Privacy Policy

1. Information We Collect

Aura AI collects the minimum account and product data needed to provide the service. This includes:

• Email address and profile information provided when signing in via Google OAuth, GitHub OAuth, or email and password.
• Subscription tier, credit balance, refill balance, billing status, and team membership information.
• Usage records such as model selected, mode selected, credits deducted, and token counts.
• Diagnostic reports you choose to send from the Aura AI app.

2. How We Use Information

We use your information to:

• Authenticate access to Aura AI.
• Manage your prompt quotas and subscription tiers.
• Send transactional emails, including welcome, billing, failed-payment, payment-recovered, low-credit, exhausted-credit, refill, cancellation, and team invitation emails.
• Provide support, diagnose errors, and keep the product reliable.

3. Project Data and AI Requests

Aura AI is local-first. Your source code, design docs, chats, pages, project rules, and project memory are not stored in a cloud workspace and do not automatically sync to a new computer. When you submit a prompt, Aura uses the relevant context needed to answer that request.

Local chats, GDDs, pages, progress memory, project rules, and project context do not automatically sync to a new computer. Your Aura account restores billing, credits, team access, and BYOK entitlement when you sign in. To move local project memory, use Aura Settings - Transfer Aura Data to export the items you choose and import that file on the new machine.

Your source code, design docs, prompts, and project context are not used to train Aura AI or third-party models. BYOK customers may connect their own model keys; when BYOK is active, Aura uses the saved key and does not deduct Aura credits.

4. Data Security

Authentication is handled through Supabase. Payment details are handled by Stripe; Aura AI does not store raw card data. Provider API keys for BYOK are stored server-side and are never bundled into the desktop installer or engine plugins.

5. Third-Party Services

We use Supabase for authentication and database services, Stripe for payment processing, Resend for transactional email, and model services for AI responses. These services process data only as needed to provide Aura AI.

6. Retention and Deletion

You can request account deletion or data deletion by contacting support. Diagnostic logs are used for support and troubleshooting. We retain billing records as required for legal, tax, and fraud-prevention purposes.

7. Contact Us

If you have any questions, contact us at help@aurainc.co