AURORACHAT PRIVACY POLICY

1. INFORMATION WE COLLECT

We collect various types of information in connection with the Service, including information you provide directly, information collected automatically, and information from third-party sources.

1.1. Information You Provide Directly

• Account Information: When you create an account, we collect information such as your name, email address, username, password, date of birth, and any other information you choose to provide during registration.
• Profile Information: You may choose to provide additional profile information, including profile pictures, preferences, interests, and customization settings for your AI companion experience.
• Payment Information: When you make purchases, we collect payment information including credit card numbers, billing addresses, and transaction details. Payment processing is handled by third-party payment processors (such as Stripe), and we do not store complete credit card information on our servers.
• Communication Content: We collect and store all content you share through the Service, including:
  • Text messages exchanged with AI companions
  • Voice recordings from audio calls
  • Video recordings and visual data from video calls
  • Images, photos, and other media you upload or share
  • Preferences, settings, and conversation history
  • Feedback, support requests, and correspondence with us

1.2. Information Collected Automatically

Usage Data: We automatically collect information about your interactions with the Service, including:

• Pages viewed, features accessed, and time spent on the Service
• Conversation length, frequency, and patterns with AI companions
• Credit usage, purchase history, and subscription status
• Feature preferences and customization choices
• Search queries and interaction patterns

Device and Technical Information: We collect information about the devices and software you use to access the Service, including:

• IP address, browser type and version, operating system
• Device identifiers (such as mobile device ID)
• Screen resolution, language preferences, time zone
• Internet service provider, mobile carrier information
• Referring URLs, clickstream data, and navigation patterns

Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. See Section 7 for more details about cookies and your choices.

1.3. Information from Third-Party Sources

• Social Media Authentication: If you create an account or log in using third-party services (such as Google), we receive information from those services including your name, email address, profile picture, and other information made available by the third-party platform according to your privacy settings.
• Analytics Providers: We may receive information from third-party analytics services that help us understand how users interact with the Service.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for various purposes related to providing, maintaining, and improving the Service. Specific uses include:

2.1. Service Provision and Functionality

• Creating and managing your account
• Providing AI companion interactions (text, voice, and video)
• Personalizing your experience and AI companion responses
• Processing payments and managing credits/subscriptions
• Generating AI content including images and videos
• Maintaining conversation history and context
• Enabling features and functionality you request

2.2. Service Improvement and Development

• Training and improving AI models and algorithms
• Analyzing usage patterns to enhance Service functionality
• Developing new features and services
• Conducting research and analytics
• Testing, debugging, and optimizing performance
• Understanding user preferences and behavior

2.3. Safety, Security, and Compliance

• Detecting, preventing, and addressing fraud, abuse, and security threats
• Enforcing our Terms of Service and other policies
• Complying with legal obligations and responding to legal requests
• Protecting the rights, property, and safety of AuroraChat, users, and the public
• Monitoring for prohibited content and activities
• Verifying user age and identity when required

2.4. Communication and Marketing

• Sending service-related notifications and updates
• Responding to your inquiries and support requests
• Sending marketing communications (with your consent where required)
• Conducting surveys and gathering feedback
• Notifying you about changes to the Service or policies

3. AI TRAINING AND CONVERSATION DATA

Data Usage for AI Development: Conversation data is valuable for improving AI quality, accuracy, emotional intelligence, and responsiveness. We may use your interactions to:

• Train machine learning models and improve AI companion personalities
• Enhance natural language processing and understanding
• Improve voice recognition and generation capabilities
• Develop better context awareness and memory systems
• Create more emotionally intelligent and appropriate responses
• Identify and reduce inappropriate or harmful AI outputs

De-identification Efforts: When using conversation data for AI training, we implement measures to remove or obscure directly identifying information where technically feasible. However, you should not share sensitive personal information in conversations, as complete anonymization cannot be guaranteed.

No Expectation of Confidentiality: Your conversations with AI companions are NOT confidential. We may review conversations for safety, quality assurance, legal compliance, and service improvement purposes. Do not share information you wish to keep private.

AI Unpredictability: Despite our best efforts to filter and moderate content, AI systems are inherently unpredictable. AI may produce responses that are factually incorrect, socially inappropriate, offensive, or potentially harmful. We cannot guarantee the appropriateness or accuracy of any AI-generated content.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1. Service Providers and Business Partners

We share information with third-party service providers who perform services on our behalf, including:

• AI Technology Providers: We use third-party AI services (including Claude, Grok, OpenAI, HeyGen, ReTell, and ElevenLabs) to power AI companion interactions. These providers process conversation data according to their privacy policies.
• Payment Processors: Payment information is shared with Stripe and other payment processors to facilitate transactions.
• Cloud Hosting: We use cloud infrastructure providers to host and store data.
• Analytics Providers: We share usage data with analytics services to understand Service performance.
• Customer Support: Support ticket information may be processed by customer service platforms.
• Communication Services: Email and notification services process communication data.

4.2. Legal Requirements and Protection

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or legal processes
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of AuroraChat, users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to claims that content violates third-party rights
• Cooperate with law enforcement or regulatory investigations

4.3. Business Transfers

If AuroraChat is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Service of any such change in ownership or control of your information.

4.4. Aggregated and De-identified Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you. This may include statistical data about Service usage, demographic information, or research findings.

