Aurlume — Privacy Policy (DRAFT)
What we collect
- Account information. Your email address and account credentials when you sign up. Authentication is handled through Supabase Auth; we store your user ID, profile, and credit balance in our database.
- Photos you upload. Images of jewellery (or other products) that you submit for processing, stored in private, access-controlled storage buckets. Uploaded photos are never public by default; they are delivered back to you through short-lived signed links.
- Generated images. The asset sets our service creates from your photos (hero, lifestyle, macro, and social images), stored the same way as uploads.
- Job and credit records. A ledger of jobs, credit grants, and credit use, kept so your balance is always auditable.
- Payment records. If you buy a plan or credit pack, payment is processed by Stripe. We receive and store order records (plan, amount, status) — your card number never touches our servers; Stripe handles it under its own privacy policy.
- Waitlist emails. If you join the waitlist on aurlume.app, we store the email address you submit for launch notifications.
- Basic technical data. Server logs (IP address, request times, error data) kept for security and debugging.
How your photos are processed — please read
To create your asset set, your uploaded photo is sent to Google's Gemini AI models for image generation. That means your image is processed on Google's systems under Google's API terms. Do not upload photos you do not own or have the right to use, and do not upload images containing personal information (faces of identifiable people are not needed for this service).
How we use information
- To provide the service: run generation jobs, maintain your credit balance, and deliver your asset sets.
- To operate accounts, payments, and customer support.
- To send service emails (account, receipts, important changes) and, if you joined the waitlist, launch notifications.
- To keep the service secure and fix problems.
We do not sell personal information. We do not use your uploaded photos to train our own models, and we do not use them for any other customer's jobs.
Who processes data for us
- Supabase — database, authentication, and photo storage.
- Google (Gemini API) — AI image generation, as described above.
- Stripe — payment processing.
- Fly.io — application hosting.
- Cloudflare — website hosting and waitlist storage.
Each processor receives only what it needs to perform its function.
Connected social accounts (optional add-on)
If you connect a social account (such as Instagram or Facebook) to Aurlume's social add-on, we store the access tokens that platform issues, your account name and ID, and the permissions you approve — we never see or store your social account password. We use that access only to do what you direct in the add-on:
- publish content you create or schedule in Aurlume to your connected accounts;
- read comments and messages on your connected accounts so the reply features can work, and — only where you have set up FAQ auto-replies — send those replies in your name;
- show you the status of your scheduled posts and replies.
You can disconnect a social account at any time inside Aurlume (which deletes our stored tokens) or revoke Aurlume's access from your platform settings; after revocation we can no longer publish or read on that account. Content already published stays on your accounts under your control.
Retention and deletion
Account, photo, and job data are kept while your account is active. You may request deletion of your account and associated photos at any time by emailing hello@aurlume.app; we will delete uploads, generated images, and profile data, retaining only records we must keep for accounting or legal reasons (e.g., payment records).
Your choices
- Request a copy, correction, or deletion of your personal data: hello@aurlume.app.
- Unsubscribe from waitlist/marketing email via the link in any such email or by contacting us.
- Depending on where you live (e.g., California, the EU/UK), you may have additional rights under local law; contact us and we will honor applicable rights.
Children
Aurlume is a business tool for sellers and is not directed at children under 16. We do not knowingly collect data from children.
Changes
We will post changes to this policy on this page and update the effective date. Material changes will be announced by email to account holders.
Contact
Questions about this policy: hello@aurlume.app