Privacy Policy

Aurix AI Solutions LLC ("Aurix," "we," "us," or "our") operates the Aurix platform, an AI-powered marketing and business management platform for jewelry and retail businesses. The Platform is accessible at the marketing website getaurix.ai and as a software application at app.getaurix.ai and at customer-specific subdomains of getaurix.ai. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Platform.

By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform. This policy should be read together with our Terms of Service and Legal Notice.

1. Our Role and Scope

Aurix provides the Platform to business customers, primarily jewelry and retail businesses. Our role with respect to personal information depends on the context:

• Account and website data. For information about the businesses and users who register for and use the Platform, and visitors to our website, Aurix acts as a controller and this Privacy Policy describes our own practices.
• Customer Content. When a business customer uploads or connects data about their own customers, leads, and contacts ("Customer Content"), the business customer is the controller of that data, and Aurix acts as a service provider or processor that handles the data on the customer's behalf and on their instructions.
• End consumers. If you are an individual whose personal information is in the Platform because you interacted with one of our business customers, please direct privacy requests to that business. We will support our customer in responding to your request.

2. Information We Collect

2.1 Account and Profile Information

• Information provided when you create or manage an account, including name, email address, phone number, business name, job role, and account credentials.
• Billing and transaction information, such as billing contact details and plan selection. Payments are handled by a third-party payment processor; we do not store complete payment card numbers.

2.2 Customer Content

• Data that business customers upload to the Platform or connect through integrations, which may include their customers' and leads' names, email addresses, phone numbers, mailing addresses, purchase history, communications, and preferences.
• Product catalog data, inventory data, and marketing assets used to operate campaigns and synchronize storefronts.
• Lead form submissions retrieved from Facebook and Instagram advertising campaigns operated by a customer through the Platform.

2.3 Information Collected Automatically

• Usage and Log Data: Actions taken within the Platform, feature usage, request logs, timestamps, and error reports.
• Device and Technical Data: IP address, browser type, device type, operating system, and approximate (city or region level) geographic location.
• Website Analytics: Pages visited on our website, time spent, referral sources, and similar engagement metrics.
• Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies as described in Section 9.

2.4 Information from Third-Party Integrations

• Meta (Facebook/Instagram): Through the Meta Marketing API, we receive ad campaign performance data, lead form submissions, page engagement metrics, and messaging data, as described in Section 11.
• Point-of-Sale and E-commerce Platforms: Product, inventory, and order data synchronized from connected systems such as Lightspeed and Wix.
• Other Service Providers: Delivery, engagement, and analytics data from email, SMS, and analytics providers used to operate the Platform.

3. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and secure the Platform and its features.
• Authenticate users, manage accounts, and administer billing and subscriptions.
• Enable Platform features, including advertising campaign management, product synchronization, customer relationship management, marketing communications, and analytics.
• Generate AI-assisted content, including marketing copy, product descriptions, and imagery, as described in Section 5.
• Provide customer support and respond to inquiries and requests.
• Analyze usage to understand, improve, and develop the Platform and its features.
• Detect, prevent, and address fraud, abuse, security incidents, and other harmful activity.
• Send administrative and service-related communications, and, where permitted, information about the Platform.
• Comply with legal obligations and enforce our agreements.

We process Customer Content only to provide the Platform to our business customers and on their instructions, as described in Section 1.

4. How We Share Information

We do not sell personal information. We share information only in the following circumstances:

• Service Providers and Subprocessors: We use trusted third parties to operate the Platform, including cloud hosting and infrastructure (Vercel, Railway, Supabase, and Amazon Web Services), artificial intelligence providers (such as Anthropic and Google), email and SMS delivery (SendGrid, Mailchimp, and Twilio), payment processing, and analytics. These providers are permitted to use the information only to provide services to us.
• Integration Partners: At your direction, we exchange data with platforms you connect to the Platform, such as Meta, Google, Lightspeed, and Wix, in order to provide the integration features you enable.
• Legal Requirements: We may disclose information if required by law, court order, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Artificial Intelligence Processing

The Platform uses artificial intelligence to generate and enhance marketing content, product titles and descriptions, images, and video. To provide these features, we send relevant content, such as product data and prompts, to third-party AI providers including Anthropic and Google. These providers process the content to generate output for us and, under our agreements with them, are restricted from using content submitted through their interfaces to train their models. AI-generated output may contain errors and should be reviewed before use.

