PRIVACY @ AURORA INFRA

Privacy Policy

Last updated: March 22, 2026
This notice describes our approach to personal data. This privacy notice explains how we collect, use, disclose, and otherwise process personal data when you visit our websites, use AuroraInfra products and services, communicate with us, or otherwise interact with us, and it tells you about your privacy rights and applicable legal requirements.

1. Important Information and Who We Are

Purpose of This Privacy Notice
This privacy notice aims to give you information on how Aurora Data Solutions Limited collects and processes personal data through your use of our websites, applications, products, and services, including when you request a demo, create an account, subscribe to updates, purchase or use our services, attend events, communicate with us, or otherwise interact with us. This privacy notice also describes our handling of personal data contained in customer content that we process on behalf of our customers in connection with the services, where we act as a processor or service provider and the relevant customer is the controller or business responsible for that data.

Controller
Aurora Data Solutions Limited and, where applicable, its affiliates, subsidiaries, or parent companies, may act as the controller for your personal data as described in this notice when we determine the purposes and means of processing such data (collectively referred to as "Company", "we", "us", or "our" in this privacy notice). When we process personal data on behalf of a customer in providing the services, we act as a processor or service provider in accordance with that customer’s instructions.

Contact Details
Our full details are:

• Full name of legal entity: Aurora Data Solutions Limited

• Email address: legal@aurorainfra.ai

You have the right to make a complaint at any time to the supervisory authority or regulator for data protection issues in your country, state, or place of residence. You may contact us regarding your concerns, though this does not limit your right to approach a regulator at any time.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified, directly or indirectly. It does not include data where the identity has been removed or cannot reasonably be associated with an individual (anonymous data).

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data: includes first name, last name, username or similar identifier, marital status, title, date of birth, gender, title, employer, and account identifier.

Contact Data: includes billing address, delivery address, email address, telephone numbers, and other contact details you provide to us.

Financial Data: includes bank account and payment card details.

Transaction Data: includes details about payments to and from you, subscriptions, renewals, service plans, and other details of products and services you have purchased from us.

Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device identifiers, network information, logs, and other technology on the devices you use to access our websites or services.

Profile Data: includes your username and password, account settings, service preferences, purchases or orders made by you or your interests, preferences, feedback, and survey responses.

Usage Data: includes information about how you use our websites, products, and services, including feature usage, interaction data, session activity, crash data, and analytics information.

Marketing and Communications Data: includes your email address and your preferences regarding receiving updates or other communications from us, to the extent you choose to provide them.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances and for the following limited purposes:

• Where we need to perform the contract we are about to enter into or have entered into with you or your organization.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

4. How We Share Personal Data

We may share personal data with our affiliates; service providers, subprocessors, and vendors that we may engage to support our operations, including hosting, infrastructure, analytics, payment processing, customer support, communications, and related services; professional advisers; business partners; and competent authorities, regulators, or other third parties where required by law or where we determine disclosure is appropriate. We may also disclose personal data in connection with a corporate transaction, such as a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. We do not sell personal data or share personal data for cross-context behavioral advertising except as otherwise disclosed and permitted by applicable law.

Where you have given consent, where required by law, including for certain marketing communications. We may use personal data to provide, operate, maintain, secure, and improve our websites, products, and services; authenticate users; manage accounts; process transactions; provide customer support; communicate with you about the services; personalize your experience; monitor performance; detect, investigate, and prevent security incidents, fraud, abuse, or illegal activity; comply with law and enforce our terms; and develop aggregate insights and analytics.

5. Data Security

We may implement technical and organizational measures in connection with personal data processing. However, no system is completely secure, and we cannot guarantee the security of personal data. In addition, we limit access to your personal data to those employees, agents, contractors, subprocessors, and other third parties who have a business need to know.

We may engage third parties to process personal data on our behalf, subject to contractual arrangements. No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee the security of personal data transmitted to or stored by us.

6. International Data Transfers

Your personal data may be transferred to, stored in, and processed in countries other the country in which you are resident, including the United States and other jurisdictions where we or our service providers operate. Where required by applicable law, we may implement transfer mechanisms such as contractual commitments, standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms. However, international data transfers involve inherent risks, and we cannot guarantee the same level of protection in all jurisdictions.

7. Your Legal Rights

Applicable data protection laws may provide you with certain rights in relation to your personal data, which may include rights to request access, correction, erasure, objection to processing, restriction of processing, or data portability, subject to legal limitations and exceptions. We will respond to such requests in accordance with applicable law, but cannot guarantee any particular outcome.

8. Changes to This Privacy Notice

We may update this notice from time to time. When we do, we will revise the "Last updated" date at the top of this notice. Continued use of our services after changes constitutes acceptance of the revised notice.