Legal

Privacy Policy

Last updated: May 5, 2026

The short version

Aurora is open source. If you self-host, we never see any of your data — full stop. If you use the hosted version, we only collect what's strictly necessary to run the service and never sell or share your data with third parties.

What we collect (hosted version)

  • Account info — email and password hash for authentication.
  • Workspace data — projects, tasks, notes, and files you create. Stored in our managed database with row-level security.
  • Usage telemetry — anonymous, aggregated metrics to improve the product (page views, feature usage). No content is logged.

AI processing

AI features call OpenRouter using your own API key. Your prompts and content go directly to OpenRouter under their privacy terms. We do not store, log, or train on your prompts.

Subprocessors

  • Supabase — database, auth, file storage
  • Cloudflare — edge hosting and CDN
  • OpenRouter — AI inference (BYO key)

Your rights

You can export or delete your data anytime from Settings → Data. Account deletion is permanent and irreversible.

Contact

Questions? Email hello@aura.app or open an issue on GitHub.