Privacy Notice & Data Protection

AurabotAI ("we", "us") operates aurabotai.com and is the data controller for the personal data described in this notice, we decide what data is collected and why. For privacy questions or requests, contact ai.aurabot@gmail.com.

• Account data (name, email address, login credentials, sign-in provider such as Google or Apple), to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
• Service data (URLs and keywords you submit, generated audits and reports, saved outputs, client folders), to deliver the audits and reports you request and to let you return to them later. Legal basis: performance of our contract.
• Usage and telemetry (features used, audit counts, timestamps, plan limits consumed), to enforce plan limits, prevent abuse and improve the product. Legal basis: legitimate interests.
• Technical data (IP address, device and browser information, error logs), for security, fraud prevention and diagnosing faults. Legal basis: legitimate interests and legal obligation.
• Support messages you send us, to answer you and keep a record of the issue. Legal basis: legitimate interests.
• Marketing contact details, where you have opted in (for example joining our waitlist), to send product updates. Legal basis: consent, withdrawable at any time.

• Service providers and subprocessors that host and run the platform, including our cloud database, authentication and hosting provider, our website-crawling provider, and the AI model providers that generate audit analysis.
• Paddle.com, our reseller and Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
• Professional advisers such as legal and accounting advisers, where necessary.
• Authorities or regulators, where we are legally required to disclose information.

We do not sell your personal data. Card details are never stored by us, payment information is collected and processed by Paddle.

Account and service data is kept while your account is active. If you close your account or stay inactive, we delete or anonymise your account and report data within a reasonable period, other than records we must keep for tax, accounting, security or legal reasons. Usage logs are kept on a rolling short-term basis for abuse prevention and diagnostics.

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent, you can withdraw it at any time. If your data is protected by the UK or EU GDPR, you also have the right to complain to your supervisory authority, and we will respond to requests within one month. Email ai.aurabot@gmail.com to exercise any of these rights.

Our providers may process data outside your country, including in the United States and the European Union. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage at our hosting provider, row-level access rules so each account can only reach its own records, and least-privilege access for administrative operations.

We use strictly necessary cookies and local browser storage to keep you signed in and to remember your session, the service does not work without these. We also use limited product analytics to understand which features are used. We do not run advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings, but signing in will stop working.