Privacy and personal data policy

1. Data we collect

1.1 Data you submit

When you register or use the Service, we may gather the following types of information:

• Identity data: your legal name and birth date.
• Contact information: your email, telephone number and residential address.
• Financial and trading data: read-only or execution broker API credentials, investment choices and risk limits. We do not retain full broker passwords or payment-card numbers.
• Account profile: username, preferred trading approaches and notification choices.
• Communications: messages sent through support channels or email.

1.2 Data gathered automatically

Using the Service automatically generates certain technical data, including:

• IP address, browser name and version, and operating system.
• Visited pages, features accessed, session duration and click activity.
• Device identifiers and, where relevant, mobile advertising identifiers.
• Cookie and tracking information, as explained in our Cookie Policy).

1.3 Data received from other parties

Information may come from identity-check providers, fraud-screening services and analytics partners. We may combine it with existing records to improve reliability and safeguard the Service.

2. How information is used

Collected information may be used to:

• Set up, operate and manage your account and deliver the Service.
• Handle trading signals and automated instructions through linked brokers.
• Tailor the experience and show pertinent market information.
• Provide service communications, including confirmations, trade notifications and security messages.
• Send promotional messages where you have agreed or applicable law permits.
• Identify, examine and deter fraud or illegal conduct.
• Meet applicable legal and regulatory duties.
• Build, test and enhance Service functions using aggregated, anonymised information.

3. Legal grounds for EEA and UK users

For people in the European Economic Area or United Kingdom, personal data is processed on these legal grounds:

• Contract performance: to deliver the Service you have requested.
• Legitimate interests: to protect the platform, reduce fraud and develop the product.
• Legal requirement: to comply with financial, regulatory and tax duties.
• Permission: for marketing and optional cookies; you may withdraw permission at any time.

4. When information is shared

We do not trade personal information. It may be shared with:

• Technology and service providers: hosting, email, analytics and support vendors bound by contract to protect your data.
• Linked brokers and exchanges: only the API directions required to carry out the strategy you set.
• Authorities and public institutions: where legislation or a court order requires it, or where necessary to defend our rights.
• Corporate transactions: during a merger, acquisition or asset transfer, provided the successor continues to follow this policy.

5. Transfers across borders

Aura Living operates in several regions. Your personal information may be sent to and handled in countries beyond your place of residence, including the United States and nations within the European Union. When applicable, international transfers are protected through Standard Contractual Clauses approved by the European Commission.

6. How long data is kept

We keep personal data while your account remains open or as needed to provide the Service. After closure, some records may be retained for up to seven years to meet financial and regulatory duties. Aggregated and anonymised analytics may be kept without a fixed end date.

7. Your data rights

Your rights depend on your location and may include the ability to:

• Obtain a copy of the personal data we hold about you.
• Request correction of incomplete or incorrect information.
• Ask for your information to be erased, sometimes called the “right to be forgotten”.
• Challenge or limit particular processing activities.
• Receive your data in a structured, machine-readable form for portability.
• Revoke consent at any time, without changing processing already carried out.

To exercise these rights, email . We generally respond within 30 days.

8. Data protection

Our safeguards include TLS 1.3 for data in transit, AES-256 encryption for stored information, multi-factor authentication, role-based permissions and yearly independent penetration tests. No online service is entirely free of risk. Use a strong, unique password and activate two-factor authentication.

9. Cookies and similar tools

Cookies and related technologies help us operate and enhance the Service. Further information is available in our Cookie Policy.

10. Information about children

The Service is intended only for individuals aged 18 or older. We do not knowingly collect data from minors. If you think a minor has submitted personal information, contact us so it can be removed promptly.

11. Changes to this policy

We may revise this Privacy Policy periodically. Significant revisions will be placed on our website or sent by email. Continuing to use the Service once the revised policy takes effect means you accept the changes.

12. How to contact us

For privacy enquiries or requests relating to your rights, contact our Data Protection Officer:

• Email address:
• Postal address: Aura Living Inc., Unit 101, Raheja Towers, M.G. Road, Bengaluru, Karnataka 560001, India, India
• EU contact: Aura Living, Unit 101, Raheja Towers, M.G. Road, Bengaluru, Karnataka 560001, India