Legal
Privacy Policy
Last updated: May 5, 2026
The short version
Aurora is open source. If you self-host, we never see any of your data — full stop. If you use the hosted version, we only collect what's strictly necessary to run the service and never sell or share your data with third parties.
What we collect (hosted version)
- Account info — email and password hash for authentication.
- Workspace data — projects, tasks, notes, and files you create. Stored in our managed database with row-level security.
- Usage telemetry — anonymous, aggregated metrics to improve the product (page views, feature usage). No content is logged.
AI processing
AI features call OpenRouter using your own API key. Your prompts and content go directly to OpenRouter under their privacy terms. We do not store, log, or train on your prompts.
Subprocessors
- Supabase — database, auth, file storage
- Cloudflare — edge hosting and CDN
- OpenRouter — AI inference (BYO key)
Your rights
You can export or delete your data anytime from Settings → Data. Account deletion is permanent and irreversible.
Contact
Questions? Email hello@aura.app or open an issue on GitHub.
