Privacy Policy

• Account data — email address and display name if you sign in.
• Learning progress — which lessons you've completed and your progress in Auri Academy.
• App usage — pages visited and features used, to improve the product.
• Content you send Auri — messages to our AI coach, processed to generate a reply.
• Payment data — collected and processed by Paddle, our Merchant of Record (see "Data sharing" below). We do not receive or store your full card details.
• Cookies — see our Cookies page for details.

• To provide the platform, save your progress, and personalize learning.
• To keep the service secure and detect abuse.
• To improve the product based on aggregate usage.
• To respond to your questions and feedback.

We do not sell your personal data. We do not use your messages to Auri to train third-party models beyond what is required to generate your reply.

Where applicable law (such as the GDPR) requires a legal basis, we rely on:

• Performance of a contract — to provide the account and features you sign up for, including Aurora Pro.
• Legitimate interests — to keep the service secure, prevent abuse, and improve the product.
• Consent — for optional cookies and marketing communications, where required.
• Legal obligation — to comply with tax, accounting, and other applicable laws.

We share data only with the vendors we need to run the service. Categories of recipients include:

• Hosting, database, and infrastructure providers — to store and serve your account data and learning progress.
• AI model providers — to generate replies from Auri based on your messages.
• Paddle.com Market Ltd ("Paddle") — our Merchant of Recordfor all Aurora Pro purchases. Paddle processes the sale, collects payment, calculates and remits taxes, issues invoices, and handles refunds and chargebacks. Paddle is the controller of the payment data it collects. See Paddle's privacy notice.
• Professional advisers — lawyers and accountants, where necessary.
• Authorities — where we are required to by law.

We keep account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to keep records longer (for example, transaction and tax records, which Paddle and we may retain for up to 10 years to meet legal obligations). Aggregated, non-identifying usage statistics may be kept indefinitely.

We use appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), encryption at rest for our database, restricted access controls, and regular review of our providers. No system is perfectly secure, but we treat your data with care.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You can also lodge a complaint with your local data protection authority. To exercise any of these rights, email privacy@aurorafinanceai.com and we'll respond within 30 days.

Aurora Finance AI is not directed to children under 13. If you believe a child has provided us with personal data, please contact us and we'll delete it.

If we update this notice meaningfully, we'll post the new version here with a fresh "Last updated" date, and notify signed-in users by email where required.

Questions? Email privacy@aurorafinanceai.com or write to Nikos Takopoulos, the data controller, at the same address.