This policy describes how Aurawave AI ("Aurawave," "we," "us") collects, uses, stores, and deletes information when you use our website at aurawave.ai and our application at app.aurawave.ai. By using Aurawave you agree to this policy.
What we collect
We collect three categories of data.
Account information
- Name, email address, and password (hashed) when you create an account.
- Billing information, processed by our payment provider Stripe. We do not store full card numbers.
Uploaded photos
- The selfies you upload to train your photo session.
- Image metadata (dimensions, file format, EXIF data when present).
Generated photos
- The AI-generated photos produced from your training set.
- Internal grading scores produced by our Intelligence Engine for each output.
How we use your data
We use your uploaded selfies only to train your private session model and generate your photos. We do not use your photos to train shared or general-purpose AI models. We do not sell your data, and we do not share your photos with third parties for advertising.
We use your account information to provision your account, deliver your photos, send transactional emails, and process payments. We may also send occasional product updates if you opt in to our newsletter.
How long we keep your data
Your uploaded selfies are retained for 30 days after generation, then automatically deleted from our servers. Your generated photos remain in your account until you delete them or close your account. You can delete any individual photo or your full account at any time from your account settings.
Closing your account triggers permanent deletion of your selfies, generated photos, and trained model within 7 days.
Service providers we use
- Stripe — payment processing.
- AWS — file storage and compute.
- Cloudflare — content delivery and DDoS protection.
- Google Analytics — anonymized website usage.
- Resend — transactional email delivery.
Each provider is bound by their own privacy policy and only receives the minimum data necessary to perform their function.
Your rights
If you are a resident of California, the European Union, the United Kingdom, or another jurisdiction with comprehensive privacy laws, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Request a copy of your data in a portable format.
- Object to specific processing.
- Withdraw consent for marketing communications.
To exercise any of these rights, email hello@aurawave.ai. We respond within 30 days.
Cookies
We use first-party cookies for authentication and session management, and Google Analytics cookies for anonymized usage measurement. We do not use advertising cookies. You can disable non-essential cookies in your browser settings without affecting account functionality.
Children
Aurawave is not intended for users under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to Aurawave, email us and we will delete it.
Changes to this policy
We update this policy as our practices evolve. Material changes are announced by email to active account holders at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
Contact
Privacy questions or requests: hello@aurawave.ai.