Legal
Privacy Policy
Last updated: July 31, 2026
This policy explains what Aurora collects when you use the app to plan, build, and ship software projects, and how that information is handled.
1. Information we collect
Account information: your name, email address, authentication identifiers, and billing details processed by our payment provider.
Project content: prompts you write, files Aurora reads or writes, build logs, and repository metadata for the projects you connect.
Usage data: feature interactions, credit consumption, device and app version information, and diagnostic crash reports.
2. How we use information
To operate the agent: planning, generating, and running code on your behalf, and returning results to your device.
To maintain the service: billing, credit accounting, fraud prevention, security monitoring, and support responses.
To improve reliability: aggregated and de-identified analysis of failure modes and performance.
3. Model providers
Aurora routes tasks to third-party frontier model providers. The content required to complete a task may be transmitted to the selected provider under contractual terms that restrict further use.
We do not use your private code to train our own models, and we ask providers to exclude Aurora traffic from provider training where that option is available.
4. Repository access
When you connect a source-control provider, Aurora requests the narrowest practical scope needed to read the repositories you select and to push branches you approve.
You can revoke access at any time from your provider settings or from within the Aurora app.
5. Data retention
Project history, prompts, and build logs are retained while your account is active so you can review past runs.
You can delete individual projects or your entire account. Deletion removes associated content from active systems within 30 days, subject to backup rotation and legal retention obligations.
6. Security
Data is encrypted in transit and at rest. Build environments are isolated per run, and secrets you provide are stored encrypted and injected only at execution time.
No system is perfectly secure. Report suspected vulnerabilities to our security contact.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing.
Submit requests through the contact page; we may need to verify your identity before acting.
8. Children
Aurora is not directed to children under 13, and we do not knowingly collect their data.
9. Changes to this policy
We will post material changes in the app and update the date above. Continued use after an update constitutes acceptance.
10. Contact
Questions about this policy can be sent to privacy@aurora.example.
