Privacy Policy

Members stay private

Member profiles are never published and are never shown to other members. A model only sees the display name a member chooses and the chats and calls that member starts with her.

Model profiles are shown to members and, where the model chooses, on the public website.

What we collect

Account data: e-mail address or other sign-in identifier, display name, date of birth, language, and sign-in records.

Verification data: identity documents, selfies and the results of age and identity checks, collected and processed through our identity-verification partner. For models and payout recipients, also the details needed for payouts and compliance checks.

Communications data: the content of chats, and call metadata such as who called whom, start and end times, duration and minutes charged. We do not record the audio or video of calls.

Payment and wallet data: subscriptions, top-ups, refunds, payouts and the wallet ledger of every charge and credit. Card payments are handled by our payment processor; AURA never sees or stores your full card number.

Safety data: reports, blocks, moderation decisions and related notes.

Technical data: device and browser information, IP address, logs and security events needed to run and protect the service.

Consent records: your cookie choice and other consents, with the date they were given or withdrawn.

Why we use it and our legal bases

To create your account and provide chats, calls, Premium, the wallet and payouts — performance of our contract with you.

To verify age and identity, prevent fraud and money laundering, keep financial and tax records, and respond to lawful requests — compliance with legal obligations.

To keep AURA safe, moderate content, handle reports and disputes, secure our systems and improve the service — our legitimate interests, balanced against your rights.

Biometric data in verification selfies is processed only with your explicit consent, or where the law otherwise permits it, and only to confirm that you match your document.

Optional analytics and marketing messages — only with your consent, which you can withdraw at any time.

Who we share data with

We share data only with service providers (processors) that help us run AURA, under data processing agreements: hosting and database (Vercel Inc., USA, for the website; Supabase Inc., with the database hosted in Frankfurt, Germany), video and real-time communication infrastructure (LiveKit Inc., USA), payment processing (Stripe, Inc., USA), e-mail delivery (Resend, USA) and identity verification (our identity-verification partner).

We may disclose data to authorities, courts or professional advisers where required by law, to protect the safety of any person, or to establish or defend legal claims. We never sell your personal data.

International transfers

Some processors may handle data outside the EU/EEA. Where they do, we rely on an adequacy decision or on the European Commission’s Standard Contractual Clauses with additional safeguards where needed. Bloomberg Group LLC and most of our processors (Vercel, Stripe, LiveKit, and Resend) are based in the USA; our database is hosted in Frankfurt, Germany. Transfers to the USA rely on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses.

How long we keep data

We keep your data while your account is active. When you delete your account, your profile and chats are removed from active systems within 30 days, and from backups within 90 days.

Some records are kept longer because the law requires it, even after account deletion: payment, wallet, payout and tax records for 10 years, and verification and AML records for 5 years after the relationship ends. Records linked to an open report, dispute or legal claim are kept until it is resolved.

Security

We use encryption in transit, access controls, row-level security in our database, and least-privilege access for staff. Verification documents are held by our identity-verification partner or stored with restricted access.

No system is perfectly secure. If a breach affects your data in a way that puts you at risk, we will tell you and the supervisory authority as the law requires.

Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing.

You can export your data and delete your account yourself in the app. For anything else, write to support@liveaura.co. We reply within one month.

You can also complain to a data protection supervisory authority, in particular in the country where you live or work, or with the supervisory authority of the EU country where you live.

Age

AURA is strictly for adults. We do not knowingly collect data from anyone under 18. If we learn that a minor has created an account, we close it and delete the data except what we must keep by law.

Changes and contact

We will tell you about material changes to this policy in advance. Questions: Bloomberg Group LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA, support@liveaura.co.