collect and why.

2. How We Use Your Information

We use the information we collect to operate, maintain, and improve Aurora Vault. Specifically, we use your data to:

Provide and personalize our AI workspace services
Process transactions and send billing-related communications
Send product updates, security alerts, and support messages
Analyze usage patterns to improve performance and usability
Detect, investigate, and prevent fraudulent or illegal activity
Comply with legal obligations

Important: Your workspace data and uploaded content are never used to train our AI models without your explicit, informed consent.

3. Data Sharing and Third Parties

We do not sell your personal data. We may share data with trusted third parties only as required to operate our service:

Cloud infrastructure providers (AWS, Google Cloud) under strict data processing agreements
Payment processors (Stripe) for billing — we never see your full card details
Analytics providers under anonymization agreements
Legal authorities when required by law or to protect our rights

All third-party partners are contractually bound to handle your data per our privacy standards and applicable law.

4. Data Security

We implement industry-leading security measures to protect your data:

AES-256 encryption for all data at rest
TLS 1.3 encryption for all data in transit
SOC 2 Type II compliance — audited annually
Zero-knowledge architecture for workspace content
Regular penetration testing by independent security firms
Employee access controls and mandatory security training

5. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

Right to access — request a copy of the data we hold about you
Right to rectification — correct inaccurate personal data
Right to erasure — request deletion of your account and all associated data
Right to portability — receive your data in a structured, machine-readable format
Right to object — opt out of certain processing activities
Right to restrict processing — limit how we use your data

To exercise any of these rights, contact us at [email protected]. We respond to all requests within 30 days.

6. Cookies and Tracking

We use essential cookies to operate our platform and optional analytics cookies to improve our service. You can manage your cookie preferences through our Cookie Settings panel at any time. We do not use third-party advertising cookies or sell data to advertisers.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, workspace data is permanently deleted within 30 days. Backups are purged within 90 days. Anonymized usage statistics may be retained for up to 3 years for product analytics.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection team:

Email: [email protected]
Address: Aurora Vault Inc., 1 Market Street, San Francisco, CA 94105
EU Representative: [email protected]

We are committed to resolving privacy concerns fairly and promptly.