Privacy Policy

1. Who We Are

Auriflow Digital LLC dba Auriflow Studio ("Company," "we," "us") operates studio.auriflow.com. Contact: studio@auriflow.com.

2. What We Collect

• Account information: Email address, full name, company name, role title.
• Uploaded documents: Price books, SKU catalogs, cost workbooks, usage exports, proposal notes, term sheets, customer context, and supporting materials uploaded during a quote workspace or engagement.
• Intake conversation: Your responses during the structured intake process.
• Payment information: Payment processing is handled by Stripe. We do not store card numbers. We retain payment intent IDs and amounts.
• Usage and performance data: Pages and routes viewed, referrer, approximate location, device and browser category, performance measurements, conversion events, and timestamps. Private route identifiers and URL query strings are removed before analytics events are sent.
• Security and audit data: IP address, user agent, authentication events, and timestamps used to protect the Service and maintain audit records.

3. How We Use Your Data

• To deliver the quote-model workspace, Excel deliverables, hosted summaries, and related support described in your confirmed brief or checkout flow.
• To authenticate your account and secure your data.
• To send transactional emails related to your engagement (workspace links, brief confirmation, delivery notifications).
• To maintain audit records as required by our legal obligations.
• To understand use of the public site, measure the engagement funnel, and improve reliability and performance using aggregated analytics.
• To create aggregated, non-identifying product and market insights, such as quote type, approximate value bands, common commercial terms, input categories, scenario categories, and turnaround metrics.

We do not sell your data to third parties. We do not share identifiable quote details, company-specific pricing inputs, customer names, counterparty names, uploaded documents, or customer-specific outputs in marketing or with third parties. We share customer materials only with the operator building or QAing your model and service providers needed to deliver the Service, subject to their applicable terms.

4. Assisted Processing

Customer materials may be processed by Anthropic's Claude API for extraction and intake conversation generation. Under Anthropic's Commercial Terms, API inputs and outputs are not used to train Anthropic models unless a customer explicitly opts in. See privacy.claude.com for Anthropic's privacy documentation.

5. Data Retention and Deletion

We retain engagement data for as long as your account is active. You may delete your engagement data at any time from your dashboard. Uploaded files are purged from storage immediately upon deletion. Database records are anonymized within 24 hours. Anonymized audit log entries required for legal record-keeping are retained indefinitely.

6. Third-Party Services

• Supabase: Database and file storage. Data stored in US-East region.
• Anthropic: Assisted extraction and intake processing via API. Commercial terms apply.
• Stripe: Payment processing. Stripe's privacy policy applies to payment data.
• Resend: Transactional email delivery.
• Vercel: Application hosting, privacy-focused Web Analytics, and real-user performance measurement. Web Analytics does not use third-party cookies and reports aggregated data rather than identifying individual visitors.

7. Your Rights

You have the right to access, correct, and delete your personal data. To exercise these rights, use the data deletion button in your dashboard or contact studio@auriflow.com. We will respond within 30 days.

8. Security

See our Security page for a detailed description of our technical and organizational security measures.

9. Contact

Privacy questions: studio@auriflow.com. We do not have a formal privacy officer. Contact Auriflow Digital LLC dba Auriflow Studio at studio@auriflow.com.