This notice explains what personal information we collect when you visit the AURÄI website at auraisystems.ai and its sub-pages (the “Site”), how we use it, who we share it with and the choices and rights you have. It is written in plain language on purpose.
The Site is operated by CyberOps AI Dynamics LLC, a Texas limited liability company trading as AURÄI (“AURÄI”, “we”, “us”). For the purposes of data-protection law we are the controller of the personal information described here.
This notice covers the public website only. When you create an account on the AURÄI learning and agent platform, the separate Platform Privacy Policy applies — it is longer and more detailed because the Platform handles far more of your data, including anything you give our AI agents.
1. The short version
We collect only what we need to run the Site and to follow up when you ask us to. We do not sell your personal information, we do not show third-party advertising on the Site, and we do not track you across other websites. The Site sets no analytics or advertising cookies: both of our analytics tools (Umami and PostHog) work without cookies and do not identify you.
2. What we collect and why
Information you give us. When you join the waitlist, register for a masterclass, webinar or demo, download a guide, take a quiz, apply for a scholarship or contact us, we collect what you type into the form: typically your name, email address, country, current role or career stage, organisation, the journey or programme you are interested in and any message you write. We use it to respond to your request, to hold your place on the waitlist, to send you the thing you asked for, to invite you to the events you registered for and — if you agree — to keep you informed about AURÄI programmes, launches and offers.
Information collected automatically. When you visit the Site our hosting and security providers record standard technical information: your IP address, browser type and version, device type, operating system, language, the pages you view, the page you came from and the time and length of your visit. Our analytics tools record page views, clicks on buttons such as “Join Waitlist” and where on the page they land, scroll depth and which sections of a page you reach, the questions and tabs you open, form opens and submissions (not what you type), page load performance, errors the page runs into, approximate location (country or city level, derived from your IP address and not stored with it by Umami) and the campaign links (UTM tags) that brought you to the Site. We use this to keep the Site secure, to measure which pages and campaigns work and to fix problems.
Information from marketing links. If you arrive from one of our social posts, adverts or emails, the link may carry a tag identifying the campaign and the journey it belongs to. We store that tag with your form submission so that we understand which message brought you to us and can tailor what we send you.
We do not collect payment information on the Site. Payments happen on the Platform, through Stripe.
3. Legal bases (for visitors in the UK, EEA and Nigeria)
Where the UK GDPR, the EU GDPR or the Nigeria Data Protection Act 2023 applies, we rely on: consent for marketing emails, which you can withdraw at any time; our legitimate interests in running, securing and improving the Site — including our cookieless analytics — and in responding to enquiries, balanced against your rights; and performance of steps at your request before entering a contract when you join a waitlist or ask about a programme. We will ask for your consent before sending marketing where the law requires it, and every marketing email contains an unsubscribe link.
4. The tools and providers we use
We share personal information only with the providers that help us run the Site, under contracts that require them to protect it and to use it only on our instructions.
| Provider | What it does | Where | What it receives |
|---|---|---|---|
| HubSpot | Customer relationship management; powers our waitlist and registration forms and sends our emails | European Union | Everything you enter into a form, your email engagement (opens, clicks) and the campaign tag |
| PostHog | Product analytics | European Union (PostHog Cloud EU) | Page views, clicks and where on the page they land, scroll depth, the site actions described in section 2, page performance and error reports, device and browser data and approximate location; no cookies or browser storage, and no session recordings. Visits are counted with an identifier PostHog derives on its servers and rotates daily, which does not identify you |
| Umami | Privacy-focused web analytics | Self-hosted in our own cloud environment (United States) | Page views, referrers and the site actions described in section 2; no cookies, no personal identifiers; IP addresses are used to derive a country-level location and a daily salted hash, then discarded |
| Cloudflare | Domain and DNS, and security for our analytics endpoint | Global network | IP address and request data, for security and performance |
| Vercel | Website hosting | United States | Server logs (IP address, request data), and PostHog analytics events on their way to PostHog |
| Google (reCAPTCHA) | Spam and abuse protection on our forms, loaded with HubSpot’s forms | United States | Your IP address, browser and device data and how you interact with a page that shows a form; Google’s Privacy Policy and Terms of Service apply |
| Amazon Web Services | Storage of downloadable resources | United States | Request logs when you download a resource |
| Zoom | Webinars and masterclasses | United States | Your registration details and attendance when you register for a live event |
| Google Workspace | Email and internal documents | United States | Messages you send us |
| Substack | Hosts blog articles linked from the Site | United States | Governed by Substack’s own privacy policy once you leave the Site |
We may also disclose information if the law requires it, to protect our rights or safety or anyone else’s, or as part of a merger, financing or sale of the business (in which case this notice will continue to apply to your information).
5. International transfers
We are based in the United States. HubSpot and PostHog process data in the European Union; our other providers process it in the United States. If you are in the UK, the EEA or Nigeria, your information will be transferred to the United States. We protect those transfers with the safeguards the law recognises: the EU Standard Contractual Clauses and the UK International Data Transfer Addendum with each provider, provider participation in the EU-US Data Privacy Framework where the provider is certified, and, for Nigerian data, transfer conditions consistent with the Nigeria Data Protection Act. You can ask us for a copy of the relevant safeguard.
7. How long we keep information
Waitlist and registration details: until the programme you asked about has launched and for up to 24 months afterwards, or until you unsubscribe, whichever is sooner, after which we delete or anonymise them. Contact-form messages: 24 months from the last exchange. Analytics data: PostHog event data 12 months; Umami data is aggregated and never identifies you. Security and server logs: up to 12 months. If you become a Platform customer, your information is kept under the Platform Privacy Policy instead.
8. Your rights
Depending on where you live you may have the right to: access the personal information we hold about you; correct it; delete it; restrict or object to how we use it; receive a copy in a portable format; withdraw consent at any time; and complain to a supervisory authority. In the UK that is the Information Commissioner’s Office; in the EEA your national data protection authority; in Nigeria the Nigeria Data Protection Commission.
If you live in California, the California Consumer Privacy Act gives you the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, and to be free from discrimination for exercising those rights. We do not “sell” or “share” personal information as those terms are defined in California law, and we do not use or disclose sensitive personal information other than to provide the Site. If you live in Texas, the Texas Data Privacy and Security Act gives you similar rights of access, correction, deletion, portability and to opt out of targeted advertising (which we do not do) and sale (which we do not do).
To exercise any right, email privacy@auraisystems.ai from the address you used with us, or use the unsubscribe and preference links in our emails. We respond within 30 days (45 days for California requests) and may ask you to confirm your identity first. You may authorise an agent to make a request for you.
9. Children
The Site is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
10. Security
We use encryption in transit (HTTPS/TLS) on every page, restrict access to form data to the team members who need it, and rely on providers with independently audited security programmes. No website is perfectly secure; if we learn of a breach affecting you we will tell you and the relevant regulator as the law requires.
11. Changes to this notice
We will post any changes here and update the “Last updated” date. If a change is significant we will tell waitlist members by email.
12. Contact
CyberOps AI Dynamics LLC (AURÄI)Houston, Texas, United States
privacy@auraisystems.ai