Privacy Policy

1. Introduction

Aurora ("we", "us", "our") provides an intent-aware execution platform that includes Holmes, our intelligence layer for inferring user intent in real time. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform, including data builder, workflows, dashboards, API, storefronts, and vendor dashboards.

2. Information We Collect

Account and profile data: Name, email address, and credentials you provide when signing up or managing your workspace.

Content and configuration data: Data you create or upload within the platform: tables, records, workflows, reports, dashboards, store configurations, and custom logic.

Usage and behaviour data: How you and your end users interact with the platform. Holmes infers intent from signals such as navigation, search, typing, and context to adapt the experience. We may collect session data, events, and analytics to operate and improve the service.

Technical data: IP address, device type, browser, logs, and similar technical information.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Aurora platform and Holmes intelligence
• Process transactions and manage your account
• Run workflows, events, and automation as configured by you
• Power intent inference and adaptive experiences via Holmes
• Send service-related communications and support
• Ensure security, prevent abuse, and comply with legal obligations
• Analyse usage to improve our products (in aggregate or anonymised form where appropriate)

4. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

• Service providers: Hosting, databases, search (e.g. Meilisearch), email, payments (e.g. Stripe), and analytics. These providers are contractually bound to protect data and use it only for the services they provide to us.
• Your end users and vendors: When you use Aurora to run storefronts, marketplaces, or vendor dashboards, data flows according to your configuration. You are responsible for ensuring your own privacy notices and terms apply to your users and vendors.
• Legal and safety: Where required by law, to protect rights, or to prevent harm.

5. Data Retention and Security

We retain your data for as long as your account is active and as needed to provide the service and fulfil legal obligations. You may request deletion of your data subject to our retention requirements.

We use industry-standard measures to protect data, including encryption in transit and at rest, access controls, and secure hosting. Multi-tenant isolation ensures your data is logically separated from other customers.

6. Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, object to or restrict processing, and withdraw consent. Contact us at the address below to exercise these rights.

If you are in the UK or EEA, you may also lodge a complaint with the relevant supervisory authority.

7. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session management, and analytics. You can manage cookie preferences in your browser settings.

8. International Transfers

Data may be processed in the UK, EEA, or other jurisdictions where our service providers operate. We ensure appropriate safeguards (such as adequacy decisions or standard contractual clauses) where required.

9. Children

Our services are not directed at children. We do not knowingly collect data from individuals under 16. If you believe we have collected such data, please contact us.

10. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice in the platform. Continued use after changes constitutes acceptance.

11. Contact

For privacy enquiries or to exercise your rights, contact us.