Privacy Policy

1. Introduction

AuraVMS, Inc. ("AuraVMS", "Company", "we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy describes how we collect, use, and share personal information in connection with your use of our websites, applications, and services (collectively, the "Services").

This policy applies to all personal information collected through our Services, regardless of how that information is collected or submitted. By accessing or using our Services, you acknowledge that you have read and understand this privacy policy.

2. Information We Collect

We collect several categories of information from and about users of our Services:

2.1 Information You Provide to Us

Account Information: When you register for an account, we collect your name, email address, password, company name, job title, phone number, and other account profile information.

Billing Information: When you subscribe to our paid Services, we collect billing and payment information, which may include your address and payment details.

Customer Data: In the course of using our Services, you may input, upload, or store data related to your business, such as vendor information, procurement data, contract details, and other business information ("Customer Data").

Communications: When you communicate with us, we collect information about your communication and any information you choose to provide.

2.2 Information We Collect Automatically

Usage Data: We collect information about how you interact with our Services, including the features you use, the pages you visit, the time and duration of your activities, and other usage statistics.

Device Information: We collect information about the devices you use to access our Services, including hardware model, operating system and version, browser type, and device identifiers.

Log Data: Our servers automatically record information when you use our Services, such as your IP address, access times, and referring website addresses.

Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activities and to distinguish you from other users of our Services. For more information about our use of cookies, please see Section 7 of this policy.

3. How We Use Your Information

We use the information we collect for various purposes, including:

To provide, operate, maintain, and improve our Services
To process and complete transactions, and send you related information, including purchase confirmations and invoices
To manage your account, including authenticating and authorizing access
To respond to your comments, questions, and requests, and provide customer service and support
To communicate with you about technical notices, updates, security alerts, and administrative messages
To monitor and analyze trends, usage, and activities in connection with our Services
To detect, prevent, and address technical issues, fraud, or illegal activity
To personalize and improve your experience with our Services
To comply with legal obligations

4. How We Share Your Information

We may share your personal information with:

4.1 Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include data analysis, email delivery, hosting services, customer service, and marketing efforts.

4.2 Corporate Transactions

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4.3 Compliance and Protection

We may disclose your information where we believe disclosure is necessary or required by law or regulation, to comply with legal process or governmental requests, to enforce our agreements, policies, and terms of service, or to protect the rights, property, or safety of AuraVMS, our customers, or others.

4.4 With Your Consent

We may share your personal information with your consent or at your direction.

We do not sell, rent, or lease your personal information to third parties.

5. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include:

Encryption of personal data both in transit and at rest
Regular security assessments and penetration testing
Access controls and authentication mechanisms
Monitoring for suspicious activities
Regular security training for all staff
Physical security controls for our facilities
Disaster recovery and business continuity plans

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Services, or we are legally obligated to retain this data for longer time periods.

Upon termination of your account, we will retain your information for a commercially reasonable period of time to permit you to re-activate your account if desired. After such period, we will delete or anonymize your information.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Services and hold certain information.

Types of Cookies We Use:

Essential Cookies: These cookies are necessary for the operation of our Services, including for authentication and security purposes.
Analytics and Performance Cookies: These help us understand how visitors interact with our Services by collecting and reporting information anonymously.
Functional Cookies: These cookies enable the website to provide enhanced functionality and personalization based on your interactions.
Targeting Cookies: These cookies record your visit to our website, the pages you have visited and the links you have followed to deliver more relevant content.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

8. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 For European Economic Area (EEA), UK, and Switzerland Residents

Under the GDPR and equivalent UK and Swiss laws, you have the following rights:

Right to Access: You have the right to request copies of your personal information.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure: You have the right to request that we erase your personal information, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal information, under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you are located in the EEA, UK, or Switzerland and want to exercise any of these rights, please contact us using the information in Section 12.

8.2 For California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:

Right to Know: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined under CCPA/CPRA.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes other than those specified in the CPRA.
Right to Correction: You have the right to request correction of inaccurate personal information.

To exercise your rights under the CCPA/CPRA, please contact us using the information provided in Section 12.

9. International Data Transfers

We are headquartered in the United States and may process and store your information in the United States and other countries, which may have different data protection laws than those in your country of residence.

For transfers from the EEA, UK, or Switzerland to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards, such as standard contractual clauses adopted by the European Commission, to ensure the protection of your personal information.

10. Children's Privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information of a child under 16, we will take steps to delete such information from our files as soon as possible.

11. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date at the top of this page. In case of material changes, we will provide a more prominent notice, which may include an email notification.

We encourage you to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us:

By email: privacy@auravms.com
By mail: AuraVMS, Inc.
Attn: Privacy Officer
[Company Address]

13. Data Protection Officer and EU Representative

For inquiries regarding our data protection practices or to exercise your rights under applicable data protection laws, you can contact our Data Protection Officer at dpo@auravms.com.

If you are located in the EEA, our EU representative can be contacted at: [EU Representative Contact Information]