Privacy Policy

1. Introduction

Aurora Labs Ltd. (“Aurora Labs”, “we”, “us”, or “our”) operates the LOCI Analytics service (“Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and (if applicable) company name. Passwords are hashed and never stored in plaintext.

Usage & Telemetry Data: To provide analytics features, we collect data about your AI coding agent sessions, including token usage, interaction logs, execution traces, cost metrics, and timing information. This data is associated with your account and is used to power the Service.

Payment Information: Payments are processed by Paddle.com Market Ltd. We do not store your payment card details. Paddle may share transaction identifiers, subscription status, and billing history with us to manage your account.

Log & Device Data: We automatically collect IP addresses, browser type, operating system, referring URLs, and pages viewed. This information is used for security monitoring, debugging, and service improvement.

Cookies: We use session cookies and local storage to maintain your authentication state and preferences (such as theme). We do not use third-party advertising cookies.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account;
• Provide, operate, and improve the Service;
• Process transactions and manage your subscription;
• Send transactional emails (account verification, password reset, billing receipts);
• Detect, investigate, and prevent fraudulent or unauthorised activity;
• Comply with legal obligations;
• Respond to your support requests.

We do not sell your personal data to third parties. We do not use your agent telemetry data for any purpose other than providing the Service to you.

4. Data Sharing & Third Parties

We may share your information with:

• Paddle.com Market Ltd. — as Merchant of Record and payment processor;
• Amazon Web Services (AWS) — for infrastructure hosting, authentication (Cognito), and email delivery (SES). Data may be stored in AWS regions as disclosed at account creation;
• Law enforcement or regulators — where required by applicable law, court order, or governmental authority;
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy.

5. Data Retention

We retain your account and usage data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you;
• Rectification: request correction of inaccurate or incomplete data;
• Erasure: request deletion of your data (subject to legal retention obligations);
• Restriction: request that we limit processing of your data;
• Portability: receive your data in a structured, machine-readable format;
• Objection: object to processing based on legitimate interests;
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@auroralabs.com. We will respond within 30 days (or as required by applicable law).

7. Security

We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted data transmission (TLS), hashed password storage, and access controls. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that any such transfers are made subject to appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms recognised under applicable data protection law.

9. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact

For privacy-related enquiries or to exercise your rights, please contact:
Aurora Labs Ltd.
privacy@auroralabs.com