Website Privacy Notice

1. The short version

We collect only what we need to run the Site and to follow up when you ask us to. We do not sell your personal information, we do not show third-party advertising on the Site, and we do not track you across other websites. The Site sets no analytics or advertising cookies: both of our analytics tools (Umami and PostHog) work without cookies and do not identify you.

2. What we collect and why

Information you give us. When you join the waitlist, register for a masterclass, webinar or demo, download a guide, take a quiz, apply for a scholarship or contact us, we collect what you type into the form: typically your name, email address, country, current role or career stage, organisation, the journey or programme you are interested in and any message you write. We use it to respond to your request, to hold your place on the waitlist, to send you the thing you asked for, to invite you to the events you registered for and — if you agree — to keep you informed about AURÄI programmes, launches and offers.

Information collected automatically. When you visit the Site our hosting and security providers record standard technical information: your IP address, browser type and version, device type, operating system, language, the pages you view, the page you came from and the time and length of your visit. Our analytics tools record page views, clicks on buttons such as “Join Waitlist”, scroll depth, approximate location (country or city level, derived from your IP address and not stored with it by Umami) and the campaign links (UTM tags) that brought you to the Site. We use this to keep the Site secure, to measure which pages and campaigns work and to fix problems.

Information from marketing links. If you arrive from one of our social posts, adverts or emails, the link may carry a tag identifying the campaign and the journey it belongs to. We store that tag with your form submission so that we understand which message brought you to us and can tailor what we send you.

We do not collect payment information on the Site. Payments happen on the Platform, through Stripe.

3. Legal bases (for visitors in the UK, EEA and Nigeria)

Where the UK GDPR, the EU GDPR or the Nigeria Data Protection Act 2023 applies, we rely on: consent for marketing emails, which you can withdraw at any time; our legitimate interests in running, securing and improving the Site — including our cookieless analytics — and in responding to enquiries, balanced against your rights; and performance of steps at your request before entering a contract when you join a waitlist or ask about a programme. We will ask for your consent before sending marketing where the law requires it, and every marketing email contains an unsubscribe link.

4. The tools and providers we use

We share personal information only with the providers that help us run the Site, under contracts that require them to protect it and to use it only on our instructions.

We may also disclose information if the law requires it, to protect our rights or safety or anyone else’s, or as part of a merger, financing or sale of the business (in which case this notice will continue to apply to your information).

5. International transfers

We are based in the United States. HubSpot and PostHog process data in the European Union; our other providers process it in the United States. If you are in the UK, the EEA or Nigeria, your information will be transferred to the United States. We protect those transfers with the safeguards the law recognises: the EU Standard Contractual Clauses and the UK International Data Transfer Addendum with each provider, provider participation in the EU-US Data Privacy Framework where the provider is certified, and, for Nigerian data, transfer conditions consistent with the Nigeria Data Protection Act. You can ask us for a copy of the relevant safeguard.

6. Cookies and similar technologies

The only cookies on the Site are Cloudflare’s security cookies, which are strictly necessary to protect it, so there is no cookie banner. We do not use analytics, advertising or tracking cookies. We honour the Global Privacy Control signal as a request not to sell or share your personal information, which we do not do for any visitor.

7. How long we keep information

Waitlist and registration details: until the programme you asked about has launched and for up to 24 months afterwards, or until you unsubscribe, whichever is sooner, after which we delete or anonymise them. Contact-form messages: 24 months from the last exchange. Analytics data: PostHog event data 12 months; Umami data is aggregated and never identifies you. Security and server logs: up to 12 months. If you become a Platform customer, your information is kept under the Platform Privacy Policy instead.

8. Your rights

Depending on where you live you may have the right to: access the personal information we hold about you; correct it; delete it; restrict or object to how we use it; receive a copy in a portable format; withdraw consent at any time; and complain to a supervisory authority. In the UK that is the Information Commissioner’s Office; in the EEA your national data protection authority; in Nigeria the Nigeria Data Protection Commission.

If you live in California, the California Consumer Privacy Act gives you the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, and to be free from discrimination for exercising those rights. We do not “sell” or “share” personal information as those terms are defined in California law, and we do not use or disclose sensitive personal information other than to provide the Site. If you live in Texas, the Texas Data Privacy and Security Act gives you similar rights of access, correction, deletion, portability and to opt out of targeted advertising (which we do not do) and sale (which we do not do).

To exercise any right, email privacy@auraisystems.ai from the address you used with us, or use the unsubscribe and preference links in our emails. We respond within 30 days (45 days for California requests) and may ask you to confirm your identity first. You may authorise an agent to make a request for you.

9. Children

The Site is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

10. Security

We use encryption in transit (HTTPS/TLS) on every page, restrict access to form data to the team members who need it, and rely on providers with independently audited security programmes. No website is perfectly secure; if we learn of a breach affecting you we will tell you and the relevant regulator as the law requires.

11. Changes to this notice

We will post any changes here and update the “Last updated” date. If a change is significant we will tell waitlist members by email.

12. Contact