Privacy Policy

Last updated: September 2026

1. Overview

AURA Labs ("we", "us") operates the AURA developer platform, including the AURA Core API, developer portal, and related services. This policy describes how we collect, use, and protect information when you use our platform.

2. Information We Collect

When you register for a developer account, we collect:

• Email address and display name
• Authentication credentials (managed securely via Supabase Auth)
• API usage data including request counts, endpoints called, and error rates
• Agent registration data including public keys and capability manifests

When agents transact through AURA Core, we process:

• Intent data (natural language queries submitted by Scout agents)
• Session and transaction metadata (IDs, timestamps, status transitions)
• Offer data submitted by Beacon agents (pricing, terms, product details)

3. How We Use Information

We use collected information to operate and improve the AURA platform, authenticate developers and agents, process and route commerce transactions, monitor platform health and prevent abuse, and communicate important updates about the service.

4. Data Sharing

We do not sell personal information. We share data only as necessary to operate the platform: transaction data is shared between the Scout and Beacon agents involved in a session, aggregate usage statistics may be used to improve the platform, and we may disclose information if required by law or to protect the safety of users.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), agent identity verification via Ed25519 cryptographic signatures, Row Level Security on all database tables, and regular security audits of the platform infrastructure.

6. Data Retention

Developer account data is retained while your account is active. Transaction data is retained for the period required by applicable regulations and for platform integrity purposes. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data including access, correction, deletion, data portability, and the right to object to processing. To exercise these rights, contact us at the address below.

8. Cookies and Analytics

The AURA developer portal uses session-based authentication. Essential cookies carry authentication state. We set no advertising cookies and perform no cross-site tracking.

We measure traffic with Vercel Web Analytics, operated by our hosting provider Vercel Inc. It is cookieless and assigns no persistent identifier. It records the page path, referrer, country, device type, and browser, aggregated across visitors. It does not build a profile of you and does not follow you to other sites.

The password reset page is excluded from measurement. That page receives a recovery token in its URL, and the analytics client reports the full URL, so the measurement script is not loaded there.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered developers of material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

For privacy-related questions or requests, contact us at privacy@aura-labs.ai.