Privacy Notice — Aura Quality Register Intelligence
**Internal note (staging): this text is a working draft prepared for private
testing. It has not been reviewed by a lawyer and is not legal advice. It
must be replaced with approved final wording before any public launch.**
Aura Catalyst LLC operates Aura Quality Register Intelligence.
What we collect
- Account details: your name, email address, professional role and
country, provided at registration.
- Register files you upload and the analysis results derived from them.
- Operational records: sign-in events, uploads, analyses, payments and
deliveries, kept so the Service works and can be supported.
- Payment records: Stripe processes the payment. We receive a payment
confirmation, the amount, currency and the billing country needed for tax
records. We never receive or store card numbers.
What we do with it
We use it to run the Service for you: to analyse your registers, produce
your brief, send you access links and delivery notifications, and to
support and secure the Service.
Where it is held
- Application data: a managed PostgreSQL database.
- Uploaded files and generated PDFs: a private object-storage bucket. Files
are never publicly accessible; downloads require an authorised request.
- Email delivery: Resend.
- Payments: Stripe.
How long we keep it
Uploaded files and generated outputs are deleted after the retention period
shown in the Service. Deleting a project removes its files and results.
Operational and financial records are kept as long as required.
Security
Access requires a verified email link. Sessions are cookie-based, HTTP-only
and secure. Object keys contain no filenames, emails or project names. IP
addresses used for abuse limits are stored only as keyed hashes.
Your choices
You can delete a project at any time from your workspace, and you can ask
us to close your account.
Contact
Aura Catalyst LLC — contact details to be completed before launch.