Summary: Auraliyx collects and uses your personal data exclusively to provide our AI services for relationships, improve your experience and process payments. We do not sell your data to third parties and you have full control over your information.
1. Information We Collect
1.1 Account Information
- Name and email address (via Google OAuth)
- Google profile information (when authorized)
- Account creation date and time
1.2 Usage Information
- Messages and conversations with our AI Auraliyx
- Interaction history and preferences
- Usage statistics (characters used, frequency of use)
- Access logs and technical data
1.3 Payment Information
- Transaction data via Stripe and Asaas
- Subscription and payment history
- Billing information (processed by payment providers)
1.4 Technical Information
- IP address and approximate location
- Device type and browser
- Cookies and similar technologies
2. How We Use Your Information
2.1 Provision of Services
- Provide personalized responses from Auraliyx's AI
- Keep your chat history
- Manage your account and preferences
- Control usage limits according to your plan
2.2 Improvements and Development
- Improve AI algorithms and response quality
- Develop new features and functionalities
- Perform analytics to improve user experience
2.3 Communication
- Send important notifications about your account
- Communicate changes to terms or policies
- Provide technical support when requested
- Send emails about your use of the service and the plans (for example, a welcome message and a notice that the free limit has run out). Every email has an unsubscribe link. We measure whether the email was opened, so we can stop sending to people who do not read them.
- To choose the language of these emails, the system automatically identifies the language of your chat messages. No person reads the conversations for this.
2.4 Security and Compliance
- Detect and prevent fraud or inappropriate use
- Comply with legal and regulatory obligations
- Protect user rights and security
2.5 Legal bases (LGPD and GDPR)
- Performance of a contract: creating your account, answering in the chat and processing payments.
- Legitimate interest: security, abuse prevention and service improvement, always respecting your rights.
- Consent: analytics and advertising cookies where the law requires it, such as in Europe. You can withdraw it at any time.
- Legal obligation: tax and payment records.
You can also lodge a complaint with the data protection authority in your country (in Brazil, the ANPD).
3. Information Sharing
3.1 Service Providers
We share limited data with:
- OpenAI Messages processed by the GPT-4 AI
- Screenshots and images sent in the chat: Used to generate the reply to that message. The image is sent to the AI provider (OpenAI) to be read. Auraliyx keeps in your conversation only a reduced copy of the image and the text read from it (the transcript), along with your own text, so the conversation keeps its context and you can review what you sent; you can delete the conversation whenever you want.
- Google Firebase Secure data storage
- Stripe/Asaas Payment processing
- Google Analytics and Google Ads: Measuring visits, where you came from (for example, social media or search) and steps such as sign-up, chat use and payment
- Cloudflare, ipinfo.io and ipapi.co: Your browser queries one of these services to identify your country and show the right currency. They receive your IP address.
- Google Fonts and external libraries (CDN): They provide fonts and page components. When loading them, your browser sends your IP address to these services.
- Infrastructure Providers Hosting and technical services
3.2 Legal Obligations
We may disclose information when required by:
- Court order or legal process
- Competent government authorities
- Protection of rights, property or safety
3.3 Business Transfer
In the event of a merger, acquisition or sale of assets, your information may be transferred as part of the company's assets.
5. Your Rights
You have the following rights over your personal data:
5.1 Access and Portability
- Request a copy of all your data
- Export your chat history
- Receive data in a structured format
5.2 Correction and Update
- Correct incorrect information
- Update outdated data
- Modify account preferences
5.3 Deletion
- Delete your account and all associated data
- Remove specific conversations
- Request erasure of specific data
5.4 Restriction of Processing
- Restrict the use of your data
- Temporarily suspend processing
- Object to the use of information
6. Cookies and Tracking Technologies
We use essential cookies to:
- Keep you signed in to your account
- Remember your preferences
- Ensure session security
- Improve website performance
You can manage cookies through your browser settings, but this may affect some functionality of the service.
6.1 Measurement and analytics
We use Google Analytics to understand how the site is used: where you came from, the pages you visit and steps such as sign-up, chat use, plan limit and payment. This data is linked to an internal code for your account, never to your name or email. In Europe, these cookies are only enabled if you accept them in the notice. You can change your choice at any time with the button below.
7. International Transfers
Your data may be processed on servers located in different countries, including:
- United States (Google Firebase, OpenAI)
- Brazil (Asaas, local servers)
- European Union (backup infrastructure)
We guarantee that all transfers follow international data protection standards.
8. Minors
Our services are not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor, we will take steps to delete that information immediately.
9. Changes to this Policy
We may update this Privacy Policy periodically. When this happens:
- We will notify you via email about significant changes
- We will publish the new version on our website
- We will indicate the date of the last update
- Your continued use will constitute acceptance of the changes
Last update: January 2025
Sections added in: October 2026
This policy is effective from the date of its publication.
IP Geolocation by DB-IP