Privacy Policy

Account information: When you register, we collect your name, email address, and encrypted password hash. We do not store plaintext passwords at any point.

Device hardware identifier (HWID): The AuraIntel desktop application generates a unique hardware fingerprint of your device (CPU serial, motherboard ID, MAC address hash) upon first launch. This SHA-256 HWID digest is transmitted to our servers to bind your licence to a single machine and prevent account sharing. The raw hardware identifiers are never stored — only the digest.

Usage and telemetry data: We log credit transactions (amounts, timestamps, categories), session activity counts, and feature usage patterns. This data is used exclusively for billing accuracy, credit deduction verification, and product improvement.

Payment information: Payments are processed by Razorpay. We do not receive or store your card numbers, UPI IDs, or banking credentials. We only receive a transaction reference ID and your plan purchase confirmation from Razorpay's servers.

Browser data: We use first-party cookies and browser localStorage to maintain your authenticated session. We do not use cross-site tracking cookies.

We use the information we collect to:

• Create and manage your user account and subscription
• Process your credit purchases and maintain accurate credit balances
• Enforce device binding to protect against licence abuse
• Send transactional emails (receipt confirmations, password resets)
• Provide customer support and resolve disputes
• Detect and prevent fraudulent activity or abuse
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Your data is stored on Supabase-hosted PostgreSQL databases with row-level security (RLS) policies enforced at the database level. All data in transit is encrypted using TLS 1.3. All data at rest is encrypted using AES-256.

API keys used by the desktop application are stored using AES-256-GCM symmetric encryption and are never transmitted in plaintext. The encryption keys are stored separately from the encrypted data.

We implement industry-standard security measures including: JWT-based authentication with short-lived tokens, server-side session validation, rate limiting on all API endpoints, and IP-based anomaly detection.

Despite our best efforts, no security system is impenetrable. In the event of a data breach, we will notify affected users within 72 hours of discovery, as required by applicable data protection laws.

The AuraIntel desktop application captures screenshots of your screen when triggered by keyboard shortcuts. These screenshots are transmitted to our AI inference servers for processing.

Retention: Screenshots are processed in memory and are not permanently stored on our servers. Processing results (AI-generated text responses) are transmitted to your local device and are not retained beyond the active session.

Inference providers: AI inference may be routed through Google Gemini, OpenAI, or Anthropic APIs. These providers process your requests under their own privacy policies. Only the content of your captured screenshot (not your personal account data) is transmitted to these providers.

You control when screenshots are taken. No automatic screen monitoring or background capture occurs without your explicit keyboard trigger.

We use the following types of cookies:

• Strictly necessary cookies: Authentication tokens stored in browser memory/localStorage to maintain your logged-in session.
• Functional cookies: User preferences such as theme settings.

We do not use advertising cookies, retargeting cookies, or third-party analytics cookies. We do not integrate Google Analytics, Facebook Pixel, or similar tracking services.

We share your data only with the following categories of service providers, strictly to operate AuraIntel's core functionality:

• Supabase Inc.: Database and authentication infrastructure
• Razorpay Software Pvt. Ltd.: Payment processing (India)
• Vercel Inc.: Website hosting and CDN
• AI inference providers: Google LLC, OpenAI LLC, and Anthropic PBC for screen capture processing

We require all service providers to maintain adequate privacy and security standards. We do not disclose your data to advertisers, data brokers, or government agencies except where legally compelled.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you
• Right of rectification: Correct inaccurate personal data
• Right of erasure ("right to be forgotten"): Request deletion of your account and associated data
• Right of portability: Receive your data in a machine-readable format
• Right to withdraw consent: Revoke any previously granted consent at any time

To exercise any of these rights, contact us at privacy@auraintel.io. We will respond within 30 days.

We retain your account data for as long as your account remains active. If you request account deletion, we will erase your personal data within 30 days, except where we are legally required to retain records (e.g., for 7 years for financial transaction records under applicable Indian tax law).

Session screenshots and AI processing data are purged immediately after processing and are not subject to long-term retention.

AuraIntel is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Your continued use of AuraIntel after the effective date of changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: