Privacy Policy

Data Ownership

Your client lists, files, contracts, and revenue data belong 100% to you. AuraSync processes this data solely to operate your workspace and client portals.

We never sell, broker, or train AI models on your workspace data or your clients' data.

What We Collect

We collect the minimum required to run the service: account email, workspace configuration, portal activity (intake responses, signature timestamps and IP addresses for agreement audit trails), and billing events from our payment processor.

Payment card details are handled directly by Stripe and never touch AuraSync servers.

Your Clients' Data

When your clients use your portal, they are your clients. Their intake responses, signatures, and uploaded context are stored inside your workspace and visible only to you and the client via their magic link.

You are responsible for having a lawful basis to collect your clients' information through your portal.

Retention & Export

You may export all contracts, files, and portal data in a single ZIP archive at any time from Settings.

After cancellation, workspaces are retained for 30 days for export, then permanently deleted.

Security

Data is encrypted in transit (TLS) and at rest. Access is scoped per-workspace using row-level security policies, and signature events record IP and timestamp for audit purposes.