Privacy Policy.

This policy applies to visitors to aurygine.com and to people who hold an Aurygine account.

Where you enter information about your own company — customers, staff, suppliers, finances — you decide what goes in and why. Aurygine stores and processes it on your instruction. You remain responsible for having a lawful basis for the information you put in about other people.

Account details. Your email address, sign-in identity and, where you provide one, your name and profile details.

Company records. The companies you create and everything you build inside them: documents, decisions, tasks, notes, memory entries, plans and uploaded files.

Conversations with Aury. Messages you exchange with Aury are stored against your company so it can remember context between sessions. Where you use voice, the recording or transcript you supply and the takeaways drawn from it are stored as part of that record.

Operating data you choose to enter. Depending on the parts of the product you use, this can include customer and contact records, invoices, payments, expenses, payroll and people records, inventory and schedules.

Connected services. Where you connect an outside service, we store the connection and the data that service returns to your company, within the permissions you granted.

Product usage. Events describing how the product is used — pages opened, features run, errors encountered — recorded against your account so we can see what is working and fix what is not.

Website analytics. Only if you accept analytics cookies. See Cookies.

To provide the product: to run your account, keep your company records available, and let Aury answer questions using your company's own history rather than guesswork.

To keep the service safe and working: authentication, permission checks, audit records of significant actions, diagnosing faults.

To communicate with you about your account and the things you asked for.

To improve the product, using usage data. We do not sell, rent or trade personal information, and we do not use your company's content to train third-party models for anyone else's benefit.

Aury drafts, summarises, extracts and suggests. To do that, the relevant parts of your company record are sent to a model provider that processes them and returns a result.

Aury's output is a proposal. Nothing it prepares is applied to your company until you approve it, and no message is sent outside Aurygine on your behalf without you confirming it first.

We use a small number of service providers to run Aurygine: hosted infrastructure for the application, database, authentication and file storage; a model provider for the work described above; an email delivery service for account and notification email; and, subject to your consent, Google Analytics for website measurement.

Each acts on our instruction and only for the purpose above. An itemised list of each named provider will be published here alongside the entity details when Aurygine is incorporated.

Your company records are kept for as long as your account exists, because they are the product — a company's memory is worthless if it is quietly discarded.

Delete a company and its records are removed with it. Ask us to close your account and we remove your account and the companies you own, other than anything we are required to retain for legal, accounting or tax purposes.

Specific retention periods by category are not yet published; they will be set out here once they are enforced end to end in the product.

You may ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. You may withdraw consent to analytics at any time from the Cookies page.

You can do much of this yourself. Signed in, open Settings → Your data to export what we hold about you, or to request that your account be closed and its data removed.

Otherwise, write to hello@aurygine.com and we will handle it. We aim to respond within 30 days.

Access to company data is controlled at the database level, not only in the interface: records are scoped to the company they belong to, and destructive or administrative actions require the appropriate permission. Significant actions are recorded in an audit trail.

No system is beyond compromise. If a breach affects your personal data, we will tell you and any relevant authority as required by law.

Aurygine is a business product and is not intended for children.

Privacy questions and requests: hello@aurygine.com. Anything else: hello@aurygine.com.

Aurygine is a founder-operated product in its founding beta and is not yet incorporated, so there is no separate corporate data protection officer. Privacy requests are handled directly by the founder at hello@aurygine.com.