Privacy Policy

When you create an account, we collect:

• Email address
• Display name
• Firebase user identifier (UID)
• Authentication provider (Google or email)

When you create executive profiles within the Service, the following data is collected and stored:

• Full name, email address, job title, and company name
• Phone number and timezone
• Workday start and end times
• Associated Google account email address(es)
• Naming prefix preferences

When you authorize Google Workspace integration, we access the following data through Google APIs using OAuth 2.0:

When you authorize Slack integration, we access:

• Authenticated user ID and display name
• Team/workspace name
• User presence status (online, away, do not disturb)
• Conversation and channel names
• Message history from conversations you have access to
• User display names (cached locally, up to 200 entries)

When you explicitly enable Apple Contacts integration, we access contact names, email addresses, and phone numbers.

The Service collects and computes the following email analytics locally on your device:

• Email sent, received, and reply counts
• Average response times
• Communication volume by hour and day of week
• Top senders and recipients by frequency
• Up to 1,000 email analytics events stored locally

When read receipt tracking is enabled, the Service collects:

• Tracking identifier (UUID)
• Associated email message and thread identifiers
• Recipient email address(es) and email subject line
• Sent timestamp, open count, and open timestamps
• Delivery status (pending, sent, failed, opened)

The Service analyzes your sent emails to extract writing style characteristics, including formality level, tone patterns, common phrases, sentence structure, and average sentence and paragraph length.

When you use travel features, the Service processes flight numbers, travel dates, passport country codes, destination country codes, and airport codes (IATA). This data is sent to third-party travel APIs as anonymous queries without personally identifiable information.

The Service stores your preferences locally, including application theme, default event duration, read receipt preferences, smart send preferences, undo send delay, availability time blocks, budget categories, and split inbox rules.

When you interact with the AI assistant, the Service processes your text queries, calendar event context for the current 7-day window, email metadata, Slack conversation summaries, and extracted topics of interest.

When you connect with another Auri user, calendar event data, executive profile names, and connection status are shared between connected accounts.

Not shared through A2A: email content or metadata, Slack messages, contact lists, writing style profiles, or user preferences.

When read receipt tracking is enabled, a tracking pixel is embedded in outgoing emails. The tracking pixel URL contains only a UUID-based tracking identifier and does not expose your personal information to the recipient.

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Auri, our users, or others.

We retain your data for as long as your account is active and as necessary to provide the Service.

Locally stored data persists until you uninstall the application or manually clear the data. Specific retention periods include: email analytics (rolling window of up to 1,000 events), contact/presence cache (in-memory only, cleared on restart), travel advisory cache (1-hour TTL), news article cache (30-minute TTL), and calendar/email cache (refreshed each session).

Cloud-stored data in Firebase Firestore is retained until you manually delete it, request account deletion, or we delete inactive accounts.

Email tracking records are retained indefinitely unless you request deletion.

Upon account deletion, we will delete your assistant profile, all executive profiles, calendar sync data, email tracking records, A2A connection data, and revoke stored OAuth refresh tokens. Local data must be removed by uninstalling the application.

If you are a California resident, you have additional rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. No opt-out is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at neelksharma13@gmail.com.

If you are located in the EEA, you have additional rights under the GDPR:

• Legal Basis: We process data based on consent (OAuth), contractual necessity, and legitimate interests.
• Data Protection Rights: Access, rectification, erasure, restriction, portability, and objection to processing.
• DPO Contact: neelksharma13@gmail.com
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

Residents of the United Kingdom have equivalent rights under the UK GDPR. The provisions of Section 15.2 apply.