Privacy Policy

We collect only what we need to run the Service:

• Account data: your email address, username, display name, and — for email sign-ups — a securely hashed password (we never store your password in plain text).
• Sign-in data: if you sign in with Google or Discord, we receive a provider account identifier, your email address, and (for Discord) your avatar, as permitted by that provider.
• Profile content: anything you choose to add — bio, images, audio, links, splash text, colors, and similar settings.
• Connected-channel data: the public identifier and public metrics (such as views and likes) of any external accounts you choose to connect.
• Payment data: when you buy a paid tier, our payment provider processes the transaction. We receive a confirmation and a reference, but not your full card details.
• Usage & technical data: limited information such as your IP address, approximate location, device and browser type, pages viewed, and profile view/like activity, used to operate and secure the Service.

• To provide and operate the Service — creating your account, displaying your profile, counting views and likes, and processing purchases. Legal basis: performance of our contract with you.
• To keep the Service safe and reliable — security, fraud and abuse prevention, moderation, debugging, and enforcing our Terms and Usage Policy. Legal basis: our legitimate interests.
• To communicate with you — for example password-reset emails and important service notices. Legal basis: performance of a contract and our legitimate interests.
• To comply with the law — responding to lawful requests and meeting our legal obligations. Legal basis: legal obligation.
• For anything optional that requires it, we rely on your consent, which you can withdraw at any time.

We use a small number of strictly necessary cookies, primarily to keep you signed in and to secure your session. We do not use advertising or cross-site tracking cookies. Because these cookies are essential to the Service they do not require consent, but you can clear them in your browser at any time (you will be signed out).

We do not sell your personal data. We share it only with the service providers ("processors") that help us run the Service, and only as needed:

• Sign-in providers — Google and Discord — for authentication.
• Payment provider — PayPal — to process purchases.
• Email provider — our transactional email service — to send messages such as password resets.
• Hosting and infrastructure — our server and hosting provider.
• Social platform APIs — when you connect a channel, we request public data from that platform (for example YouTube, X, GitHub, or Reddit).

We may also disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the Service.

Some of our providers are based outside the United Kingdom (for example in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses together with the UK International Data Transfer Agreement.

We keep your personal data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain information to comply with the law, resolve disputes, or enforce our agreements. Residual copies may remain in routine backups for a limited time.

Under UK data-protection law you have the right to access your data; to correct inaccurate data; to have your data erased; to restrict or object to processing; to data portability; and to withdraw consent where we rely on it. To exercise any of these, email support@aurapulse.pro.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk — though we would appreciate the chance to resolve your concern first.

We take reasonable technical and organizational measures to protect your data — for example hashing passwords, serving the site over HTTPS, and limiting who can access personal data. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us at support@aurapulse.pro and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the current version, and we will highlight significant changes here.

AuraPulse is the data controller for your personal data. For any privacy question, or to exercise your rights, contact us at support@aurapulse.pro.