Privacy Policy

Information we may collect

We may collect information you choose to provide, including your name, email address, organisation or role, location, goals, enquiry summary, timeframe, meeting preference and optional website, phone number or budget band.

We may also collect limited technical and attribution information needed to operate and protect the website, understand how an enquiry arrived and prevent automated abuse. We do not intentionally store raw IP addresses.

How we collect information

Information may be collected when you use Auri or the accessible guided enquiry form, contact us by email or telephone, register interest in a future conversation, interact with the website or choose to receive updates.

How we use information

• Review and respond to enquiries
• Prepare for conversations and provide requested services
• Maintain accurate contact records
• Improve the enquiry experience and protect the website from misuse
• Develop aggregated, de-identified service insights without publishing identifiable client or business information
• Meet legal and operational obligations
• Send optional updates where separate consent has been given

First-party measurement

We record a small set of first-party journey events—such as Auri opening, pathway selection, intake completion and next-step preference—to understand friction and reliability. If paid booking is enabled later, opening a booking link may also be recorded; this would not tell Aura whether payment was completed. These records use a short-lived random session identifier, contain no raw IP address or contact details, and are scheduled for deletion after 90 days. Advertising trackers are not used at launch.

Auri

Auri is a genderless AI concierge character. The Quick Brief uses a minimised AI tone layer for controlled pathway and progress context. Premium Discovery permanently offers two choices: structured guidance, which sends no discovery answers to the AI model, and optional reflection, which requires separate explicit permission.

When reflection is chosen, OpenAI receives only controlled category selections: opening signal, area in focus, present situation, desired shift, practical realities and, if separately allowed, the Aura page category that led into the journey. Name, organisation, contact details, website, precise location, attribution, booking and payment details, and every free-text answer are excluded from the reflection request. OpenAI may process the controlled selections outside Australia. Each reflective session is limited to two requests, uses the API setting that prevents the response from being stored for later retrieval, and does not create a raw transcript. Turning reflection off stops future AI requests but cannot reverse processing already completed.

The visitor reviews, corrects or removes Auri’s final reflection before submission. Only the visitor-approved Signal Brief—not a raw conversation transcript—is stored and transferred to Aura’s enquiry process.

System access during service delivery

If a separately agreed Workflow & Responsible AI Enablement engagement requires access to a Growth Partner’s systems, access is limited to the agreed purpose and provided through a named, least-privilege and revocable account or approved delegated connection. Aura does not ask a Growth Partner to disclose passwords, MFA or one-time codes, recovery codes, authentication links, API keys or access tokens through Auri, email, HubSpot, proposals or website forms.

The Growth Partner remains the owner and billing administrator of its accounts and enters owner credentials privately. Where delegated access is unavailable, supervised setup may be used. Working data is kept in the Growth Partner’s environment where practical, and temporary access and extracted copies are revoked or deleted according to the written engagement terms.

Service providers

We may use trusted providers to operate the website and enquiry journey, including OpenAI Sites, OpenAI, HubSpot, Google Calendar, Stripe and Cloudflare. These providers may process information in locations outside Australia under their respective privacy and security arrangements.

Paid appointments are not available during the founding launch. If enabled later, payment information will be entered directly into Stripe’s hosted payment environment, and Google Calendar may share the appointment title, selected time and price with Stripe to complete the booking. Auri and this website’s enquiry database do not collect or store complete payment-card details.

Retention

Successfully synchronised contact information is scheduled for deletion from Aura’s website database after 30 days. Abandoned Auri session and reflection-permission metadata is scheduled for deletion after 24 hours. Some information may remain in HubSpot or other business systems where it is reasonably required for enquiry management, legal obligations or an ongoing relationship.

Premium Discovery also offers optional device-local recovery. If selected, only controlled multiple-choice selections are kept in that browser profile for up to 24 hours. Free text, AI reflections, permission choices, identity, contact, booking and payment information are not included. The copy is removed on completion, opt-out or expiry; if the Site is closed at expiry, removal occurs the next time it opens.

Security

We use reasonable technical and organisational safeguards, including named access, least-privilege permissions, multi-factor authentication, server-side credentials, bot protection and limited data collection. No online system can guarantee absolute security.

Access, correction and complaints

You may request access to or correction of personal information, or raise a privacy question or complaint, by emailing hello@auramediaelevation.com.au. We will review the matter and respond within a reasonable period. You may also be entitled to contact the Office of the Australian Information Commissioner.

Cookies and analytics

The website may use strictly necessary technologies and privacy-conscious measurement to operate and improve the experience. Advertising trackers are not used at launch.

Changes

This policy may be updated as the website, services, operating arrangements or legal requirements evolve. The latest version will appear on this page with its revision date.