Privacy Policy

The data controller is Genuine AI [VERIFY LEGAL ENTITY AND REGISTERED ADDRESS — counsel item L11]. Privacy questions and rights requests: hello@auradev.ai.

Account data — name, email address, and password hash when you create an account.

Your content — writing samples you upload and prompts you submit, processed to build your voice profile and generate drafts.

Billing data — handled by our payment processor; we do not store full card numbers. [CONFIRM PROCESSOR AND DATA FLOW BEFORE FIRST PAID SALE — counsel item L13.]

Usage and analytics data — pages viewed, interactions, and device information, collected only after you consent (see Section 6).

To provide the service and perform our contract with you (account, content processing, billing); with your consent (analytics cookies); and for our legitimate interests in securing and improving the service, in each case as permitted by GDPR Art. 6 where it applies.

We do not sell personal data. We do not use your writing samples or generated drafts to train models for other customers. We do not share your content with advertisers.

Our subprocessors include:

• Vercel Inc. — hosting, content delivery, and AI Gateway routing
• AI model providers accessed through Vercel's AI Gateway — generating rewrites from text you submit (Section 9 for the demo)
• Google LLC — Google Analytics 4, loaded only after consent (Section 6)
• [PAYMENT PROCESSOR — CONFIRM BEFORE FIRST PAID SALE]

We may also disclose data where required by law, or in a merger or acquisition with notice to you.

Strictly necessary cookies (authentication, consent preference) are always active. Analytics cookies (Google Analytics 4) are loaded only after you grant consent through the consent banner, using Google Consent Mode v2; declining or ignoring the banner keeps analytics storage denied. You can change your choice at any time from the privacy controls in the footer region of the site. Analytics data is collected with IP anonymization and no advertising features enabled.

Where personal data is transferred outside the EU/UK, transfers are covered by Standard Contractual Clauses via our providers' data processing agreements. Vercel participates in the EU-US Data Privacy Framework. Requests to AI model providers are routed through Vercel's AI Gateway [CONFIRM SCC/DPA TRANSFER COVERAGE FOR AI MODEL PROVIDERS WITH COUNSEL]. We do not claim GDPR certification; this policy and our rights-handling process are how we meet our obligations.

Account data is kept while your account is active and deleted within [30] days of account deletion [RETENTION WINDOW FOR COUNSEL]. Writing samples and voice profiles are deleted when you delete them or your account. Backups age out within [35] days. Analytics data follows Google Analytics' 14-month retention setting.

When you use the public demo at /demo, the text you enter and the voice settings you choose are sent to our rewrite endpoint and forwarded through Vercel's AI Gateway to a third-party AI model — or, if the primary model fails, to a configured fallback model from a different provider — to generate the rewrite. We do not store your demo text: it is not written to any database, and our application logs record only request metadata (such as a request identifier, the model used, status, and error type) — never the text itself. Each AI provider's handling of the request is governed by its own terms. Do not enter sensitive or regulated information into the demo. This section describes the demo only; content you upload to an account is handled per Sections 2–8.

Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to processing, to withdraw consent, and to complain to a supervisory authority. California residents have equivalent rights under the CCPA/CPRA, including the right to know and the right to non-discrimination. Send requests to hello@auradev.ai; we respond within the timelines the applicable law requires (30 days under GDPR, 45 under CCPA).

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256) on our infrastructure [VERIFY ANY APP-MANAGED DATABASE IS COVERED]. Details of our security posture, including what we do and do not claim, are on the Security page.

The service is not directed to children under [16] [AGE FOR COUNSEL CONFIRMATION]. We do not knowingly collect data from them; if you believe we have, contact us and we will delete it.

Each version of this policy is dated and versioned, and prior versions are archived. Material changes are announced by email or in-product notice before they take effect.

Privacy: hello@auradev.ai. Support: hello@auradev.ai.