AI Executive Assistant — Privacy Policy

Draft under legal review. This policy is published for transparency while counsel review is completed and may change.

This Privacy Policy explains what information Aura (operated by SAIN Industries LLC) collects when you use the Aura services, how it is used, who processes it, how long it is kept, and how you can request deletion. It should be read together with the Terms of Service, which govern data ownership: your data remains yours.

1. Information We Collect

We collect only what the Services need to work:

  • Account identifiers: your phone number and/or email address, verified through one-time codes at sign-in, plus a display name and optional profile photo.
  • Conversation content: the messages you exchange with your assistant over iMessage/SMS, web chat, voice, and other connected channels, including media you send, so the assistant can respond and remember context you ask it to keep.
  • Connected account data: when you connect tools such as Gmail, Google Calendar, Slack, or others, the assistant accesses that data through the scopes you grant, solely to perform the work you ask for. Integration credentials are encrypted before storage.
  • Billing information: handled by our payment processor. Aura does not store full card numbers.
  • Usage and diagnostic data: product analytics, audit logs of assistant actions, and technical logs used for security, reliability, and support.

2. How We Use Information

  • To provide, personalize, and improve the assistant's work for you;
  • To send the messages, briefings, and notifications you have asked for;
  • To process payments, prevent abuse, and keep the Services secure;
  • To comply with legal obligations.

Aura does not sell your personal information, and does not use Customer Data to train foundation models. See the Terms of Service section on model training for details.

3. Service Providers Who Process Data

Aura runs on established infrastructure providers. Each processes data under its own terms and, where applicable, data-processing agreements:

  • Vercel (application hosting and serverless compute);
  • Neon (database hosting for account, conversation, and audit records);
  • Privy (sign-in and identity verification for phone and email one-time codes);
  • Stripe (payments, subscriptions, and billing records);
  • Sendblue (iMessage and SMS delivery, including message content in transit);
  • Composio (managed connections to third-party tools you choose to link);
  • AI model providers(including Anthropic, AWS Bedrock, and OpenRouter-routed models) that process conversation content to generate the assistant's responses;
  • Analytics and error-monitoring services used to keep the product reliable.

4. Retention

We keep personal data for as long as reasonably necessary to provide the Services, maintain security and billing records, comply with legal obligations, resolve disputes, and enforce our Terms. Conversation history is retained so your assistant can keep context; you can ask your assistant to forget specific memories at any time. Billing records, security logs, and provider-side records may be retained on longer schedules where required.

5. Your Choices and Rights

  • You can disconnect any integration at any time from the Integrations page;
  • You can ask your assistant to delete specific memories it holds;
  • You can request deletion of your account and associated data by emailing business@sainindustries.com. We will process requests in accordance with applicable law; some records (billing, security, provider-side) may be retained or deleted on a different schedule;
  • Depending on where you live, you may have additional rights to access, correct, or port your data. Contact us at the address above to exercise them.

6. Security

We use encrypted transport for application traffic, provider-managed encryption at rest where supported, encryption of integration credentials before storage, and authenticated access controls with audit logging for sensitive actions. See our security page for more.

7. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them.

8. Changes and Contact

We will post any changes to this policy on this page. Questions, concerns, or requests: SAIN Industries LLC, email business@sainindustries.com.