Notice at Collection

1. Collection points covered by this notice

• Website contact, demo, quote, and resource-download forms.
• Self-service signup, checkout, billing, and account-creation screens.
• Trust Center, procurement, security-document, and partnership request forms.
• Support, onboarding, setup, and implementation-intake workflows.
• Reviewer invitation and external-sharing workflows generated by a customer.
• Website and product pages that use cookies, analytics, or similar technologies.

2. Categories of information and primary purposes

• Contact or demo requests: business contact details, company name, job title, message contents, request details, and associated device or analytics information, used to respond, schedule a demo, send requested materials, assess business fit, and maintain request records.
• Resource downloads or newsletter sign-ups: business contact details, company affiliation, content interest, and website analytics or referral data, used to deliver requested resources, administer optional marketing subscriptions, measure interest in content, and improve distribution.
• Self-service signup and checkout: name, company, business email, account owner information, billing contact details, payment or billing tokens from our processor, subscription selection, renewal status, and related transaction data, used to create the account, process purchases, manage recurring billing and taxes, provide receipts and notices, and administer the subscription.
• Account creation and product use: credentials, role assignments, authentication events, profile settings, workspace activity, customer-uploaded materials, configuration data, reviewer invites, and audit logs, used to authenticate users, operate the product, secure the service, retain audit history, enable reviewer access, and provide account administration.
• Onboarding, setup, and support: customer-provided documentation, support requests, messages, screenshots, implementation notes, integration details, and communications data, used to provide setup services, onboard existing documentation, assist with initial assessment completion, configure infrastructure-related workflows, and resolve support issues.
• AI feature usage: prompts, context, outputs, message counts, selected model provider, guardrail events, and related metadata, including customer-supplied API key or provider-selection information where enabled, used to deliver AI-assisted functionality, enforce limits, investigate misuse, secure the service, and administer the selected AI workflow.
• Reviewer invitations and external sharing: invitee name, business email, organization, access and download history, and comments or approvals tied to a shared workflow, used to deliver customer-directed sharing, manage reviewer permissions, produce access logs, and protect against unauthorized use.
• Cookies and similar technologies: IP address, device identifiers, browser information, cookie IDs, session data, pages viewed, and analytics or attribution signals, used to operate the website, maintain security, remember preferences, measure performance, and, where permitted, support optional analytics or marketing.

3. How we disclose the information collected

We may disclose the categories above to service providers and contractors that support hosting, storage, analytics, communications, payment processing, support, and security; to third-party model or infrastructure providers where AI features are used; to customer-selected integrations or external recipients when a customer directs a sharing or export action; and to other parties where required by law or necessary to protect rights, safety, or the service.

Aurora Command does not sell personal information for money. Optional website marketing or attribution technologies, if enabled, may involve disclosures that some privacy laws treat as targeted advertising, sale, or sharing, and those activities remain subject to the controls described in the Privacy Policy and cookie tools.

4. Retention

Collected information is retained only for as long as reasonably necessary for the purposes described above, the duration of the applicable relationship, and any additional period reasonably necessary to comply with law, maintain security and audit records, resolve disputes, or enforce agreements. Retention varies by data type, account status, and whether the information resides in backups, logs, or archives.

5. Your choices and privacy rights

Depending on where you reside and subject to applicable exemptions, you may have rights to know, access, delete, correct, or opt out of certain processing of personal information. You can make a request by contacting privacy@auroracommand.ai. Borealis may need to verify your identity and authority before responding.

For website analytics and optional marketing technologies, you can also use the cookie-preferences tools where available or your browser settings.

6. Related notices and contacts

Read the Privacy Policy for more detail about categories of personal information, sources, uses, recipients, rights, and contact methods. Read the Cookie Policy for more detail about cookies and similar technologies.

Privacy requests and questions: privacy@auroracommand.ai.
Security reports: security@auroracommand.ai.
Support questions: support@auroracommand.ai.