Privacy Policy

Personal Information means information about an identifiable individual, as defined under PIPEDA. This may include your name, email address, phone number, account credentials, profile details, photos, and content you post.

Consent means your voluntary agreement to the collection, use, and disclosure of your personal information for the stated purposes.

User Content means material you submit or display through the services, including profile fields, feed posts (such as text, media, polls, or event details), ideas board entries (including stages, tags, and save or join-interest signals), comments, likes or saves, poll participation, event interest signals, meet mode details you choose to display, and messages you send in direct conversations.

Information you provide: When you register or use Aurayla, we collect data you enter or upload. That commonly includes account and profile data (such as name, username, email, password hash, optional bio, headline or role, profile image, interest tags, external links, onboarding answers, what you are working on, and what collaborations you are open to). It includes content you create on the feed and ideas board (text, media attachments, poll options, categories, journey or stage labels, and similar metadata), comments, connection or block actions, messages you send to other members, notifications preferences, and device push tokens if you enable notifications on a supported app. If you contact us directly, we collect the details you provide in that communication.

Automatically collected information: We collect technical and usage information needed to operate and secure the Services. Examples include IP address, browser or app build, device type and OS, approximate location derived from IP or device settings when you enable location features, request metadata, timestamps, diagnostic logs, and security telemetry (such as failed sign-in attempts). On the web, we may use cookies as described in our Cookie Policy; mobile clients rely on platform storage for session data rather than browser cookies.

From others: Other members may mention you, reply to your content, connect with you, or report behaviour to us. We process that information as described in this policy. We also receive information from subprocessors that host infrastructure or deliver transactional email, subject to contractual safeguards.

Health or sensitive information: Aurayla is not a health service. You should not post information you consider highly sensitive (including health information) unless you choose to do so. If you voluntarily include such information in your profile or messages, you understand it may be visible according to your settings and the nature of the feature.

We handle personal information in line with PIPEDA's fair information principles, including:

• Accountability for personal information under our control
• Identifying purposes at or before collection
• Consent where required, and implied consent where appropriate and permitted by law
• Limiting collection to what is reasonable for those purposes
• Limiting use, disclosure, and retention to compatible purposes and appropriate retention periods
• Accuracy, safeguards, openness, and individual access

We use personal information to:

• Operate and improve the platform, APIs, web, and mobile apps described in Section 1
• Personalize your feed, ideas discovery, and connection suggestions where we offer them
• Deliver posts, ideas, comments, meet mode, messaging, notifications, and related social features
• Respect visibility and audience settings you apply to profile information or posts, where available
• Maintain trust and safety, including moderation, abuse detection, and enforcing our terms
• Send service and security communications (verification, alerts, policy updates)
• Respond to support requests and legal inquiries
• Aggregate or de-identify usage analytics where permitted

We do not sell your personal information. We may disclose information:

• With other users through the product experience (for example public profile fields, feed posts or ideas you publish, comments, likes or saves, poll participation, event interest signals, meet mode details you choose to display, and messages you send in direct conversations), consistent with visibility or audience controls on a given feature
• With service providers who assist us (hosting, analytics, email, security) under contractual safeguards
• For legal reasons if required by law, legal process, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate notice where required

We retain personal information only as long as needed for the purposes described here, to comply with law, resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify it subject to technical and legal limitations.

Depending on applicable law, you may have the right to request access to or correction of your personal information, withdraw consent where processing is consent-based (subject to legal or contractual limits), delete your account, or object to certain processing. You can manage some information in your account settings. You may also contact us using the details below. We will respond within timelines required by applicable law.

We use cookies and similar technologies as described in our Cookie Policy. You can control certain cookies through your browser; some features may not work without essential cookies.

We operate primarily in Canada. If we use service providers in other jurisdictions, we take steps designed to ensure appropriate protections in accordance with applicable law and this policy. By using Aurayla, you understand that information may be processed in Canada and, where applicable, other countries with different privacy laws.

We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Aurayla is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will notify you and report to the Office of the Privacy Commissioner of Canada as required by PIPEDA, and maintain a record of breaches as required by law.

Our Privacy Officer oversees compliance with this policy. For privacy questions, to exercise your rights, or to report a concern, contact us:

We will acknowledge your request within ten (10) business days where practicable and provide a substantive response within thirty (30) days, subject to legal requirements.

If you are not satisfied with our response, you may contact:

• Office of the Privacy Commissioner of Canada: www.priv.gc.ca
• Information and Privacy Commissioner of Ontario: www.ipc.on.ca

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Where required by law, we will provide notice or obtain consent before material changes to how we handle personal information.