Privacy Policy

Your data is encrypted in transit (TLS) and at rest, and isolated by row-level security so other accounts can't read it.

We do not train models on your data. Training is off for every account and shown as locked off in Settings → Privacy & data.

You can export your data as JSON and have your account deleted at any time (see section 6). Hard delete completes within 30 days.

On a Business team, your content stays private to you: team owners and admins see the roster and activity counts, never your chats, notes or files.

We follow GDPR and CCPA requirements. Your data is stored in one managed Postgres instance in Asia Pacific (ap-southeast-1) and served through Vercel's edge network; we do not offer per-account region selection.

Aurora is operated by Wuling Langyuan Information Technology Center (武陵区浪元信息技术中心), a registered individually-owned business in China, and serves users outside mainland China.

Account data — email, name, subscription status (PayPal processes payments; we never see your card or bank details).

Usage data — a record of the actions you take (for example a chat message sent or an image generated, with the module and model used), tied to your account. We use it to enforce plan limits, run the service and improve the product. It does not contain the text of your prompts or outputs.

Content data — notes, conversations and files you create. Stored encrypted at rest and isolated by row-level security. Our staff do not access it except to operate the service (for example, to fix a problem you report), at your request, or where the law requires.

Telemetry — privacy-respecting, aggregated, anonymous (page views, performance). No third-party trackers.

If you create or join a team, we store the team (its name, seat count and subscription status), your membership, your role (owner, admin or member) and when you joined.

Invites: when an owner or admin invites someone by email, we store that email address with the invite, to deliver it and to make sure only that address can accept it. Invite links themselves are stored only as a one-way hash. Invite records are kept with the team and deleted when the team is deleted.

What owners and admins can see: the team roster — each member's name, email address, role and join date — and per-member activity counts: how many chat messages and image, voice and video generations each member made since joining the team. They never see content: not your chats, notes, files, prompts or generations.

What members can see: the team's name, their own role, the seat count, and the owner's name and email address so they know who runs the team.

Your content stays yours. It is isolated by row-level security exactly as on a personal account, and leaving or being removed from a team doesn't delete your account or your content.

The team owner is the billing customer. PayPal shares the subscription status and seat count with us, never card or bank details; members don't need a PayPal account.

Sell your data to anyone. Ever. There is no business model in which we would.

Train external models on your content. We don't use your data to train our own internal routing either.

Let employees casually browse your content. Access is restricted by row-level security and least-privilege service keys, and used only to operate the service, for support you request, or where legally required.

Track you across the web. We do not embed third-party ad pixels, analytics that follow you off-site, or tracking cookies.

PayPal (payments), Resend (transactional email — for example sign-up confirmation, password-reset and team-invite emails, and the bug reports you send us), Vercel (hosting, edge network, and cookieless first-party analytics — see /cookies), Supabase (Postgres database, authentication and storage).

AI inference is routed through OpenRouter to the model you select (OpenAI, Anthropic, Google, Perplexity, DeepSeek and others), and to MiniMax for text, image and speech, Replicate for image generation and note embeddings, and Agnes for video. Your prompts leave our systems to reach these providers and are governed by each provider's own retention policy — we do not add a contractual zero-retention guarantee on top.

These providers operate in several countries and regions, so your data is transferred to and processed outside the country you live in. The same list, with each provider's purpose and region, is on /security. For data-processing questions — for example on behalf of your organization — email wavezhou6@gmail.com.

Access — download your conversations, messages, notes and profile anytime (Settings → Privacy & data → Download JSON); email us for a copy of anything else we hold.

Erasure — Settings → Danger zone deletes your conversations and notes immediately and signs you out; email us to erase the account itself and all remaining data. Hard delete within 30 days.

Portability — JSON export, no lock-in.

Object — email us to object to any non-essential processing.

EU and California residents have additional rights under GDPR and CCPA. Email wavezhou6@gmail.com to invoke them.

Aurora is not for children under 13 (or 16 in the EU). We do not knowingly collect their data. If you believe a minor has signed up, email wavezhou6@gmail.com and we will delete the account within 7 days.

We will email you at least 30 days before any material change to this policy. The current version is dated at the top of this page.

Operator: Wuling Langyuan Information Technology Center (武陵区浪元信息技术中心), a registered individually-owned business, China.

Email: wavezhou6@gmail.com

EU representative on request.