This Privacy Policy explains how Auraltica LLC, a limited liability company organized under the laws of the State of Wyoming, United States ("Auraltica", "we", "us" or "our"), collects, uses, stores and protects the personal data of users of our platform and associated services. By using the Service, you agree to the practices described in this Policy.

1. Data controller

Auraltica is the data controller for the personal data you provide when using the platform. We are committed to protecting your privacy and complying with applicable data protection regulations. For any privacy-related query, you can reach us at team@auraltica.com.

2. Data we collect

We collect the following categories of data:

Registration data: email address, full name, store name and, optionally, phone number.
Usage data: interactions with the platform, queries made, features used, access logs and session information.
Integration data: information from the external platforms you connect (e.g. Shopify, Mercado Libre, advertising platforms), including products, orders, customers and metrics necessary to provide the Service.
Payment data: billing information processed through our third-party payment provider. We do not store full card details directly.
Technical data: IP address, browser type, device and operating system, for security and analytics purposes.

3. Purpose and legal basis

We use your data to:

Provide, maintain and improve the Service (legal basis: contract performance).
Manage your account and subscriptions (legal basis: contract performance).
Process payments and prevent fraud (legal basis: contract performance and legitimate interest).
Send service-related communications such as updates, security alerts and billing notices (legal basis: contract performance and legitimate interest).
Send commercial communications, with your prior consent where required (legal basis: consent).
Comply with applicable legal obligations (legal basis: legal compliance).
Improve platform quality through aggregate and anonymized analytics (legal basis: legitimate interest).

4. Third-party integrations and data sharing

To provide the Service, we share data with the following categories of recipients:

Cloud infrastructure providers (Supabase/PostgreSQL) that host and process your data.
Third-party AI providers that power the conversational and analytical features. Data sent to these providers is subject to their own privacy policies.
Payment processor for billing and subscription management.
Communication tools for sending notifications when configured.

We do not sell your personal data to third parties or use it for advertising purposes on behalf of third parties. All data processors are bound by data processing agreements.

4a. Google user data and API Services

When you connect a Google Ads account, Auraltica accesses your Google advertising data through the Google Ads API using the https://www.googleapis.com/auth/adwords OAuth scope, which you explicitly authorize. We use this access, within the permissions you grant, only to provide the features of the Service that you use, such as displaying campaign performance metrics and calculating return on ad spend (ROAS) inside your dashboard.

Auraltica's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for serving advertisements, we do not sell it, we do not transfer it to third parties except as necessary to provide and improve the Service (or for security or legal reasons), and no humans read this data except with your consent, for security purposes, to comply with applicable law, or where the data is aggregated and anonymized. Google advertising data is stored encrypted and is deleted when you disconnect the integration or delete your account.

4b. Meta (Facebook and Instagram) advertising data

When you connect a Meta Ads account, Auraltica accesses your advertising data through the Meta Marketing API, within the permissions you explicitly authorize through Facebook Login. This includes information about your ad accounts, campaigns and campaign performance metrics.

We use this data only to provide the features of the Service that you use, such as advertising analytics, return on ad spend (ROAS) against your store's sales and answers to your questions inside your own account. We do not sell Meta data, use it for advertising or share it with third parties, except with the service providers described in Section 4 that we need to operate the Service (such as hosting and the AI providers that process your queries).

The data is refreshed periodically while the connection is active. When you remove the Meta Ads connection in Auraltica, we delete the stored access token together with the campaigns and metrics imported from that ad account, and when you delete your Auraltica account all of your data is deleted. You can also revoke Auraltica's access at any time from your Facebook settings (Settings & privacy → Settings → Business integrations). To request the deletion of your data, contact us at team@auraltica.com.

4c. Government and law enforcement requests

Auraltica LLC may receive requests from public authorities for personal data we process, including data received through third-party platforms such as Meta. We handle any such request as follows:

Legal review. We review every request to confirm it is valid, issued by a competent authority and compliant with applicable law before we disclose any data.
Challenging unlawful requests. If a request is overly broad, lacks a valid legal basis or is otherwise unlawful, we will challenge or decline it using the legal remedies available to us.
Data minimization. When disclosure is legally required, we disclose only the minimum data strictly necessary to comply with the request.
Documentation. We keep a record of each request, including the requesting authority, the legal basis cited, our assessment and our response.
User notification. Where legally permitted, we will notify affected users before disclosing their data so they can seek legal protection, unless doing so would put someone at risk of death or serious harm.

5. Data retention

We retain personal data for as long as your account is active and thereafter for the period necessary to comply with our legal obligations, resolve disputes and enforce our agreements. Integration data (Shopify, etc.) is retained for as long as the integration is active and for a reasonable period after its removal, except advertising data (Google Ads, Meta Ads, TikTok Ads), which is deleted as soon as you remove the corresponding connection. You may request deletion of your data at any time (see Section 6).

6. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: obtain a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your data (subject to legal retention obligations).
Portability: receive your data in a structured, commonly used and machine-readable format.
Restriction: request that we restrict the processing of your data in certain circumstances.
Objection: object to processing based on legitimate interests.
Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at team@auraltica.com. We will respond within the timeframe required by applicable law.

7. Security

We implement technical and organizational security measures to protect your data, including end-to-end encryption for sensitive credentials, access control by roles and stores, HTTPS for all communications, and regular security audits. No method of transmission over the internet is completely secure; if you discover a potential vulnerability, please notify us responsibly at team@auraltica.com.

8. Cookies and tracking

We use technical cookies essential for the operation of the Service (authentication, session preferences). We may also use analytics cookies to understand how the platform is used. You can manage your cookie preferences through your browser settings, although disabling essential cookies may affect the functionality of the Service.

9. International transfers

Your data may be processed and stored on servers located outside your country of residence. When we transfer personal data outside the European Economic Area or equivalent jurisdictions, we ensure appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions or equivalent mechanisms) in accordance with applicable law.

10. Changes to this policy

We may update this Privacy Policy periodically. When changes are substantial, we will notify you through the Service or by email with reasonable advance notice. The "Last updated" date at the top of this page reflects the current version. Continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

11. Contact

For any questions about this Privacy Policy or to exercise your rights, contact us at team@auraltica.com or through the channels indicated on our website or application.