Aurora Privacy Policy

This Policy applies to data processed through aurorafacial.com, upload links, admin-supported communications, and related service operations.

Aurora collects personal data you provide directly, data generated during service delivery, and technical usage data.

• Identity/contact data: name, email, phone, country, preferred language.
• Service data: selected plan, request status, internal timeline events, communication logs.
• Photo/media data: uploaded facial images, derived quality flags, and dossier-related assets.
• Payment-related data: payment status and transaction references from payment providers.
• Technical data: IP-derived metadata, browser/device attributes, event analytics, and security/rate-limit logs.

Aurora uses personal data to deliver requested services, operate the platform securely, communicate service updates, and improve operational quality.

• Process requests and deliver dossier services.
• Validate and review uploaded photos.
• Generate and deliver reports, documents, and related files.
• Send transactional communications (confirmation, upload instructions, status, delivery).
• Detect abuse, enforce rate limits, and maintain security logs.
• Measure funnel performance and product usage through analytics.

Depending on your location, Aurora processes data based on one or more legal bases: contract performance, consent, legitimate interests, and legal obligations.

Photo submission and optional simulation workflows rely on your explicit action and consent within the service context.

Aurora shares data only when necessary to operate services, under contractual and security controls.

• Hosting/infrastructure: Vercel.
• Database and storage: Supabase.
• Rate limiting/cache: Upstash Redis.
• Transactional email: Postmark.
• Messaging services: Twilio (when enabled).
• Analytics/tag management: Google Tag Manager, Google Analytics 4, and Vercel Analytics.
• Payments: Stripe or other payment processors used by Aurora.

Your data may be processed in countries other than your own, where Aurora or its providers operate.

Aurora applies reasonable safeguards for cross-border processing as required by applicable law.

Aurora retains personal data only for as long as necessary for service delivery, legal compliance, dispute resolution, fraud prevention, and operational auditing.

Retention windows may vary by data type and legal obligations.

Aurora applies technical and organizational safeguards, including access controls, signed URLs for private assets, tokenized links, and audit trails.

No internet transmission or storage system is absolutely secure; therefore absolute security cannot be guaranteed.

Facial photos may reveal sensitive characteristics. Aurora limits internal access to authorized personnel and service workflows.

Uploaded photos are processed for service execution and are not sold.

Aurora does not publish identifiable client images without separate explicit consent.

Aurora uses analytics and measurement tools to understand traffic, conversion flow, and service performance.

You may control cookies and tracking preferences through browser settings or platform tools where available.

Subject to applicable law, you may request access, correction, deletion, portability, objection, or restriction of your data.

You may also withdraw consent for specific processing activities, recognizing that service delivery may be impacted.

To submit a request, contact contact@aurorafacial.com.

Aurora services are not directed to children in violation of applicable law. If you believe child data was submitted in error, contact Aurora for removal review.

Aurora may update this Policy to reflect legal, technical, or product changes. The latest version is posted on this page.

For privacy requests or concerns, contact: contact@aurorafacial.com.