Privacy Policy
Last updated: February 10, 2026
Auralith Inc. ("Auralith Inc.", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information when you use the Auralith OMNI Platform ("Platform").
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, company name, social media handles when you register
- Payment Information: Credit card details processed by Stripe (we do not store full card numbers)
- User Content: Files, documents, and data you upload for AI training
- Communications: Emails, support tickets, and feedback you send us
1.2 Information We Collect Automatically
- Usage Data: Pages visited, features used, agent interactions
- Device Information: Browser type, operating system, IP address
- Browser storage: Strictly necessary local storage holding your authentication session and theme preference. No analytics or advertising storage is used — see Section 10.
- Log Data: Access times, error logs, and API requests
1.3 Information from Third Parties
- OAuth Providers: When you sign in via Google, GitHub, or LinkedIn, we receive your profile information
- Connected Integrations: When you connect APIs, we access data necessary to provide the service
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and maintain the Platform | Contract performance |
| Train AI models on your data | Contract performance |
| Process payments | Contract performance |
| Send service-related communications | Legitimate interest |
| Improve and develop new features | Legitimate interest |
| Prevent fraud and ensure security | Legal obligation / Legitimate interest |
| Send marketing communications | Consent |
3. Data Sharing
We do not sell your personal data. We may share information with:
- Service Providers: Google Cloud (hosting), Stripe (payments), Firebase (authentication)
- Connected Integrations: Third-party APIs you authorize (e.g., Slack, Gmail)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale
4. Your User Content
Your uploaded data and trained AI models are:
- Owned by you: You retain all rights to your User Content
- Isolated: Your data is not used to train models for other customers
- Deletable: You can request deletion of your data at any time
- Exported: You can request export of your data in standard formats
5. Data Retention
We retain your data for:
- Active accounts: As long as your account is active
- After deletion: 30 days for data recovery, then permanently deleted
- Legal requirements: Longer if required by law (e.g., tax records)
- Aggregated data: Anonymous usage statistics may be retained indefinitely
6. Data Security
We implement industry-standard security measures:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits and penetration testing
- Access controls and authentication
- Secure development practices
- Incident response procedures
7. Your Rights
Depending on your location, you may have rights to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a portable format
- Restriction: Limit processing of your data
- Objection: Object to certain processing activities
- Withdraw Consent: Withdraw consent for marketing
To exercise these rights, contact privacy@auralith.org.
8. International Transfers
Your data may be processed in Canada and the United States. We use Standard Contractual Clauses and other appropriate safeguards for international transfers.
9. Children's Privacy
The Platform is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us immediately.
10. Cookies and Similar Technologies
We currently use only strictly necessary browser storage. We do not load analytics, advertising, session-replay or third-party tracking scripts on the Platform, and we do not sell or share personal information for cross-context behavioural advertising.
| Category | Purpose | In use today | Consent required |
|---|---|---|---|
| Strictly necessary | Keeping you signed in (Firebase Authentication, stored in your browser's local storage) and remembering your light/dark theme preference. | Yes | No — exempt, as these are required to deliver a service you requested |
| Analytics | Aggregate, non-identifying usage measurement. | No | Yes — opt-in, off by default |
| Marketing | Campaign measurement and interest-based advertising. | No | Yes — opt-in, off by default |
Optional categories remain disabled unless you switch them on, and declining is always as easy as accepting. If we introduce analytics or marketing technologies in future, they will load only after you opt in. You can review or change your choice at any time:
You can also clear or block browser storage through your browser settings, though doing so for strictly necessary storage will sign you out and may prevent the Platform from functioning.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or Platform notification. The "Last updated" date at the top indicates when this policy was last revised.
12. Contact Us
For privacy-related inquiries:
Email: privacy@auralith.org
Auralith Inc.
40 New Dehli Dr.
Markham, ON L3S 0B5
Canada
13. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell personal information)
- Right to non-discrimination for exercising your rights
14. European Privacy Rights (GDPR)
EU/EEA residents have rights under GDPR as described in Section 7. Our legal bases for processing are outlined in Section 2. For complaints, you may contact your local data protection authority.