Privacy Policy

1. What Data We Collect

We collect the following types of data:

Account Information

• Name – Your full name or display name
• Email address – Used for account creation and communication
• Company name – Your organization's name
• Password – Stored securely using industry-standard hashing (argon2)

Customer Data (CSV Uploads)

When you upload customer datasets via CSV, we collect and process the following types of business data:

• Customer IDs and account identifiers
• Revenue metrics (MRR, ARR, contract values)
• Usage statistics (active users, feature adoption)
• Account metadata (renewal dates, plan types, segments)
• Business contact information (account owner names, CS assignments)
• Support and satisfaction metrics (NPS, CSAT, ticket counts)

Automatically Collected Data

• Login timestamps and session data
• Browser type and operating system
• IP address for security purposes
• Usage analytics (feature usage, page views)

2. How We Use Your Data

We use collected data for the following purposes:

• Account creation and authentication – To create and manage your user account
• Service delivery – To provide churn prediction, customer health scoring, and expansion opportunity detection
• Product analytics – To understand how users interact with Aoria and which features are most valuable
• Product improvement – To improve our algorithms, user experience, and platform capabilities
• Communication – To send product updates, security alerts, and account notifications
• Support – To respond to questions and technical issues

3. Where Data is Stored

Your data is stored securely using the following infrastructure:

• Database – PostgreSQL database hosted on Neon (neon.tech)
• Geographic location – Data is stored in secure data centers (location depends on Neon's infrastructure)
• Encryption – Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption

Third-party processors

Infrastructure providers (such as Neon and hosting services) may process your data to provide their services. These providers are contractually obligated to protect your data and only process it as directed by us.

4. Data Sharing

We do not sell your data. We may share data only in the following circumstances:

• Service providers – With infrastructure and hosting providers necessary to operate Aoria
• Legal requirements – When required by law, court order, or government regulation
• Business transfers – In the event of a merger, acquisition, or sale of assets

We will never share your customer data with third parties for marketing purposes.

5. Your Rights

You have the following rights regarding your data:

• Access – Request a copy of your personal data
• Correction – Update inaccurate or incomplete data
• Deletion – Request deletion of your account and personal data
• Data portability – Request your data in a machine-readable format
• Object to processing – Opt out of certain data processing activities

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services.

If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Security

We implement industry-standard security measures to protect your data, including:

• Password hashing using argon2
• TLS/SSL encryption for data in transit
• Regular security audits and updates
• Access controls and authentication

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage patterns.

You can disable cookies in your browser settings, but this may affect functionality.

9. Children's Privacy

Aoria is not intended for users under the age of 16. We do not knowingly collect data from children.

If you believe we have collected data from a child, please contact us immediately.

10. How to Request Data Deletion

You can delete your account and personal data in two ways:

• Self-service – Go to Settings and click "Delete Account"
• Email request – Send a deletion request to privacy@aoria.io

We will process deletion requests within 30 days.

11. Changes to This Policy

We may update this Privacy Policy as Aoria evolves.

We will notify users of significant changes via email or through notices within the application.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle data, please contact us:

Privacy Requests
Email: privacy@aoria.io