Privacy Policy

1. Company identity and scope

Aurora Corporation is a technology company incorporated in Delaware, United States. This policy applies to Aurora-controlled websites, services, accounts, research and operational workflows, and integrations that reference it. Third-party services operate under their own policies.

2. Information we may process

• Information supplied directly by users, such as name, work email, organization, inquiry content, account settings, and materials submitted for analysis.
• Authentication and account information, including identifiers, login events, authorization status, and security signals supplied by an identity provider.
• Authorized professional profile information covered by OAuth scopes the user explicitly grants.
• Public company, market, professional, and research information obtained from lawful public sources or authorized providers.
• Website technical data such as IP address, browser and device type, request time, referring page, diagnostics, and security events.
• Essential storage, cookies, or similar technologies used to deliver, protect, or remember an authorized experience.

3. How information is used

• Authenticate users and protect accounts.
• Deliver requested services, integrations, and support.
• Provide authorized executive-intelligence, market and company research, and commercial or operational workflows.
• Maintain security, prevent abuse, investigate faults, and improve reliability.
• Evaluate and improve service quality, models, and user experience using proportionate and minimized information.
• Meet legal, contractual, and compliance obligations and enforce applicable terms.

4. LinkedIn and other OAuth providers

When explicitly authorized by the user, Aurora may use LinkedIn authentication to authenticate the user, receive profile information covered by the granted OAuth scopes, provide authorized professional and executive-intelligence functionality, and secure and personalize the authorized account experience.

Aurora does not represent that it accesses LinkedIn messages, contacts, invitations, posts, or social actions through basic sign-in scopes. Any future access would require an approved product, a demonstrated need, the relevant provider approval, and explicit user authorization.

Users can revoke third-party access through the relevant provider. They may also contact Aurora regarding information previously received by Aurora. Revocation stops future provider access but may not automatically delete information already lawfully retained by Aurora.

5. Sharing and provider governance

Aurora may share information with service providers that are authorized to support hosting, authentication, communications, analytics when enabled, security, research, payment processing, or model processing. Providers receive only the information reasonably necessary for the authorized function and are governed by applicable agreements and their own legal obligations.

Aurora may disclose information when required by law, to protect rights or safety, to address misuse, or in connection with a legitimate corporate transaction subject to appropriate safeguards.

Aurora does not sell personal information and does not use OAuth-derived information for unauthorized advertising.

6. Retention and deletion

Aurora retains information only for as long as reasonably necessary for the purpose collected, account continuity, security, dispute resolution, legal obligations, or authorized institutional memory. Retention varies by information type and context.

A deletion request may be limited where retention is required by law, needed for security or fraud prevention, necessary to establish or defend legal claims, or technically preserved in time-limited backups. Aurora does not claim that all deletion is instantaneous or fully automated.

7. Security and international processing

Aurora applies risk-based security principles including controlled access, least privilege, authentication, authorization, secrets protection, data minimization, dependency management, and auditability where appropriate to the service. No system can guarantee absolute security.

Aurora and authorized providers may process information in the United States and other countries where they operate. Applicable protections depend on the service, provider, contract, and law; Aurora does not promise a specific data residency unless separately agreed in writing.

8. Rights and choices

Depending on location and applicable law, a person may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. A person may also withdraw OAuth authorization through the provider. Aurora may need to verify identity and scope before acting on a request.

Requests may be sent to contact@auroraos.online. Aurora will evaluate each request under applicable law and the relevant service context.

9. Third-party services and children

Links, identity providers, model providers, payment providers, and other third-party services are governed by their own terms and privacy practices. Aurora is not responsible for a third party’s independent processing.

Aurora services are designed for organizations and professionals, not children. Aurora does not knowingly solicit personal information from children under 13. If such information is identified, contact Aurora so the circumstances can be reviewed.

10. Updates and contact

Aurora may update this policy as services, providers, or legal requirements change. Material changes will be reflected by a revised date and, when appropriate, an additional notice.

Privacy questions and requests: contact@auroraos.online. Aurora Corporation, Delaware, United States.