Aura is a leading provider of digital security products for consumers. This Privacy Policy describes how we process and handle data provided to Aura in connection with your use of our products, services, apps, and websites that link to this policy (we refer to these collectively as our “services”).
Information security and privacy are at the heart of what Aura values and promotes as a company. As such, we think it’s important to be transparent about how we handle your information. That level of transparency also makes for a lengthy document, but we’ve tried to make it more readable by organizing it into a logical structure and using plain language.
Aura offers a variety of services, and this policy describes our comprehensive approach to ensuring privacy considerations across all our services. We have some unique approaches to managing data for certain of our products and services. Please refer to “Product Specific Privacy Notices” below for more details.
This policy uses the term “personal data” to refer to information that is related to an identified or identifiable natural person.
In this policy, “Aura”, “we”, “us” and “our” refer to the companies that comprise the Aura Group and that are responsible for your data, which may be any of the following entities:
See the Contact Us section below for our contact details or you can email us at privacypolicy@aura.com.
How Aura handles your information depends on our relationship with you.
If you are an individual customer, Aura is the controller of your information and handles your information in accordance with the terms of this Privacy Policy. We want to make sure such customers are aware of how we use your information in accordance with fair and lawful practices.
Certain Aura services may process data differently or in additional ways compared to other services that we note in Product Privacy Notices specific to such services, in product documentation, or inside products themselves at places where such information is relevant. Please refer to these Products Privacy Notices to better understand our privacy practices for each product:
This section describes the various types of information we collect from and about you. The information we may collect may differ depending on which product you use.
For example, our Identity Protection products may collect a significant amount of information about you to help provide our services, but our VPN products only collect a limited amount of information. To understand the context in which collection occurs, see Section 2 (How do we use your information?) and our Product Privacy Notices. More information about some of the mechanisms we use to collect this information, such as cookies, is available in Section 4 (Tracking Technologies & Cookies) and our Cookie Policy.
We and our service providers need to collect certain information about you to provide our services, respond to your requests, and manage your account with us. Where service components go beyond the base service, we provide you with clear choices to decide if you want these additional functions.
In order to continuously improve the levels of service we provide, we collect information about your use of our services to monitor for problems and look for opportunities to make improvements.
As part of our services, we can receive information about you from third parties. We take the same level of precautions and transparency of use that we provide for information you provide us directly.
Aura uses your information for the purposes described below. Aura employs internal risk management functions to ensure we continue to only use your information for the purposes we disclose to you and are taking appropriate steps to protect that data from exposure.
In some situations, Aura may share your information with third parties who may collect, store, use, process and transfer the data for Aura. Aura employs oversight processes and controls to the secure sharing of data with only trusted parties.
Neither Aura, nor any of the companies that comprise Aura, sell your personal data (except if you utilize our free products).
We may disclose your information in the following circumstances:
Aura offers some products for free, with no charge to you at all. For these products, we do help cover the costs of providing these services by displaying ads in certain regions for which we receive compensation for from advertisers. We do not display third party ads in our paid products.
Displaying Ads. With respect to our free mobile apps and other free products, we may serve ads to users in certain regions. Although the money we make from displaying these ads offsets only part of the costs of making these apps and services available for free, we provide free apps because we believe it’s important that everyone has the opportunity, regardless of their situation, to have secure and private access to the internet.
The ads we display in our services are supplied either by advertisers or affiliate networks we have relationships with, or by Google, or other third-party advertising networks (“third-party ad networks”). To display these ads in our apps, we may integrate into them a software development kit (SDK), which consists of software code provided by a third party, such as an ad network.
We do not provide third-party ad networks with any personal data about you, except for an approximate city-level latitude and longitude which lets them show ads which are more relevant for your approximate geographic location. However, third-party ad networks may collect information through their SDKs, such as your mobile advertising identifier, IP address, and device information, for the purpose of serving you with “personalized” ads (ads that they think are more relevant to you) and measuring your response to those ads. If you are using a VPN connection, your IP address is hidden from ad networks and replaced with the IP address of our VPN servers. Because we do not provide ad networks with personal data about you (apart from city-level location), third-party ad networks personalizes ads based on information that they collect from you and that they already have about you - not based on information we share with them.
Google collects this information according to the Google advertising privacy notice. Where an AdChoices logo appears on an ad, you can click it to learn more about the ad network that provided the ad, its privacy policy, and your choices regarding opting out from any personalized advertising, as explained further below in “Tracking Technologies & Cookies.” If you opt out from personalized advertising, you may still see non-personalized ads.
While we request you not to use ad blockers to prevent the display of ads because that is how we support our free services, our services are able to continue functioning if you do use ad blockers.
Aura uses various technologies in our services to help us collect information, primarily on our websites and in our marketing emails. For convenience, we refer to these as “tracking technologies,” although they are not always used to track individuals.
Tracking technologies include:
Opt-out of receiving marketing communications from Aura- You may elect for us not to contact you for marketing purposes, by emailing us at privacypolicy@aura.com or following the instructions in the section below labeled Your Rights with your Personal Data.
