Aurion Legacy
Draft - pending attorney review

Privacy Policy

How we collect, use, protect, and share your information.

Version: 2026-05-19 · Last updated: 2026-05-19

This document is a working draft. It must be reviewed by a licensed attorney before final production.

1. Introduction

This Privacy Policy explains how AURION BUSINESS OPTIMIZATION LLC ("Aurion", "we") handles your information when you use Aurion Legacy. This policy applies to all users and respects rights under the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and applicable state laws.

2. What information we collect

We collect: (a) account data (name, email, preferred language, hashed password); (b) case data you upload (description, documents, dates, voice transcripts, chat messages); (c) technical data (IP address, browser, device type, access time); (d) Service usage logs; (e) payment data processed by external providers (we do not store full card numbers).

3. Sensitive data and immigration

Because many users consult immigration matters, we may receive highly sensitive information (immigration status, criminal history, data about minors, medical conditions). We treat this information with special care: we never sell it, we pass it through the Privacy Gateway before any external AI call, and we limit internal access to strictly necessary personnel.

4. How we use your information

We use your information to: (a) operate the Service, generate drafts and summaries; (b) coordinate human review when applicable; (c) provide support; (d) prevent fraud and abuse; (e) comply with legal obligations; (f) improve the Service in aggregated, anonymized form. We do not use your information for targeted advertising and do not sell it to third parties.

5. AI processing

Your User Content may be sent to external AI models (e.g., Anthropic Claude or DeepSeek) under commercial agreements that prohibit using your data to train models. Before any such transmission, the Privacy Gateway anonymizes names, specific dates, document numbers, and other identifiable information. The mapping between anonymized tokens and real data is kept only on our side, encrypted.

6. Who we share information with

We share information only when necessary: (a) reviewing attorneys assigned to your case, under confidentiality agreement; (b) technical providers (hosting, database, AI, payments) under confidentiality contracts; (c) authorities when required by law; (d) in case of merger or sale, provided the successor maintains equivalent obligations. We do not sell personal data.

7. Data retention

We keep your data while your account is active and for the time reasonably necessary to comply with legal, tax, or audit obligations. You can request deletion at any time; some records (e.g., minimum audit logs) may be retained where the law permits.

8. Your rights

Under CCPA/CPRA and other applicable laws, you have the right to: (a) know what data we have about you; (b) access a copy; (c) correct inaccurate data; (d) request deletion; (e) limit the use of sensitive data; (f) not be discriminated against for exercising these rights; (g) opt out of sale or sharing for advertising (we do not apply this category). To exercise them, write to privacy@aurion-legacy.com.

9. Children's privacy (COPPA)

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe a child provided data without consent, write to privacy@aurion-legacy.com and we will delete it.

10. Security

We apply reasonable technical and organizational measures: encryption in transit, passwords hashed with a robust algorithm, role-based access control, audit logs, separation of sensitive data. No system is 100% secure; we cannot guarantee absolute security.

11. International transfers

The Service is operated primarily from the United States. If you access from outside the U.S., your information will be processed in the U.S. and may be subject to laws different from those in your country.

12. Cookies and similar technologies

We use essential cookies for authentication, language, and security. We do not use third-party advertising cookies. You can block cookies in your browser, but some features may not work.

13. Changes to this policy

We may update this policy. When changes are material, we will notify you in the platform and require you to re-accept it before continuing.

14. Contact

Privacy requests and questions: privacy@aurion-legacy.com - AURION BUSINESS OPTIMIZATION LLC, Seattle, Washington.