Alpha Privacy — the short version

This is a plain-language agreement for the invite-only alpha test. It has not yet been reviewed by a lawyer. Full policies are drafted and with counsel; they will replace this page before AuraClout opens to the public.

What we collect. Your email, display name, and password, if you use one (stored only as a salted hash, with a note of whether it’s under 15 characters); any worker profile you create (handle, trade, area, bio); a profile photo, if you add one (location data is stripped; you can remove it any time); photos a client attaches to their endorsement (shown only after the pro agrees; deleted if no decision in 30 days; location data stripped); and basic security logs (IP, timestamps).

How you sign in. If you use a passkey, we keep its public key, an ID for it, the name you give it, what kind of device it’s on, a counter that helps spot a copied key, and when you added it and last used it. Your face, fingerprint and passcode never leave your device. If you use an authenticator app, we keep its secret key encrypted; we have to read it to check your codes. Recovery codes, if you have them, are kept scrambled, the same way as your password, so nobody here can read them back.

Your AuraClout phrase. If you set one, we keep it encrypted; we have to read it to put it at the top of every email we send you. It’s shown only on your settings page and in those emails. Changing it replaces the old one, and it goes when your account does.

People you’ve blocked. If you block someone, we keep a record so we can enforce it. Where they aren’t on AuraClout, we keep a scrambled form of their email address instead of the address itself, so the list can’t be read back. It’s never shown to anyone else, and we never tell the person they’ve been blocked.

Where you’re signed in. We keep one record per signed-in device — when it signed in, when it was last used, and what kind of browser it is — so you can see your devices and sign any of them out. Each browser you sign in from also keeps a cookie holding a random number, so we can email you when your account is signed in from a browser it hasn’t used in the last 90 days. We keep these for 90 days after a device was last used, the same period as the security logs above, and they are deleted with your account.

What's public. Worker profiles you choose to publish are public — that's the product. Your email and login data are never published on the site. We may disclose them only as required by legal process, as necessary to operate and secure the service, or with your authorization.

What we don't do. We don't sell personal information, don't run third-party ads or tracking, and don't collect payment details — nothing in the alpha costs money.

Your call. Want your data gone? Email support@auraclout.com and we delete what the exceptions below don't require us to keep — see Data Retention for how deletion works, including what our email provider keeps and the one record that is never removed. Complaints about content go to legal@auraclout.com.

Deletion Exceptions. AuraClout may retain personal information only to the extent reasonably necessary to: comply with a legal obligation, subpoena, court order, or regulatory request; establish, exercise, or defend legal claims; preserve relevant information under a legal hold; detect, prevent, investigate, or remediate fraud, abuse, security incidents, or violations of the Terms; maintain security and system integrity; complete a transaction or provide a service reasonably expected within an ongoing relationship; maintain a suppression, opt-out, deletion, or audit record; or create information that has been irreversibly de-identified or aggregated and is no longer reasonably linkable to an individual.

AuraClout will delete information not covered by an exception. Information retained under an exception will not be used for unrelated purposes and will be deleted when the exception no longer applies.

Effective October 10, 2026 · Operated by the AuraClout founder; an operating entity is being formed and this page will be updated when it is named · Contact: support@auraclout.com (privacy and deletion) · legal@auraclout.com (content and legal notices)