Privacy Policy
Last updated: February 10, 2026
Auralith Inc. ("Auralith Inc.", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information when you use the Auralith OMNI Platform ("Platform").
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, company name, social media handles when you register
- Payment Information: Credit card details processed by Stripe (we do not store full card numbers)
- User Content: Files, documents, and data you upload for AI training
- Communications: Emails, support tickets, and feedback you send us
1.2 Information We Collect Automatically
- Usage Data: Pages visited, features used, agent interactions
- Device Information: Browser type, operating system, IP address
- Cookies: Session cookies for authentication and preferences
- Log Data: Access times, error logs, and API requests
1.3 Information from Third Parties
- OAuth Providers: When you sign in via Google, GitHub, or LinkedIn, we receive your profile information
- Connected Integrations: When you connect APIs, we access data necessary to provide the service
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and maintain the Platform | Contract performance |
| Train AI models on your data | Contract performance |
| Process payments | Contract performance |
| Send service-related communications | Legitimate interest |
| Improve and develop new features | Legitimate interest |
| Prevent fraud and ensure security | Legal obligation / Legitimate interest |
| Send marketing communications | Consent |
3. Data Sharing
We do not sell your personal data. We may share information with:
- Service Providers: Google Cloud (hosting), Stripe (payments), Firebase (authentication)
- Connected Integrations: Third-party APIs you authorize (e.g., Slack, Gmail)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale
4. Your User Content
Your uploaded data and trained AI models are:
- Owned by you: You retain all rights to your User Content
- Isolated: Your data is not used to train models for other customers
- Deletable: You can request deletion of your data at any time
- Exported: You can request export of your data in standard formats
5. Data Retention
We retain your data for:
- Active accounts: As long as your account is active
- After deletion: 30 days for data recovery, then permanently deleted
- Legal requirements: Longer if required by law (e.g., tax records)
- Aggregated data: Anonymous usage statistics may be retained indefinitely
6. Data Security
We implement industry-standard security measures:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits and penetration testing
- Access controls and authentication
- Secure development practices
- Incident response procedures
7. Your Rights
Depending on your location, you may have rights to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a portable format
- Restriction: Limit processing of your data
- Objection: Object to certain processing activities
- Withdraw Consent: Withdraw consent for marketing
To exercise these rights, contact privacy@auralith.org.
8. International Transfers
Your data may be processed in Canada and the United States. We use Standard Contractual Clauses and other appropriate safeguards for international transfers.
9. Children's Privacy
The Platform is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us immediately.
10. Cookies
We use cookies for:
- Essential: Authentication, security, preferences
- Analytics: Understanding how you use the Platform
- Marketing: Interest-based advertising (with consent)
You can manage cookies through your browser settings.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or Platform notification. The "Last updated" date at the top indicates when this policy was last revised.
12. Contact Us
For privacy-related inquiries:
Email: privacy@auralith.org
Auralith Inc.
40 New Dehli Dr.
Markham, ON L3S 0B5
Canada
13. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell personal information)
- Right to non-discrimination for exercising your rights
14. European Privacy Rights (GDPR)
EU/EEA residents have rights under GDPR as described in Section 7. Our legal bases for processing are outlined in Section 2. For complaints, you may contact your local data protection authority.