Privacy Policy

1. Summary

This Privacy Policy describes how Aura720 (the "Application") collects, uses and protects personal data when you use the services provided through the Application. It also explains the rights of users whose data is processed, in particular users located in the European Economic Area and the United Kingdom.

By using the Application, you acknowledge that your personal data will be processed in accordance with this Privacy Policy and applicable data protection laws.

2. Personal data protection

The Application is designed with privacy and data protection in mind. Appropriate technical and organisational measures are implemented to safeguard personal data against unauthorised access, loss, alteration or disclosure.

Personal data is only processed to the extent necessary to provide and improve the services, comply with legal obligations and protect legitimate interests, in accordance with applicable data protection regulations such as the EU General Data Protection Regulation (GDPR) and equivalent UK legislation.

3. Types of data collected

Depending on how you use the Application, the following categories of personal data may be collected and processed:

• Account data: such as your name, email address, authentication identifiers and other information you provide when creating or managing your account.
• Usage data: such as log information, device and browser information, IP address, time zone, language preferences, pages and features accessed, and interactions with the Application.
• Data from connected platforms: content and metadata from third-party platforms that you connect to the Application (for example Google Maps, Instagram, TikTok or TripAdvisor), such as reviews, comments, ratings, usernames, timestamps and public profile information.
• Content you provide: information you submit through the Application, including responses to reviews, notes, configuration settings and preferences.
• Cookies and similar technologies: information collected through cookies and similar tracking technologies used to enable core functionality, remember your preferences and analyse use of the Application.

4. Mode and place of processing the data

Personal data is processed using computers and IT-enabled tools following organisational procedures and practices strictly related to the purposes indicated in this Privacy Policy.

Data may be processed in different locations where the parties involved in the processing are located. This may involve transfers of personal data to countries outside the European Economic Area and the United Kingdom. In such cases, appropriate safeguards are implemented, such as standard contractual clauses or equivalent legal mechanisms, to ensure an adequate level of protection.

Access to personal data is limited to persons who need such access for the purposes described in this Privacy Policy and who are bound by confidentiality obligations.

5. Legal bases and purposes of processing

Personal data is processed on one or more of the following legal bases:

• your consent, where required;
• the performance of a contract and the provision of the services you request;
• compliance with legal obligations; and/or legitimate interests pursued in operating, protecting and improving the Application, provided that such interests are not overridden by your rights and interests.

In particular, data may be processed in order to:

• provide, maintain and secure the Application;
• connect to and retrieve reviews and related content from supported third-party platforms;
• perform AI-powered analysis, insights and reporting on your connected review data;
• manage your account, authentication and user preferences;
• communicate with you about the service, security, updates or changes to this Privacy Policy and the Terms;
• prevent misuse, fraud and security incidents, and enforce applicable terms and policies.

6. Data retention

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected, including providing the services, complying with legal, accounting or reporting obligations and resolving disputes. When data is no longer necessary, it will be securely deleted, anonymised or aggregated.

7. Data sharing and third parties

Personal data may be shared with selected third parties that provide infrastructure, hosting, analytics, communication or other services necessary to operate the Application. These providers process personal data only on documented instructions and are bound by appropriate data protection obligations.

Where you choose to connect third-party platforms (such as Google Maps, Instagram, TikTok or TripAdvisor), data exchanged with those platforms is also subject to their respective privacy policies. You are encouraged to review the privacy information of those services.

Personal data may also be disclosed when required by law, in response to valid legal requests from public authorities, or to protect rights, safety or property related to the Application.

8. Security measures

Reasonable technical and organisational measures are implemented to protect personal data, including encryption, access controls and monitoring. However, no method of transmission over the internet or electronic storage is completely secure, and therefore absolute security cannot be guaranteed.

9. The rights of users (EU/UK)

Subject to applicable law, users located in the European Economic Area and the United Kingdom have, in particular, the following rights in relation to their personal data:

• the right to access their personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure of personal data in certain cases;
• the right to restriction of processing in certain circumstances;
• the right to data portability, where applicable, to receive their data in a structured, commonly used and machine-readable format and to transmit it to another controller;
• the right to object to processing based on legitimate interests, and to object at any time to processing for direct marketing purposes;
• where processing is based on consent, the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Users also have the right to lodge a complaint with a competent data protection authority if they consider that their rights have been infringed.

10. How to exercise your rights and contact

To exercise any of the rights described above or to ask questions about this Privacy Policy or the processing of personal data in connection with the Application, you can use the contact details provided within the Application or in the related documentation.

When making a request, you may be asked to provide information necessary to verify your identity before your request can be processed.

11. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal, technical or business developments. When changes are made, the "Last updated" date at the top of the policy will be revised. Continued use of the Application after the publication of an updated Privacy Policy signifies acceptance of the changes.