Privacy Policy

Last updated: March 2026

1. Overview

AURA Labs ("we", "us") operates the AURA developer platform, including the AURA Core API, developer portal, and related services. This policy describes how we collect, use, and protect information when you use our platform.

2. Information We Collect

When you register for a developer account, we collect:

• Email address and display name
• Authentication credentials (managed securely via Supabase Auth)
• API usage data including request counts, endpoints called, and error rates
• Agent registration data including public keys and capability manifests

When agents transact through AURA Core, we process:

• Intent data (natural language queries submitted by Scout agents)
• Session and transaction metadata (IDs, timestamps, status transitions)
• Offer data submitted by Beacon agents (pricing, terms, product details)

3. How We Use Information

We use collected information to operate and improve the AURA platform, authenticate developers and agents, process and route commerce transactions, monitor platform health and prevent abuse, and communicate important updates about the service.

4. Data Sharing

We do not sell personal information. We share data only as necessary to operate the platform: transaction data is shared between the Scout and Beacon agents involved in a session, aggregate usage statistics may be used to improve the platform, and we may disclose information if required by law or to protect the safety of users.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), agent identity verification via Ed25519 cryptographic signatures, Row Level Security on all database tables, and regular security audits of the platform infrastructure.

6. Data Retention

Developer account data is retained while your account is active. Transaction data is retained for the period required by applicable regulations and for platform integrity purposes. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data including access, correction, deletion, data portability, and the right to object to processing. To exercise these rights, contact us at the address below.

8. Cookies and Analytics

The AURA developer portal uses session-based authentication. We do not use third-party tracking cookies or advertising analytics. Essential cookies may be used for authentication state management.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered developers of material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

For privacy-related questions or requests, contact us at privacy@aura-labs.ai.