Legal · v1.0
Privacy Notice
Last updated: 28 June 2026
Aurora OS is designed with minimal tracking. The public experience runs without non-essential cookies and without third-party advertising or behavioural-tracking pixels.
1. What we collect on public pages
Nothing personally identifying. We do not set marketing cookies, do not embed third-party trackers, and do not sell or share visitor data. Aggregate, cookie-free traffic measurement may be used to understand reach.
2. Essential cookies in protected surfaces
Investor, executive, government and partner surfaces require sign-in. We use a small number of essential-only cookies and local storage entries to keep your session active and to remember your authentication state. These are strictly necessary for the service to function and cannot be disabled without losing access.
3. Data we hold for authenticated users
For named users (investors, government counterparts, partners, advisors): name, organisation, work email, role assignments, session identifiers, document-view audit records, and the IP address used at sign-in. This information is processed to control access, watermark materials, log compliance activity and detect misuse.
4. Lawful basis & retention
Authenticated processing is performed on the basis of a legitimate interest in protecting confidential commercial information and on the contractual basis of any executed NDA or engagement letter. Audit records are retained for the duration of the engagement plus a reasonable archival period.
5. Subprocessors
Hosting, authentication, database, and AI inference are performed by infrastructure providers under data-processing agreements. A current subprocessor list is available on request.
6. Your rights
You may request access to, correction of, or deletion of personal data we hold about you, subject to overriding legal obligations. Email privacy@projectaurora.ai.
7. Security
We apply role-based access control, transport encryption (HTTPS), watermarking of sensitive materials, and continuous activity logging. No system is perfectly secure; we communicate breaches as required by law.