Securing personal data is an important aspect of protecting privacy. Aura employs a range of administrative, organizational, technical, and physical safeguards designed to protect your data against unauthorized access, loss, or modification. We endeavor to use reasonably available state-of-the-art network and information security standards, protocols and technologies, including encryption, intrusion detection and data loss prevention, and we monitor our systems to ensure that they comply with our security policies.
We implement physical, technical and organizational safeguards to protect your personal data in our custody, both at rest and in transit, and should these measures fail to prevent a data breach, we will promptly take the necessary remedial measures, and we will provide notices as required by applicable law.
If you have any questions about the security of your personal data or the security of our products, or wish to report a potential security issue, please contact security@aura.com. When reporting a potential security issue, please describe the matter in as much detail as possible and include any information that might be helpful.
Aura may transfer your personal data to countries other than the one in which you reside. We do this to facilitate our operations, and transferees include other Aura group companies, service providers, and partners. Laws in other countries may be different to those that apply where you reside. For example, personal data collected within Switzerland, the United Kingdom, or the European Economic Area (EEA) may be transferred and processed outside Switzerland, the United Kingdom, or the EEA for purposes described in this policy. We put in place appropriate safeguards that help to ensure that such data receives an adequate level of protection. These safeguards include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information between us and our business affiliates and associates to which we choose to transfer the information that requires these companies to safeguard personal information they process from the EEA, the UK and Switzerland. You may contact us if you would like more information about such safeguards. We implement similar appropriate safeguards with our third-party service providers and further details can be provided upon request.
If you change your country of residence, the Aura group company responsible for your data may change accordingly, and your data may be transferred to that other company.
Aura generally retains your personal data for as long as is needed to provide the services to you, or for as long as you have an account with us. We may also retain personal data if required by law, or for our legitimate interests, such as abuse detection and prevention, and defending ourselves from legal claims. Residual copies of personal data may be stored in backup systems for a limited period as a security measure to protect against data loss.
Depending on your country of residence, you may have certain legal rights in relation to your personal data that we maintain. Subject to exceptions and limitations provided by applicable law, these may include the right to:
Please note your rights and choices vary depending upon your location, and some information may be exempt from certain requests under applicable law.
You may be able to exercise some of these rights by using the settings and tools provided in our services. For example, you may be able to update your user account details via the relevant account settings screen of our apps. You may also be able to opt out from receiving marketing communications from us by clicking an “opt out” or “unsubscribe” link in such communications.
Otherwise, if you wish to exercise any of these rights, you may contact us using the details in the “Contact Us” section below. As permitted by law, we may ask you to verify your identity before taking further action on your request.
Below are the types of lawful basis that we will rely on to process your Personal Data:
For additional information and rights available to California consumers, see the California Supplemental Privacy Notice.
It is our Policy to protect the confidentiality of Social Security numbers, prohibit unlawful disclosure of Social Security numbers, and limit access to Social Security numbers by having safeguards in place to help protect Social Security numbers.
Aura occasionally licenses its technology to third party partners who may integrate it with applications developed and offered by those partners. Our partners, and not Aura, are responsible for those applications and for determining what data is collected by those applications and how it is processed. Please contact the relevant partner and refer to their Privacy Policy to learn more about how those applications process your personal data.
Our services are not intended for and may not be used by minors. In this context, minors are individuals under the age of 18 or as defined by applicable law. Aura does not knowingly collect personal data from minors or allow them to use our services except in certain cases, minors over the age of 13 may use certain of our services but only with the consent of their parent or legal guardian. If we discover that we have collected personal data from a minor without appropriate consents, we may delete such data without notice. For certain countries, parental consent may be required for processing the personal data of children under the age of 16. In such cases, those under the age of 16 may not use the services without the consent or authorization of their parent or legal guardian. If you believe a minor has provided personal information without parental or guardian consent, the parent or guardian may contact us by emailing us at privacypolicy@aura.com.
Aura may update this Privacy Policy from time to time in accordance with this section for reasons such as changes in laws, industry standards, and business practices. Aura will post updates to this page and update the “Last updated” date above. If we make updates that materially alter your privacy rights, we will also provide you with advance notice, such as via email or through the services. If you disagree with such an update to this policy, you may cancel your services account. If you do not cancel your account before the date the update becomes effective, your continued use of our services will be subject to the updated Privacy Policy.
We expect this Privacy Policy to evolve over time and welcome feedback from our users about our privacy practices. If you have any questions or complaints about our privacy practices, you can contact us at privacypolicy@aura.com or at the following addresses, based on the product that you use:
Aura Sub LLC dba Aura/
2553 Dulles View Dr, Herndon, VA 20171
Aura Growth GmbH
Hansmatt 32, 6370 Stans, Switzerland
privacypolicy@aura.com
June 8, 2021: Rebranding Figleaf to Aura Privacy
September 8, 2020: New cookie policy, other minor edits