1. Scope
This policy explains how AURA handles information when you browse the website, complete AURA Basic or AURA Full, purchase access, view a result or contact us.
2. Assessment information
We may process item responses, raw scores, calculated domain scores, overall scores, percentiles, session identifiers, payment status and timestamps. AURA does not require your name in order to calculate an assessment result unless you separately provide identifying information.
3. Technical information
Hosting and security infrastructure can generate information such as request logs, browser/device data and IP-derived security signals. We use this information to operate the service, diagnose faults, protect payment and assessment flows, and reduce abuse.
4. Payments
AURA Full payments are processed through Stripe. AURA does not receive or store your full payment-card number. Stripe may process payment, fraud-prevention and transaction information under its own privacy terms.
5. Why we process information
Assessment data is used to deliver and score the requested assessment, display results, maintain legitimate access to paid reports, investigate technical problems and improve service quality. Transaction records may also be processed for fraud prevention, accounting and legal obligations.
6. Legal bases
Where UK data-protection law applies, processing necessary to provide an assessment or paid report is generally carried out because it is necessary to perform our contract with you. Security and service improvement may rely on legitimate interests where appropriate, and records required by law are processed to meet legal obligations.
7. Providers
AURA currently uses Vercel for hosting and deployment, Supabase for database infrastructure and Stripe for payments. These providers may process information in order to supply those services.
8. Browser storage
The assessment interface can use local storage to preserve in-progress answers and elapsed time if you refresh or close the page. This progress information remains on your device until the assessment is completed, replaced or cleared.
9. Retention
Assessment sessions are currently intended to be retained for 24 months, unless a different period is required for security, disputes, research-quality controls or legal obligations. Payment and transaction records may be retained as required for accounting, tax and fraud-prevention obligations.
10. International transfers
Some providers may process information outside the United Kingdom. Where required, appropriate transfer mechanisms made available by those providers are used.
11. Your rights
Depending on the circumstances, you may have rights to access, correct or erase personal data, restrict or object to certain processing, and receive data in a portable format. You may also complain to the UK Information Commissioner's Office. Because AURA sessions can be pseudonymous, we may need enough information to identify and verify the relevant record before acting on a request.
12. Security
AURA uses restricted server credentials, server-side scoring and payment verification to reduce unauthorised access. No internet service can guarantee absolute security. Result links should not be shared publicly if you do not want other people to see them.
13. Children
AURA is not currently designed as a service specifically directed at children. If that changes, the product flow and privacy documentation should be reviewed before launch to that audience.
14. Contact and changes
Material changes to this policy will be reflected on this page. Privacy questions or rights requests can be sent to auraiq123@outlook.com.