Your information stays yours.

The specific information we collect depends on how you use the Services. Generally, when you use AuroLegal, we collect:

• Information you give us during intake — details about your citation, such as the violation, the state, the court, and the relevant dates; any photos of your ticket you choose to upload; and the messages you exchange with Auro.
• Account information — your name and email address, so you can return to your case.
• Information Auro generates for you — your action plan, contesting letter, and checklist are saved to your account.
• Basic technical information — standard server logs, and, if you submit a report through the in-app "Report Issue" feature, the diagnostic details you choose to send.
• Optional SMS information — if you choose to receive SMS messages, we collect your mobile phone number, verification status, SMS consent records, reminder settings, message delivery records, and opt-out or help requests.

We do not intentionally seek to collect sensitive personal information (such as precise geolocation, financial account numbers, or government identifiers) beyond what is reasonably necessary to provide the Services you request.

We use the information you provide to:

• Provide and personalize the Services, including identifying the rules of your state and court that may apply to your situation and generating your action plan, contesting letter, and checklist;
• Operate, maintain, secure, and improve the Services, including troubleshooting, analytics, and developing new features;
• Communicate with you about your matters, deadlines, account, and updates to the Services or this policy.
• Send account verification texts and optional SMS reminders for case-related dates you choose to track, and process HELP and STOP requests.

We use automated tools (including AI models) to process the information you provide and generate legal information and resources for you. We do not use your information to make decisions about you that produce legal or similarly significant effects beyond the legal information you request.

Auro generates its guidance with the help of third-party AI providers, including Anthropic and OpenAI. To produce your answers, the information you share with Auro is sent to these providers' commercial APIs for processing.

These AI providers act as our service providers/processors and may only process your information to help us deliver the Services, subject to contractual confidentiality, security, and data-protection commitments. Under these providers' commercial API terms, data sent to their APIs is not used to train their foundational AI models. Where possible, we seek to configure these services to use zero-data-retention or equivalent settings.

AuroLegal does not train or fine-tune its own AI models on your data.

In the ordinary course, our team does not review the content of your legal submissions. Limited personnel may access your information only as needed to operate the Services, address support requests, comply with law, or protect our rights and users.

Your information is encrypted in transit and at rest. Our databases and stored files are hosted on Amazon Web Services and encrypted using managed encryption keys.

We use technical and organizational safeguards designed to protect your information, including role-based access controls, authentication requirements, and logging of access to production systems. While we work to implement technical and organizational measures designed to protect the security of personal information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee its absolute security. We are not responsible for the circumvention of any privacy settings or cybersecurity measures contained on our Services, and any transmission of personal information is at your own risk.

Access to your information is limited to personnel and service providers who need it to operate the Services, and who are bound by confidentiality obligations. No security measures are perfect, and we cannot guarantee absolute security.

If we become aware of a security incident that affects your personal information, we will investigate and notify you and/or regulators as required by applicable law.

We share personal information in the ways described below:

• Service providers and vendors. We share information with service providers that help us operate the Services, such as hosting providers, AI vendors, email and communications providers, analytics tools, and security vendors.
• Legal and compliance. We may disclose information if we believe it is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of AuroLegal, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of all or a portion of our business, information may be transferred as part of that transaction, subject to applicable law.

We do not "sell" your personal information as that term is defined under the CCPA/CPRA, and we do not "share" your personal information for cross-context behavioral advertising.

Mobile information, including phone numbers, SMS opt-in data, and SMS consent records, will not be shared with third parties or affiliates for marketing or promotional purposes. We may share mobile information with service providers only as needed to deliver SMS messages, manage opt-outs, provide support, protect the Services, comply with law, or complete a business transfer subject to applicable law.

We keep your case data for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

You can delete any case at any time from your case list. If you would like us to delete all of your information, contact us at privacy@aurolegal.ai and we will take care of it, subject to any information we are legally required or permitted to keep (for example, records of payments or security logs).

When we delete information, we may not immediately remove it from our active systems and may retain copies in backup or archive systems for a limited time. We may take reasonable steps to verify your identity before responding to your deletion request.

You can opt out of SMS messages at any time by replying STOP to an AuroLegal text message or by disabling reminders in your account. You can request help by replying HELP or contacting privacy@aurolegal.ai.

Depending on where you live and subject to certain exceptions, you may have rights regarding your personal information, such as the right to:

• Access and receive a copy of the personal information we hold about you.
• Request that we correct inaccurate personal information about you.
• Request that we delete personal information, subject to legal exceptions.
• Object to or restrict certain processing, or withdraw consent where we rely on consent.

You can exercise many of these rights directly through your account, such as updating your information or deleting cases. You can also contact us at privacy@aurolegal.ai.

California rights: If you are a California resident, you have additional rights under the CCPA/CPRA, including the right to request that we disclose: (1) the categories and specific pieces of personal information we have collected about you; (2) the categories of sources from which the information was collected; (3) the business or commercial purposes for collecting personal information; and (4) the categories of third parties to whom we disclose personal information. You also have the right to request deletion of your personal information, to correct inaccurate information, and to not be discriminated against for exercising any of your rights. You may make a request by emailing privacy@aurolegal.ai. We may need to verify your identity before fulfilling your request and may deny your request where permitted by law.

AuroLegal is intended for adults addressing their own citations and other legal matters. It is not directed to children under 18, and we do not knowingly collect personal information from children.

We may update this policy from time to time. When we make a material change, we will revise the effective date shown at the top of this page.

Questions about this policy, or about your information? Contact us at privacy@aurolegal.ai.