Privacy Policy
Last updated: August 2026
This Privacy Policy explains what data Aurora Prime Assets ("Aurora") collects, why, and what rights you have over it — including rights guaranteed by the EU's General Data Protection Regulation (GDPR) where applicable.
1. Data we collect
Account data: name, email, password (stored encrypted, never in plain text).
Company client data: company name, registration document, logo, registered asset data (documents, photos, valuations).
Transaction data: amount, currency, order status — card data itself never passes through our servers; it stays with the payment provider.
Technical data: IP address, audit logs of sensitive actions (role changes, compliance approvals), access timestamps.
2. Why we collect it (legal basis)
Performance of contract: to provide the service itself (create your account, process payment, show your assets).
Legitimate interest: platform security, fraud prevention, audit logging.
Consent: when you accept the Terms of Use and this Policy at sign-up.
3. Who we share data with
Payment processing: Stripe, NOWPayments (crypto).
Transactional email delivery: Resend.
Hosting and database: Railway, Vercel, Supabase.
We never sell personal data to third parties for advertising purposes.
4. International data transfers
Some of the providers above may process data outside your home country. In those cases, we require the provider to maintain data protection standards equivalent to those required by law.
5. How long we keep it
We retain account data while the account is active, and for an additional period after closure when required by law (for example, tax records of transactions).
6. Your rights
You have the right to: access the data we hold about you, correct inaccurate data, request deletion of your account and associated data, request a portable copy of your data, and object to certain uses.
To exercise any of these rights, contact us through the platform support channel.
7. Cookies and local storage
Aurora uses browser local storage to keep you logged in — we don't use third-party advertising tracking cookies.
8. Security
Passwords are stored with cryptographic hashing (never in plain text). Asset documents are kept in private storage, accessed only via a temporary, signed URL.
9. Children
Aurora is not intended for anyone under 18. We do not knowingly collect data from minors.
10. Changes to this policy
This policy may be updated periodically. Material changes will be communicated by email or notice on the platform.
11. Contact
Questions about privacy and personal data can be sent through the platform support channel.