Privacy Policy

This Policy applies to information we collect:

• When you install and use the Aaura Chrome extension;
• When you access our website or dashboard;
• When you communicate with us (email, chat, support); and
• When our systems process Etsy listing content that you view or submit through the extension.

It does not apply to third-party sites or services you access via links or integrations (e.g., Etsy, Google, Stripe). Those are governed by their own policies.

A) Account & Subscription Data

Name, email address, password (hashed), plan tier, and billing metadata (handled by Stripe; Aaura does not store full payment card numbers).

B) Chrome Extension Inputs (Etsy-Only)

• On-page data you view on etsy.com (e.g., listing titles, descriptions, images, prices, reviews, shop info).
• Your prompts, settings, and feedback within Aaura.
• AI outputs we generate for you (e.g., listing suggestions, critiques).

We do not read or collect content from non-Etsy domains via the extension.

C) Usage & Device Data (Website/App)

• Log and usage data (browser type, IP address, timestamps, referring/exit pages).
• Cookie/Pixel information for analytics and product improvement.

D) Support & Communications

Messages, attachments, survey responses, and related metadata needed to resolve issues.

We use information to:

• Provide and improve the Services (features, performance, personalization);
• Process your requests in the Chrome extension and web app;
• Generate AI outputs from your inputs (via OpenAI and Vertex AI);
• Communicate with you about updates, billing, and support;
• Monitor security, prevent abuse, and enforce our Terms.

Where applicable law requires a legal basis, we rely on:

• Contract (to provide the Services you request),
• Legitimate interests (service improvement, security, analytics), and
• Consent (e.g., certain cookies/marketing; connecting optional integrations).

We send only the minimum necessary data to model providers to generate your outputs. We configure and instruct our AI vendors (OpenAI and Google Vertex AI) not to use your data to train their models and to apply enterprise privacy controls where available. We also apply technical and organizational safeguards to protect your data in transit and at rest.

AI outputs may be imperfect or incomplete and should be reviewed before use; we do not guarantee outcomes (e.g., increased sales, rankings).

We do not sell your personal information. We share data only with:

• Service providers / processors who help us operate (e.g., hosting on Google Cloud, payments via Stripe, support tools, analytics) under confidentiality and data-processing terms;
• Law, safety, and rights compliance (e.g., subpoenas, legal process, or to protect Aaura, our users, or the public);
• Business transfers (e.g., merger/acquisition) under protections consistent with this Policy; and
• With your consent or at your direction.

We also may share aggregated or de-identified statistics that cannot reasonably identify you.

Depending on your location, you may have rights to:

• Access and port certain data;
• Correct inaccurate data;
• Delete data;
• Object or restrict certain processing;
• Opt-out of marketing communications; and
• Not be discriminated against for exercising rights (where applicable).

You can exercise rights by emailing support@askaaura.com from your account email. We may verify your identity before acting on a request and may deny requests where permitted by law (e.g., inability to verify, legal obligation conflicts). Authorized agent requests will require written permission and identity verification.

California (CPRA): You may have rights to know, delete, correct, and opt-out of certain sharing. We do not sell personal information as defined by California law.

EU/UK: You also have a right to lodge a complaint with your local supervisory authority.

• Account settings. Update profile details, email preferences, and subscription options in your account.
• Emails. Unsubscribe via the link in marketing emails; we may still send transactional or legal notices.
• Cookies. Manage cookies in your browser settings; some features may not function without them.
• Extension permissions. The Aaura extension is scoped to etsy.com. You can review/disable the extension at any time in Chrome.

• "Personal data / Personal information": Information that identifies or can reasonably be linked with an identifiable individual.
• "Processing": Any operation performed on personal data (collection, storage, use, sharing, etc.).
• "Service providers / processors": Third parties that process data on our behalf under contract.
• "Aggregated / de-identified data": Data that cannot reasonably identify an individual.