1. What We Collect
Account Information
- Email address and encrypted password (provided at signup)
Note Content
- Text, documents, and media you create within Aura
- Note metadata (titles, categories, tags, timestamps)
Usage Data
- Page views and feature engagement (via Google Analytics)
- Error logs and performance data
Billing Data
- Payment information is processed and stored by Stripe
- We store your Stripe customer ID and subscription status
- We do not store credit card numbers
2. How We Use Your Data
- To provide and improve the Aura service
- To power AI features (organization, chat, synthesis, briefings)
- To process billing and manage subscriptions
- To send service-related communications
- To monitor service health and fix issues
3. AI Processing
Your notes are processed by OpenAI's API to provide AI features including:
- Note organization and tagging
- Chat and conversational assistance
- Writing suggestions
- Cognitive extraction (facts, procedures, concepts, questions)
- Daily briefings and Active Frontier synthesis
- Research capabilities
OpenAI's enterprise API terms prohibit the use of API input and output data for training their models. We do not use your notes to train any AI models.
4. Third-Party Services
We use the following third-party services:
- OpenAI — AI processing (API only, no data training)
- Stripe — Payment processing
- Google Analytics — Anonymous usage analytics
- Amazon Web Services — Hosting and infrastructure
- Tavily — Web research capabilities
5. Data Storage and Security
- Your data is stored in PostgreSQL databases hosted on AWS
- Data is encrypted in transit (TLS) and at rest
- Authentication uses JWT tokens with automatic rotation
- We do not share your data with advertisers
6. Data Retention
- Active accounts: your data is stored as long as your account is active
- Verified account-deletion requests are processed within 30 days, subject to limited security, billing, backup, fraud-prevention, and legal retention requirements
- Billing records may be retained as required by law
7. Your Rights
You have the right to:
- Access your data through the Aura interface
- Request an export of your notes by emailing hello@auranotes.ai from your account email address
- Request account deletion by emailing hello@auranotes.ai from your account email address
- Correct inaccurate information in your profile
- Opt out of non-essential communications
8. Cookies and Analytics
- We use Google Analytics (GA4) for anonymous page view and engagement tracking
- We do not use advertising cookies or trackers
- Essential cookies are used for authentication and session management
9. Children's Privacy
Aura is not intended for users under 16 years of age. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this policy. Material changes will be communicated via the email address associated with your account.
11. Contact
For privacy questions or data requests: hello@auranotes.ai