Privacy Policy

Effective date: May 26, 2026 · Last updated: May 26, 2026

AuraFlux ("AuraFlux," "we," "our," or "us") operates the platform available at app.auraflux.co and related services. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

1.1 Information you provide directly

Account information: name, email address, and password (managed via Clerk).
Billing information: payment card details processed by Stripe. AuraFlux does not store raw card numbers.
Content you upload: video files, images, scripts, and other media.
Communications: messages sent to our support team.

1.2 Information collected automatically

Usage data: pages visited, features used, job submissions, error logs, and timestamps.
Device and browser data: IP address, browser type, OS, and referring URLs.
Cookies: see our Cookie Policy.
Performance data: collected by New Relic for application monitoring.

1.3 Third-party platform connections

When you connect a platform account (YouTube, Twitch, Kick, TikTok, Instagram) we receive and store OAuth tokens (encrypted), platform username/user ID, and authorized scopes. We do not receive or store your platform passwords.

2. How We Use Your Information

To provide the Service
To publish on your behalf using connected platform tokens you have authorized
To process payments via Stripe
To communicate with you
To improve the Service
To enforce our policies
To comply with law

3. How We Share Your Information

We do not sell your personal data. Sub-processors include: Clerk (auth), Stripe (billing), Upload-Post (OAuth/publishing), Cloudflare (storage/CDN), Render (hosting), New Relic (monitoring), Google/Gemini (AI), ElevenLabs (TTS), HeyGen (avatar video, Managed plan).

4. YouTube API Services

AuraFlux uses the YouTube API Services to source clips and publish videos on your behalf. By connecting your YouTube account you authorize the listed scopes. You can revoke access at any time via your Google security settings. Our use is also governed by the YouTube Terms of Service and Google Privacy Policy.

5. Data Storage and Security

Data is stored in the United States (Render infrastructure, Cloudflare R2). We use TLS in transit and AES-256-GCM encryption for OAuth tokens at rest. Contact support@auraflux.co if you believe your account has been compromised.

6. Data Retention

Account data: 90 days after deletion
Job outputs: 30 days
OAuth tokens: until disconnected or account deleted
Billing records: 7 years
Usage logs: 90 days

7. Your Rights

All users may request access, correction, or deletion of their data. California residents have CCPA rights. EEA/UK residents have GDPR rights. Contact support@auraflux.co to exercise any of these rights.

8. Children's Privacy

The Service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect their data.

9. Changes to This Policy

We will notify you of material changes at least 14 days before they take effect.

10. Contact Us

AuraFlux
Email: support@auraflux.co
Website: app.auraflux.co