4.5. With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5. DATA RETENTION

Retention Periods: We retain your information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention practices include:

• Account Information: Retained while your account is active and for a reasonable period after account closure to comply with legal obligations.
• Conversation Data: May be retained indefinitely for AI training purposes, even after account deletion, though we implement de-identification measures where feasible.
• Payment Records: Retained for tax and accounting purposes as required by law (typically 7 years).
• Technical Logs: Generally retained for 90 days unless needed for security investigations or legal compliance.
• Marketing Data: Retained until you withdraw consent or request deletion.

Account Deletion: When you delete your account, we will delete or de-identify your personal information, except where retention is necessary for legitimate business purposes, legal compliance, or to resolve disputes. Note that conversation data used for AI training may persist in de-identified form.

6. DATA SECURITY

We implement reasonable technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication requirements for employees
• Monitoring systems for suspicious activity
• Incident response procedures for security breaches

No Guarantee of Security: However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You use the Service at your own risk.

Account Security: You are responsible for maintaining the confidentiality of your account credentials. Choose a strong password and do not share your login information. Notify us immediately if you suspect unauthorized access to your account.

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities and to provide, maintain, and improve the Service.

7.1. Types of Cookies We Use

• Essential Cookies: Necessary for the Service to function properly, including authentication and security features.
• Performance Cookies: Help us understand how users interact with the Service by collecting aggregated usage data.
• Functionality Cookies: Remember your preferences and settings to provide a personalized experience.
• Analytics Cookies: Used by third-party analytics services (such as Google Analytics) to track and analyze Service usage.

7.2. Your Cookie Choices

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may affect your ability to use certain features of the Service. You can also use browser extensions or opt-out tools provided by third-party analytics services.

8. THIRD-PARTY SERVICES AND LINKS

The Service integrates with and may contain links to third-party websites, services, and applications. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

Third-Party AI Providers: The Service uses multiple third-party AI providers (including Claude/Anthropic, Grok/xAI, OpenAI, HeyGen, ReTell, and ElevenLabs). Your interactions may be processed by these providers according to their respective privacy policies. We recommend reviewing their policies if you have concerns about data processing practices.

9. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your location, you may have certain rights regarding your personal information. These rights may include:

9.1. General Rights

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a copy of your personal information in a structured, machine-readable format.
• Objection: Object to processing of your personal information for certain purposes.
• Restriction: Request restriction of processing in certain circumstances.
• Withdraw Consent: Where processing is based on consent, withdraw consent at any time.

9.2. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of personal information
• Right to opt-out of the sale or sharing of personal information
• Right to correct inaccurate personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your privacy rights

Notice for California Residents: We do not sell personal information as traditionally defined. However, sharing data with third-party AI providers for training purposes may be considered a "sale" or "sharing" under California law. California residents can opt out of such sharing by contacting us.

9.3. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 9.1, as well as the right to lodge a complaint with your local data protection authority.

9.4. How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@aurorachat.com. We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request.

Limitations: Certain rights may be subject to limitations under applicable law. For example, we may retain information as necessary to comply with legal obligations, resolve disputes, or enforce agreements.

10. CHILDREN'S PRIVACY

Age Verification: By creating an account or using the Service, you represent and warrant that you are at least 18 years of age (or the age of majority in your jurisdiction, whichever is greater). We reserve the right to request proof of age, including government-issued identification, at any time.

Parental Notice: If you are a parent or guardian and believe your child under 18 has provided information to us, please contact us immediately at privacy@aurorachat.com. If we learn that we have collected personal information from a child under 18, we will delete that information as quickly as possible and terminate the associated account without notice.

Account Termination: Any account found to belong to a user under 18 will be immediately and permanently terminated without refund of any credits, subscriptions, or purchases.

Reason for Age Restriction: The Service involves AI-generated content that may be unpredictable, inappropriate, or adult-oriented. The AI nature of interactions and potential for unexpected content makes this Service unsuitable for minors.

11. INTERNATIONAL DATA TRANSFERS

AuroraChat is based in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

Data protection laws in the United States and other countries may differ from those in your country of residence. By using the Service, you consent to the transfer of your information to the United States and other countries for the purposes described in this Privacy Policy.

For users in the EEA, UK, or Switzerland, we rely on appropriate legal mechanisms for international transfers, including Standard Contractual Clauses or other legally approved transfer mechanisms where required.

12. DO NOT TRACK SIGNALS

Some web browsers have a "Do Not Track" feature that signals to websites that you do not want to have your online activity tracked. The Service does not currently respond to "Do Not Track" signals or similar mechanisms.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on the Service with a new "Effective Date"
• Sending an email notification to the address associated with your account
• Displaying a prominent notice on the Service

Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you must stop using the Service and may request deletion of your account.

14. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

15. ADDITIONAL DISCLOSURES

15.1. Sensitive Personal Information

Due to the personal and potentially intimate nature of AI companion interactions, conversations may contain sensitive personal information. We strongly advise against sharing: financial account information, social security numbers, government-issued ID numbers, precise geolocation data, health information, sexual orientation details, or any other highly sensitive personal information. While we implement security measures, sharing such information increases privacy risks.

15.2. Biometric Data

Video calls may involve processing of facial images and voice recordings, which may be considered biometric data in some jurisdictions. By using video and voice features, you consent to this processing. Voice and video data is processed by third-party providers (HeyGen, ReTell, ElevenLabs) and may be retained for AI training purposes.

15.3. Marketing Communications

You may opt out of receiving promotional emails by clicking the "unsubscribe" link in marketing emails or by contacting us. Please note that even if you opt out of marketing communications, we may still send you non-promotional messages related to your account and the Service.