Privacy Policy

We collect information you provide, including your email address, uploaded source photos, profile preferences, quiz selections, generated photos and bios, instructions for new photos and edits, messages you send to support, and the time, policy version, and method of your Terms acceptance or separately provided likeness consent.

We also process technical and transaction information such as your device and browser details, IP address, referral and advertising identifiers, pages and actions used, purchase status, product identifiers, and payment transaction references. Stripe processes payment-card details; Aura does not receive or store your full card number.

We use information to operate the service, generate your initial photo and bio delivery, provide account access, create new photos or edits when you use extra photo credits, process and verify purchases, prevent abuse and fraud, troubleshoot errors, measure product and advertising performance, communicate with you, and meet legal obligations.

We share information only as needed to run Aura with providers including Supabase for authentication, database, storage, and backend functions; Vercel for website hosting; Black Forest Labs for image generation; Google Gemini for profile bio generation; Stripe for checkout and payment processing; Sentry for error monitoring; PostHog for product analytics and privacy-masked session replays; and Meta for advertising measurement.

PostHog session replays mask all form inputs, strip URL query strings and fragments, and block payment fields, uploaded or generated photos, bios, and instructions for new photos or edits from recordings.

Aura does not send your uploaded or generated photos, quiz answers, bios, prompts, or instructions for new photos or edits to Meta. Meta may receive technical and attribution data such as IP address, browser information, Meta browser/click identifiers, page events, and purchase information. Where available, email and internal customer identifiers used for purchase matching are cryptographically hashed before transmission.

We may also disclose information when required by law, to protect users or the service, or as part of a business reorganization subject to appropriate safeguards. We do not sell your uploaded photos or generated content.

Unpaid draft workspaces and their source uploads are normally scheduled for deletion after 24 hours. An active payment session may extend that window, but unpaid drafts are never kept beyond 48 hours. Incomplete upload reservations are cleared sooner. After payment, source photos, your initial delivery, and additional photos are retained so you can access your package and use extra photo credits for new photos or edits. When you edit a photo, the original is kept.

You may request deletion of your paid profile data by contacting us. We may retain limited billing, consent, fraud-prevention, security, and compliance records where reasonably necessary or legally required. Backup and provider deletion may take additional time.

We use access controls, encrypted connections, private storage, and restricted service credentials designed to protect your information. No online system can guarantee absolute security. Our providers may process information in the United States and other countries where they operate.

You may ask to access, correct, or delete your personal information, or object to certain processing, subject to applicable law and necessary identity verification. Browser settings may limit cookies or advertising identifiers, but some service functions may depend on essential storage.

Aura is intended only for people aged 18 or older. We do not knowingly collect personal information from children.

We may update this policy as the service evolves. Material changes will be posted here with a new effective date.

For privacy questions or requests, email support@getauraprofile.com.