Privacy Notice

1. Who We Are

AuroraMe (“we”, “us”) operates auroraforecast.me and the AuroraMe app. This notice explains how we process personal data for free forecasts, accounts, Premium subscriptions, claims, support, and optional analytics.

Contact: [email protected] · AuroraMe, Calle Emilio Tuya 37, 33202 Gijón, Spain.

2. Payment Processing

Polar is Merchant of Record for web subscriptions and processes checkout, billing, tax, fraud, refunds, and subscription management. AuroraMe receives only data needed to activate, reconcile, restore, and support Premium; we do not store payment-card data.

Web subscription privacy

AuroraMe processes account identity, email, claim and device-link data to activate Premium. Polar processes checkout, billing, tax, fraud and subscription-management data as Merchant of Record; AuroraMe does not store card data. Resend sends transactional receipts and activation emails. Adapty receives entitlement and subscription status needed to provide Premium across the app. When you delete your account, AuroraMe deletes or disconnects account and device data, while legally required financial, tax, refund and fraud records may remain pseudonymized.

3. Data We Collect

We collect only data needed to operate forecasts, activate and restore Premium, support buyers, prevent fraud, and meet legal obligations.

• Purchase & account data: Name, email, billing country, IP address, order ID, amount, and product details supplied during checkout.
• Premium access tokens: Random tokens tied to your email and city slug so we can grant and verify access.
• Usage analytics: Consent-based GA4 and Yandex Metrica metrics (page views, device type, country and CTA interactions), plus sanitized first-party AI-referral and web-error telemetry. URLs exclude query strings and fragments.
• Support messages: Emails you send to [email protected].
• System logs: Webhook delivery logs and error traces used to secure the service (no card numbers).

4. How We Use Data (Legal Bases)

We rely on the following grounds under GDPR/UK GDPR and similar laws:

• Provide the service (contract): Process purchases, send receipts, grant Premium Access, and support your account.
• Comply with laws: Maintain accounting records, collect taxes, and respond to lawful requests.
• Legitimate interests: Prevent fraud, monitor abuse, and improve site reliability.
• Consent: Every visitor chooses before GA4 or Yandex Metrica loads; analytics remains off unless explicitly allowed.

5. Cookies & Analytics

Essential storage keeps secure Premium access and your consent choice. GA4 and Yandex Metrica run only after explicit consent, which you can withdraw in the footer. See our Cookie Policy for details.

6. Sharing & Processors

We share data only with trusted providers under data processing agreements:

• Polar – Merchant of Record checkout, billing, tax, fraud prevention, refunds, and subscription management; Resend – transactional activation and recovery email; Adapty – app entitlement and subscription status.
• Google LLC – Google Analytics 4 with EU data region and IP anonymization.
• Firebase / Google Cloud – hosting, authentication, and Firestore storage in the EU region.
• Google Workspace (Gmail) – support mailbox and customer communication.
• Yandex Metrica – consent-based traffic measurement. Aurora SEO Ops processes sanitized AI-referral and web-error telemetry as first-party operational data.

7. International Transfers

Data may be stored or processed in the EU and United States. Transfers rely on Standard Contractual Clauses plus encryption and access controls.

8. Your Rights

Depending on where you live you may have the right to:

• Access or receive a copy of your personal data.
• Correct inaccurate data.
• Request deletion when data is no longer needed or legally required.
• Object to or restrict processing based on legitimate interests.
• Withdraw cookie consent at any time.
• File a complaint with your supervisory authority.

9. Children

The web service is not intended for children under 13. If you believe a child provided data, contact us to delete it.

10. Data Security

We use HTTPS, role-based access, logging, and short retention periods for tokens and logs. No payment card data is stored on AuroraMe servers.

11. Changes

We may update this notice as we add processors or legal requirements change. The new version takes effect upon posting.

12. Contact

Email [email protected] or mail AuroraMe Privacy, Calle Emilio Tuya 37, 33202 Gijón, Spain. We answer privacy requests within 30 days.