Starting template — not legal advice. Have a qualified lawyer review and adapt this (especially the entity name, jurisdiction, and retention terms) before you rely on it.

// legal

Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how [Your legal entity name] ("Aurigalens", "we", "us") collects, uses, and protects information when you use the Aurigalens service at aurigalens.com (the "Service").

Information we collect

Account information. When you sign in with Google, we receive your name, email address, and a Google account identifier.
Log content you upload. The files you submit for analysis, and the analysis results generated from them.
Usage and subscription data. The number of analyses you run, your plan, and subscription status.
Payment information. Billing is handled by Stripe. We do not store your full card details; Stripe processes and stores payment data under its own policies.
Technical data. Standard server logs such as IP address, browser type, and timestamps.

How your log content is processed

To produce an analysis, the content you upload is transmitted to our AI provider, Anthropic (the Claude API), which processes it to generate the report and answer follow-up questions. Do not upload secrets, credentials, personal data of others, or regulated data you are not permitted to share. The app includes an optional redaction feature to help remove common secrets before submission, but you remain responsible for what you upload.

How we use information

To provide, operate, and improve the Service.
To authenticate you and maintain your account and usage limits.
To process subscriptions and payments.
To communicate with you about your account or the Service.
To detect, prevent, and address abuse, fraud, or technical issues.

Service providers (sub-processors)

We share limited data with providers who help us run the Service:

Anthropic — AI processing of uploaded log content.
Google — sign-in / authentication.
Stripe — payment processing.
Amazon Web Services — hosting and database storage.

Data retention

We retain account and subscription data for as long as your account is active. [Specify how long uploaded log content and analysis results are retained, e.g. stored only in your browser, or deleted after N days.] You can request deletion of your account and associated data as described below.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To make a request, contact us at the address below.

Cookies

We use strictly necessary cookies to keep you signed in. We do not use advertising cookies.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy: [your-email@aurigalens.com], [Your legal entity name and address].