Privacy Policy

1. Who we are

Aurafuse ("we", "us") operates the Aurafuse platform at aurafuse.co and app.aurafuse.co and hosts client sites on name.aurafuse.site subdomains. For personal data processed through the platform on your behalf, you act as controller and Aurafuse acts as processor.

2. Data we collect

• Account data — name, work email, password (hashed), workspace and role information.
• Billing data — plan, invoices and payment details handled by our payment provider; we never store full card numbers.
• Platform usage data — feature usage, AI generations, audit logs and support requests.
• Site data — content, briefs, brand assets and settings for sites you build and host with Aurafuse.
• Cookieless analytics — aggregated, source-side measurement of visits, referrers, countries and conversions for the sites you connect. No personal identifiers, no cross-site tracking, no third-party cookies.
• Ad integrations — with your authorization, campaign metrics and budget settings from connected ad accounts.

3. How we use data

• Operate the platform: hosting, editing, publishing, analytics and the Ads Engine;
• Power AI features — cloning, copy suggestions and AI CMO automation — within your workspace only;
• Bill, support, secure and improve the Services;
• Send transactional and service communications, and product updates you can opt out of.

We do not sell personal data. We do not use Customer Content to train models for other customers.

4. Cookies and tracking

Aurafuse sets only the strictly necessary cookies and local storage required to keep you signed in and secure the platform. Sites published with Aurafuse analytics carry no third-party tracking cookies, so your clients' visitors do not need a consent banner for Aurafuse measurement.

5. Sharing

We share data only with: vetted subprocessors for hosting, AI inference, payments, email and error monitoring; professional advisers under confidentiality; and authorities where required by law, with notice where permitted. A current subprocessor list is available on request.

6. International transfers

Data may be processed in the European Union and the United States. Transfers rely on Standard Contractual Clauses and supplementary measures. Our Data Processing Addendum incorporates these safeguards.

7. Retention

Account and billing records are kept for the period required by tax and commercial law. Site data and analytics are retained while your subscription is active and exportable for 30 days after termination. Deleted workspaces are purged from backups within 90 days.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, restrict or delete your personal data, and to object to certain processing. Workspace owners can exercise most rights directly from workspace settings; otherwise contact privacy@aurafuse.co. We respond within 30 days. If you are in the EU/EEA, you may lodge a complaint with your supervisory authority.

9. Security

We encrypt data in transit (TLS) and at rest, enforce least-privilege access, log administrative actions and continuously monitor the platform. No method of transmission or storage is perfectly secure, but we investigate and notify affected customers of confirmed incidents without undue delay.

10. Children

The platform is a business tool and is not directed to children under 16; we do not knowingly collect their data.

11. Changes

We may update this policy as the platform evolves. Material changes will be announced by email or in-product before taking effect, and the effective date above will be updated.

Questions? Contact privacy@aurafuse.co or use the contact form.