Privacy Policy
Effective Date: March 2026 | Last Updated: March 2026
1. Information We Collect
Account Information:
- Email Address: For account creation and authentication
- Profile Data: Name, profile picture from Google OAuth
- Usage Analytics: Campaign generation patterns and platform interactions
Property Information:
- Listing Details: Property type, location, price, bedrooms, amenities
- Temporary Storage: Data held only during campaign generation
- Purpose: Solely for generating your marketing campaigns
Data Collection Principle: We collect only the minimum data necessary to provide our AI advertising service. No data is collected for unrelated purposes.
2. AI Processing & Data Security
Enterprise AI Integration: To generate your marketing campaigns, we use Google Gemini AI through secure, enterprise-grade APIs. Your property details and campaign inputs are processed by Google's AI systems but are not used to train public AI models.
Confidential Processing: All data transmitted to AI services is encrypted and processed under strict confidentiality agreements. Your campaign inputs and outputs remain private to your account.
Security Measures:
- 256-bit SSL/TLS Encryption: All data transfers encrypted
- Secure Database: PostgreSQL with access controls
- API Rate Limiting: Prevents automated abuse
- Session Security: Secure authentication tokens
3. Data Storage & Retention
Encrypted Storage: Your account information, campaign history, and usage data are stored in our secure, encrypted PostgreSQL database with industry-standard access controls.
Data Retention Policy: We retain your data for as long as your account remains active, or as necessary to provide our services, comply with legal obligations, and resolve disputes.
Your Data Rights:
- Access: Request full copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request complete account and data deletion
- Portability: Request data in machine-readable format
4. Cookies & Tracking Technologies
Essential Cookies: We use strictly necessary session cookies to maintain your logged-in state and protect against cross-site request forgery (CSRF).
Analytics: We may use privacy-friendly analytics tools to understand platform performance and improve user experience. No personal data is shared with third-party analytics providers.
Cookie Control:
Your Choices: You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.
5. Payment & Billing Security
Secure Payment Processing: All subscription payments are processed through our secure payment gateway (Razorpay/Stripe). AuraAds does not directly handle, process, or store your raw credit card information on our servers.
Payment Security:
- PCI DSS Compliance: Payment processing meets industry standards
- Encrypted Transmission: Payment data encrypted during transfer
- Tokenization: Card numbers replaced with secure tokens
6. International Data Protection
Global Compliance: AuraAds complies with major international data protection regulations including GDPR (Europe), CCPA (California), and UAE data protection laws.
Regional Compliance:
- GDPR (EU): Lawful basis, data subject rights, breach notification
- CCPA (California): Consumer rights, opt-out mechanisms, data deletion
- UAE Regulations: Local data protection law compliance
- International Transfers: Adequate protection for cross-border data transfers
7. Children's Privacy
Age Restriction: AuraAds is a professional B2B software intended for adult real estate professionals (18+). Our service is not intended for individuals under 18 years of age, and we do not knowingly collect data from minors.
Parental Controls: Parents or guardians should monitor minors' internet usage and prevent access to our platform.
8. Data Breach Notification
Breach Protocol: In the unlikely event of a data breach, we will notify affected users promptly through email or platform notifications, providing details of the breach and recommended protective measures.
Notification Timeline: We will notify users within 72 hours of breach discovery as required by applicable laws and provide regular updates on resolution progress.
9. Third-Party Services & Data Sharing
AI Service Providers: We use Google Gemini AI for campaign generation under enterprise agreements that include strict data protection and confidentiality obligations.
Payment Processors: Razorpay/Stripe for payment processing with PCI DSS compliance
Data Sharing Policy:
No Sale of Personal Data: AuraAds does not sell, rent, or trade your personal information to third parties for marketing purposes.
Service Providers Only: Data is shared only with necessary service providers to operate our platform, all under strict confidentiality agreements.
10. Contact & Data Protection Officer
Privacy Inquiries: For privacy-related questions, data access requests, or concerns about our data practices, contact our Data Protection Officer at privacy@useauraads.com
Response Time: We will respond to privacy inquiries within 30 days as required by GDPR and provide regular updates on complex requests.
Regulatory Compliance: Our Data Protection Officer ensures compliance with all applicable privacy regulations and serves as our official contact for data protection authorities.
Your Privacy Matters
We're committed to protecting your data with enterprise-grade security and transparent practices.