Legal
Terms & privacy.
The binding documents are published in our documentation. This page links to each of them and summarizes our privacy policy in plain language.
- Terms of Servicev2.0 · Effective 16 Sep 2026(opens in a new tab)
- Switching & Portability Annexv1.0 · Effective 28 Jul 2026(opens in a new tab)
- EU Data Act informationv1.0 · Updated 28 Jul 2026(opens in a new tab)
- Privacy Policyv1.0 · Updated 28 Jul 2026(opens in a new tab)
- Legal contact pointsv1.0 · Updated 28 Jul 2026(opens in a new tab)
- Data Act disclosures on this siteInfrastructure jurisdictions, access safeguards, switching charges
Legal notices and privacy requests: legal@aurorainfra.ai · Everything else: support@aurorainfra.ai
Privacy Policy
Version 1.1 · Updated 24 Sep 2026
- 01Who we are
- The controller is Aurora Infrastructure EU sp. z o.o., ul. Wadowicka 6/88, 30-415 Cracow, Poland (KRS 0001166368). This policy covers aurorainfra.ai, our documentation, the Aurora console, our APIs, and related billing, support, sales, and marketing activities. Contact legal@aurorainfra.ai for privacy matters.
- 02Our two roles
- We act as controller for data about visitors, account holders, billing contacts, and prospects. For customer content—files, objects, virtual machines, and AI prompts—we act as processor under our Data Processing Agreement.
- 03Data we collect
- Account and billing details, usage and support records, sales and marketing interactions, analytics (with consent), and security logs.
- 04Purposes and legal bases
- We process data to perform our contract with you, meet legal obligations, pursue legitimate interests such as securing our services, and—where you consent—for marketing and analytics.
- 05Recipients and transfers
- We share data only with vetted processors (for example identity, payments, CRM, and data center providers) and professional advisers. Customer data is hosted on EU servers; where a provider is outside the EEA we rely on adequacy decisions, the EU–US Data Privacy Framework, or Standard Contractual Clauses.
- 06Retention
- Account data for the life of the account plus up to three years; billing records for five years from the end of the tax year; security logs up to 12 months; analytics up to 14 months.
- 07Security
- TLS 1.2+ in transit, encryption at rest options for stored objects, network isolation, role-based access control, and hashed API tokens. Personal data breaches are handled and notified in line with the GDPR.
- 08Cookies
- Functional and authentication cookies keep the console working. Analytics cookies are set only after consent. We do not use advertising or cross-site tracking cookies.
- 09Your rights
- You may request access, rectification, erasure, restriction, portability, or object to processing. We respond within one month. Write to legal@aurorainfra.ai. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, Warsaw.