Privacy Policy
What personal data Aurix Cloud processes, why, and for how long. Draft pending legal review.
Controller#
Aurix (imprint on the website) for account, billing and console data. For player audio and player identifiers inside your projects, you are the controller and we are the processor under the DPA.
Data we process as controller#
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail, name, password hash | account, notices | contract | until deletion + 30 days |
| IP, user agent of sessions and audit entries | security, abuse prevention | legitimate interest | 12 months |
| Billing identifiers (Paddle customer, subscription, invoice ids) | invoicing | contract / legal obligation | 10 years (tax) |
| Usage metering (node-hours, participants, slots) | billing, capacity | contract | 24 months |
Card data is processed by Paddle.com Market Ltd / Paddle.com Inc. as merchant of record; we never see it.
Data we process as processor#
Player identifiers you send when minting tokens, display names, positions, speaking state and audio streams. Audio is transient unless recording is enabled by you. Players' IP addresses reach media nodes for the duration of a session and are kept in logs for 7 days.
Sub-processors#
- Hetzner Online GmbH (DE/FI) and, during the launch period, a German data-centre provider — hosting, see Sub-processors
- Paddle — payments (once paid plans open)
- E-mail notices are sent from our own mail server; no third-party e-mail provider is involved
Your rights#
Access, rectification, deletion, portability and objection under GDPR: write to [email protected]. You can download a copy of your data (Settings → Your data or GET /v1/me/export) and delete your account in the console; you may lodge a complaint with your supervisory authority.
Cookies#
The console uses local storage for the session token and theme only. No analytics or advertising trackers.