Privacy Policy

This Privacy Policy describes how Blueprint Online Learning Inc. ("we", "us", or "our") collects, uses, and protects your information when you use Aurora ("Service"). We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address - Required for account creation and communication
• Password - Stored securely using industry-standard hashing (managed by Supabase Auth)
• Profile information - Any additional details you choose to provide

1.2 Audio Files

When you use the Service, we process and temporarily store:

• Uploaded audio files - Your original audio tracks
• Processed outputs - Separated stems and mastered files
• Reference tracks - Audio used for stem matching

Important: We do not listen to, analyze the content of, or use your audio files for any purpose other than providing the Service. Your audio is processed algorithmically and is not accessed by humans unless required for technical support at your request.

1.3 Usage Data

We automatically collect:

• Processing metrics - Minutes used, matches performed, storage consumed
• Job metadata - Processing times, file sizes, job status
• Technical logs - Error logs, performance metrics (no audio content)

1.4 Payment Information

Payment information is collected and processed by Stripe, our payment processor. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We receive from Stripe:

• Stripe customer ID (for subscription management)
• Subscription status and billing dates
• Last 4 digits of your card (for display purposes only)
• Payment success/failure status

2. How We Use Your Information

We use your information to:

• Provide the Service - Process your audio files and deliver results
• Manage your account - Authentication, subscription, usage tracking
• Process payments - Handle billing through Stripe
• Communicate with you - Service updates, billing notifications, support
• Improve the Service - Analyze aggregate usage patterns, fix bugs, optimize performance
• Ensure security - Detect and prevent fraud, abuse, or unauthorized access

3. Data Storage and Security

3.1 Where We Store Data

Your data is stored using reputable cloud service providers:

• Supabase - Account data, authentication, database (PostgreSQL)
• Tigris/S3-compatible storage - Audio files and processed outputs
• Stripe - Payment and subscription data

All data is stored in secure data centers with encryption at rest and in transit.

3.2 Security Measures

We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Encrypted storage for files and database
• Secure authentication via Supabase Auth
• Presigned URLs with expiration for file access
• Row-level security policies in our database
• Regular security updates and monitoring

4. Data Retention

4.1 Audio Files

Audio files are retained in your account storage until you delete them or your account is terminated. We may delete files that have not been accessed for extended periods (typically 90+ days) to manage storage capacity. We will attempt to notify you before such deletion.

4.2 Account Data

Account information is retained as long as your account is active. Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

4.3 Logs and Analytics

Technical logs and aggregated analytics data may be retained for up to 12 months for security monitoring, debugging, and service improvement purposes.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

5.1 Service Providers

We share data with third-party providers who help us operate the Service:

• Stripe - Payment processing (Stripe Privacy Policy)
• Supabase - Database and authentication (Supabase Privacy Policy)
• Cloud storage providers - File storage
• Audio processing APIs - Stem separation (audio is processed and not retained by these services)

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Investigate fraud or security issues
• Respond to lawful requests from public authorities

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Your Rights and Choices

6.1 Access and Portability

You can access your account data and download your files at any time through the Service. If you need a copy of all data we hold about you, contact us.

6.2 Correction

You can update your account information through your profile settings. Contact us if you need help correcting any data.

6.3 Deletion

You can delete individual files through the Service. To delete your entire account and all associated data, contact us at hello@auroramaster.com. We will process deletion requests within 30 days.

6.4 Email Communications

You will receive transactional emails related to your account (billing, security alerts). These cannot be opted out of while your account is active. Marketing emails, if any, will include an unsubscribe link.

7. Cookies and Tracking

We use essential cookies required for the Service to function (authentication, session management). We do not use third-party advertising cookies or cross-site tracking.

We may use analytics tools to understand how the Service is used. This data is aggregated and does not identify individual users.

8. International Data Transfers

Your data may be processed in countries other than your own, including the United States. Our service providers maintain appropriate safeguards for international data transfers in compliance with applicable data protection laws.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at hello@auroramaster.com.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have additional rights including:

• Right to access - Obtain a copy of your personal data
• Right to rectification - Correct inaccurate data
• Right to erasure - Request deletion ("right to be forgotten")
• Right to restrict processing - Limit how we use your data
• Right to data portability - Receive your data in a portable format
• Right to object - Object to certain processing activities

Our legal basis for processing your data includes: performance of our contract with you (providing the Service), legitimate interests (improving the Service, security), and your consent where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last updated" date. For significant changes, we may also notify you by email.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: hello@auroramaster.com
Company: Blueprint Online Learning Inc.