6. Data Retention

• Account Data: Retained for as long as your account is active and for a reasonable period afterward to support legal, tax, and accounting obligations.
• Customer Content: Retained for as long as a customer maintains it in the Platform. Following termination, Customer Content is deleted after a reasonable period, subject to applicable law and to any deletion request.
• Usage and Analytics Data: Aggregated and de-identified data may be retained indefinitely for reporting and product improvement. Individual-level usage data is retained only as long as needed for the purposes described in this policy.
• Marketing Preferences: Opt-in and opt-out records are retained as long as needed to honor your choices.

7. Data Security

We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, access controls, authentication safeguards, and regular review of our systems. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions (see Section 9).
• Opt-Out of Marketing: Opt out of marketing communications at any time by using the unsubscribe link in any email, replying STOP to any SMS message, or contacting us.
• Data Portability: Request your data in a commonly used, machine-readable format.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

To exercise these rights, contact us using the information in Section 13. We will respond within the time required by applicable law (generally within 30 to 45 days). If your request concerns Customer Content held on behalf of one of our business customers, we will refer you to, or assist, that customer as the controller.

9. Data Deletion

You may request deletion of your personal data at any time. To submit a data deletion request:

• Email us at [email protected] with the subject line "Data Deletion Request."
• For data collected through Facebook or Instagram, you may also use Meta's data deletion tools available in your Facebook Settings under "Your Facebook Information."

Upon receiving a verified deletion request, we will delete the relevant personal information from our systems within the time required by applicable law, except where we are legally required to retain certain records. We will also instruct our service providers to delete the information from their systems where applicable.

Our data deletion callback endpoint for Meta platform integration is available at: https://api-production-3479.up.railway.app/api/webhooks/meta/deletion

10. Cookies and Tracking Technologies

We use the following tracking technologies:

• Essential Cookies: Strictly necessary for the operation of the Platform, such as authentication tokens and session management.
• Analytics: We use analytics tools, including Google Analytics, to understand how visitors and users interact with our website and Platform, such as page views, session duration, and traffic sources. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Meta Pixel: Our marketing website may use the Meta Pixel to measure the effectiveness of advertising and to build audiences. Data collected by the Meta Pixel is shared with Meta in accordance with their Data Policy.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Platform.

11. Meta Platform Data Usage

In connection with the advertising and messaging features of the Platform, Aurix uses the Meta (Facebook) Marketing API and related permissions on behalf of our business customers. Through these permissions we access and process the following categories of data:

• Ads Management and Insights (ads_management, ads_read): We create, manage, and analyze advertising campaigns on Facebook and Instagram, including ad performance data such as reach, impressions, clicks, and conversions.
• Lead Retrieval (leads_retrieval): We retrieve lead form submissions from Facebook and Instagram ad campaigns. This data includes the information users voluntarily provide in lead forms (name, email, phone number, and custom responses).
• Page Messaging (pages_messaging): We access and respond to messages sent to a customer's Facebook Page and Instagram business account to support customer service and follow-up.
• Page Engagement (pages_read_engagement, pages_manage_metadata): We access engagement data on Facebook and Instagram pages (likes, comments, shares, reviews) and manage page settings and metadata.
• Business Management (business_management): We manage business assets within Meta Business Manager, including ad accounts, pages, and permissions.
• Product Catalog (catalog_management): We manage product catalog data for use in dynamic product ads and shop features on Facebook and Instagram.
• WhatsApp Business Messaging (whatsapp_business_messaging): Where enabled, we send and receive WhatsApp messages for customer communications with appropriate user consent.
• Public Profile (public_profile): We access basic public profile information as required for authentication and API access.

All data obtained through Meta platform APIs is used solely for the purposes described in this Privacy Policy and in compliance with the Meta Platform Terms and Developer Policies. We do not sell any data obtained from Meta platforms.

12. Children's Privacy

The Platform is intended for use by businesses and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected such information, please contact us using the information in Section 13.

13. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

15. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended, provides you with additional rights regarding your personal information. These include the right to know what personal information is collected, the right to know whether personal information is sold or shared and to whom, the right to opt out of the sale or sharing of personal information, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising your privacy rights. We do not sell personal information. To exercise your California privacy rights, contact us using the information in Section 13.