Privacy Policy

Overview

Aurora is a browser extension that helps you write better, faster. Aurora does not store, process, or retain your writing data. We believe privacy-first design means your data stays with you.

Data Controller

Aurora is operated by [business name — TODO(Alex)], [registered address — TODO(Alex)]. For any privacy question or request, contact support@auroras.pl.

Legal Basis & Data Retention

We process your data under these legal bases: performance of a contract (creating and managing your account and subscription), consent (optional marketing emails, which you can withdraw anytime), and legitimate interest (keeping the service secure and working correctly).

We keep your account data for as long as your account is active, and delete it within [retention period — TODO(Alex)] of account deletion, except where we're legally required to keep records longer (for example, payment records for tax purposes).

Data Collection & Storage

What Aurora Does NOT Do:

• We do not store your text, emails, documents, or any content you write
• We do not have access to your browsing history
• We do not collect personal information from your device
• We do not track your activity across websites
• We do not sell or share your data with third parties

What Aurora Does:

When you use Aurora, your text is sent directly to your chosen AI provider:

• OpenAI (if you connect ChatGPT)
• Anthropic (if you connect Claude)
• Google (if you connect Gemini)

Aurora acts as a UI layer — we don't store, log, or process your text. Your chosen provider's privacy policy governs what happens to your content.

Your API Keys

If you use Aurora without an account, your API key stays entirely on your device and never reaches us. If you're signed in, your key is also encrypted and saved to your account so it's ready on any device you log into — this is optional convenience, not a requirement to use Aurora.

• Keys are encrypted (AES-256) before they're stored — we never save them as plain text
• A saved key is decrypted only for a split second, on our server, to hand it straight to your own Aurora extension — never logged, never shared, never used to make AI calls on our behalf
• You control which AI provider you connect, on a per-device or per-account basis
• You can disconnect a key at any time, which deletes it from your account immediately

Website (auroras.pl)

When you visit auroras.pl, we collect:

• Email address (for account creation and login)
• Google Account Information (if you use Google OAuth — name and email only)
• Subscription status (via Stripe payment processor)

We use this data solely to:

• Authenticate your account
• Manage your subscription
• Send transactional emails (receipts, password resets)

We do not use your email for marketing without consent.

Third-Party Services

Aurora integrates with:

• Supabase (Authentication & User Accounts) — Stores encrypted email, authentication data, and, if you choose to connect an account, your encrypted API key
• Stripe (Payments) — Processes subscription payments, does not store full credit card numbers
• Claude, OpenAI, Gemini (AI Processing) — Your text is sent to your selected provider. Aurora does not retain copies.

Permissions

Aurora requests the following Chrome permissions:

• storage — Cache your API keys locally so Aurora works instantly on any page
• Host permissions for API endpoints — To connect to OpenAI, Anthropic, Google APIs
• Host permissions for auroras.pl — To bridge authentication with the website

Aurora does not have permission to:

• Monitor all websites you visit
• Record keystrokes or clipboard data
• Access files on your computer
• View your browsing history

Your Rights

You have the right to:

• Delete your account — removes all your data from our servers
• Export your data — we'll provide your subscription info in readable format
• Contact us — with privacy concerns or data requests
• Lodge a complaint — with your local data protection authority. In Poland, that's the UODO (Urząd Ochrony Danych Osobowych)

Contact

For privacy questions or concerns, email: support@auroras.pl