This Privacy Policy explains how Auraltica LLC, a limited liability company organized under the laws of the State of Wyoming, United States ("Auraltica", "we", "us" or "our"), collects, uses, stores and protects the personal data of users of our platform and associated services. By using the Service, you agree to the practices described in this Policy.

1. Data controller

Auraltica is the data controller for the personal data you provide when using the platform. We are committed to protecting your privacy and complying with applicable data protection regulations. For any privacy-related query, you can reach us at team@auraltica.com.

2. Data we collect

We collect the following categories of data:

Registration data: email address, full name, store name and, optionally, phone number.
Usage data: interactions with the platform, queries made, features used, access logs and session information.
Integration data: information from the external platforms you connect (e.g. Shopify, Mercado Libre, advertising platforms), including products, orders, customers and metrics necessary to provide the Service.
Payment data: billing information processed through our payment provider (Stripe). We do not store full card details directly.
Technical data: IP address, browser type, device and operating system, for security and analytics purposes.

3. Purpose and legal basis

We use your data to:

Provide, maintain and improve the Service (legal basis: contract performance).
Manage your account and subscriptions (legal basis: contract performance).
Process payments and prevent fraud (legal basis: contract performance and legitimate interest).
Send service-related communications such as updates, security alerts and billing notices (legal basis: contract performance and legitimate interest).
Send commercial communications, with your prior consent where required (legal basis: consent).
Comply with applicable legal obligations (legal basis: legal compliance).
Improve platform quality through aggregate and anonymized analytics (legal basis: legitimate interest).

4. Third-party integrations and data sharing

To provide the Service, we share data with the following categories of recipients:

Cloud infrastructure providers (Supabase/PostgreSQL) that host and process your data.
Third-party AI providers that power the conversational and analytical features. Data sent to these providers is subject to their own privacy policies.
Payment processor (Stripe) for subscription management.
Communication tools for sending notifications when configured.

We do not sell your personal data to third parties or use it for advertising purposes on behalf of third parties. All data processors are bound by data processing agreements.

4a. Google user data and API Services

When you connect a Google Ads account, Auraltica accesses your Google advertising data through the Google Ads API using the https://www.googleapis.com/auth/adwords OAuth scope, which you explicitly authorize. We use this access exclusively to readcampaign-level performance metrics — such as spend, impressions, clicks, conversions and conversion value — in order to display advertising analytics and calculate return on ad spend (ROAS) inside your dashboard. We never create, modify, pause or delete any resource in your Google Ads account.

Auraltica's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for serving advertisements, we do not sell it, we do not transfer it to third parties except as necessary to provide and improve the Service (or for security or legal reasons), and no humans read this data except with your consent, for security purposes, to comply with applicable law, or where the data is aggregated and anonymized. Google advertising data is stored encrypted and is deleted when you disconnect the integration or delete your account.

5. Data retention

We retain personal data for as long as your account is active and thereafter for the period necessary to comply with our legal obligations, resolve disputes and enforce our agreements. Integration data (Shopify, etc.) is retained for as long as the integration is active and for a reasonable period after its removal. You may request deletion of your data at any time (see Section 6).

6. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: obtain a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your data (subject to legal retention obligations).
Portability: receive your data in a structured, commonly used and machine-readable format.
Restriction: request that we restrict the processing of your data in certain circumstances.
Objection: object to processing based on legitimate interests.
Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at team@auraltica.com. We will respond within the timeframe required by applicable law.

7. Security

We implement technical and organizational security measures to protect your data, including end-to-end encryption for sensitive credentials, access control by roles and stores, HTTPS for all communications, and regular security audits. No method of transmission over the internet is completely secure; if you discover a potential vulnerability, please notify us responsibly at team@auraltica.com.

8. Cookies and tracking

We use technical cookies essential for the operation of the Service (authentication, session preferences). We may also use analytics cookies to understand how the platform is used. You can manage your cookie preferences through your browser settings, although disabling essential cookies may affect the functionality of the Service.

9. International transfers

Your data may be processed and stored on servers located outside your country of residence. When we transfer personal data outside the European Economic Area or equivalent jurisdictions, we ensure appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions or equivalent mechanisms) in accordance with applicable law.

10. Changes to this policy

We may update this Privacy Policy periodically. When changes are substantial, we will notify you through the Service or by email with reasonable advance notice. The "Last updated" date at the top of this page reflects the current version. Continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

11. Contact

For any questions about this Privacy Policy or to exercise your rights, contact us at team@auraltica.com or through the channels indicated on our website or application.