Privacy Policy

Last updated: —

1. Introduction

Aurooo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. This policy applies to the Aurooo website and all related services.

2. Information We Collect

2.1 Information You Provide

  • Account information (email address, username, hashed password)
  • Profile information (display name, bio, avatar, cover photo, location, website)
  • Content you upload (images, videos up to 15 seconds, captions, descriptions)
  • Social interactions (comments, likes, saves, follows)
  • User preferences (theme, autoplay settings, notification settings)

2.2 Information Collected Automatically

  • Device information (type, operating system, browser, screen resolution)
  • Usage data (pages visited, features used, content viewed, interaction patterns)
  • Performance metrics (page load times, error reports, crash data)
  • Cookies and session tokens for authentication

2.3 AI-Generated Content

Our platform allows users to upload AI-generated content. Such content must be clearly labeled as AI-generated. We may use automated systems to detect and label AI-generated content that is not properly disclosed.

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Authenticate users and manage sessions
  • Process content uploads and serve media
  • Send notifications about interactions with your content
  • Personalize content recommendations and your feed
  • Detect, prevent, and address fraud, abuse, and security issues
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

  • With your explicit consent or at your direction
  • With service providers who assist in our operations (hosting, storage, delivery)
  • To comply with legal obligations, court orders, or government requests
  • To protect our rights, privacy, safety, or property, or that of our users
  • Public profile information (username, display name, avatar, bio) is visible to other users
  • Content you publish is visible to other users according to your privacy settings

5. Data Security

We implement industry-standard security measures including:

  • Passwords are hashed using PBKDF2 with 100,000 iterations (never stored in plaintext)
  • Session tokens are cryptographically random and stored in HttpOnly, Secure cookies
  • All data in transit is encrypted via TLS/HTTPS
  • CSRF protection on all state-changing operations
  • Rate limiting on authentication endpoints to prevent brute force attacks

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Portability: Request your data in a machine-readable format
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing for direct marketing purposes

To exercise these rights, contact us at privacy@aurooo.com.

7. Cookies and Tracking

We use strictly necessary cookies for authentication (session tokens). We do not use third-party tracking cookies or advertising networks. You can control cookies through your browser settings, though disabling cookies may affect your ability to use the Service.

8. Children's Privacy

Our Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will take steps to delete it.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Session tokens expire after 7 days. Error reports are retained for 90 days. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

10. International Data Transfers

Your information is processed on Cloudflare's global edge network and stored in Cloudflare data centers. Data may be transferred to countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

11. Content Moderation

We employ automated and manual content moderation to enforce our Community Guidelines. This may involve automated scanning of uploaded content for policy violations, including harmful content, spam, and copyright infringement.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries:

Email: privacy@aurooo.com
For data deletion requests: privacy@aurooo.com