AURA® | PRIVACY POLICY

Last Updated: 15/10/2026
Version: 1.0

​

1. Introduction

AURA is a B2B digital platform supporting international trade, supplier discovery, business verification, and commercial information management. We recognize the importance of protecting personal data, business information, and confidential documents shared through our Platform.

​

This Privacy Policy explains how AURA collects, uses, stores, shares, and protects information in accordance with applicable data protection laws, including Brazil's General Data Protection Law (LGPD), where applicable. By using AURA, users acknowledge the data processing practices described in this Policy.

​

2. Information We Collect

Depending on the services used, AURA may collect the following categories of information:

Account and Contact Information

• Full name, business email, and phone number;

• Company name, registration number, and business address;

• Professional position and company affiliation;

• Account credentials and user preferences.

Business and Verification Information

• Company profiles and corporate documentation;

• Business registrations, licenses, and certifications;

• Supplier and buyer information;

• Information required for identity verification and due diligence.

Commercial Information

• Requests for Quotation (RFQs);

• Product specifications, pricing, and commercial volumes;

• Business communications and supporting documents;

• Transaction-related information voluntarily submitted by users.

Technical and Usage Data

• IP address, browser type, and device information;

• Login activity and security logs;

• Platform interactions and usage analytics;

• Cookies and similar technologies, where applicable.

AURA collects information directly from users, authorized representatives, official registries, publicly available sources, and permitted third-party providers.

​

3. How We Use Information

AURA processes information for legitimate business and operational purposes, including:

• Creating and managing user accounts;

• Verifying business identities and company information;

• Operating supplier discovery and sourcing features;

• Processing quotation requests and business inquiries;

• Organizing and securing commercial documentation;

• Managing subscriptions, payments, and customer support;

• Improving Platform functionality and user experience;

• Preventing fraud, unauthorized access, and misuse;

• Complying with legal, regulatory, and contractual obligations.

Personal data is processed only where supported by an applicable legal basis, such as contractual necessity, legal obligations, legitimate interests, or consent when required.

​

4. Business Confidentiality

AURA treats non-public commercial information as confidential.

Supplier information, pricing, transaction volumes, quotations, agreements, and restricted documents are subject to appropriate access controls and confidentiality obligations. Such information will not be publicly disclosed without authorization, unless disclosure is required by law or otherwise permitted under an applicable legal obligation or agreement.

Where commercial information must be shared to fulfill a requested service, access shall be limited to relevant authorized parties and the information reasonably necessary for that purpose. Separate Non-Disclosure Agreements (NDAs), Non-Circumvention and Non-Disclosure Agreements (NCNDAs), and other contractual confidentiality obligations remain applicable according to their respective terms.

​

5. Information Sharing

AURA may share necessary information with:

• Authorized business counterparties involved in requested services;

• Technology, hosting, security, and infrastructure providers;

• Payment processors and financial service providers;

• Verification, compliance, and professional service providers;

• Competent authorities when legally required.

Information sharing shall be limited to legitimate purposes and subject to appropriate contractual, technical, or organizational safeguards.

AURA does not sell users' personal data to third parties. Information collected for verification or confidential commercial activities will not be disclosed for unrelated marketing purposes without an appropriate legal basis.

​

6. International Data Transfers

Due to the international nature of AURA's services, information may be processed, stored, or accessed in countries other than the user's country of residence. Where personal data is transferred internationally, AURA shall apply legally required safeguards, including appropriate contractual protections or other permitted transfer mechanisms. International transfers shall be conducted in accordance with applicable data protection legislation and limited to legitimate operational or contractual purposes. Further information about applicable transfer arrangements may be requested through the privacy contact channel.

​

7. Data Security and Retention

AURA adopts reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse. Such measures may include access restrictions, authentication controls, secure infrastructure, and activity monitoring, as appropriate to the risks involved. No digital environment can guarantee absolute security.​

Information shall be retained only for as long as reasonably necessary to fulfill the purposes described in this Policy, comply with legal or contractual obligations, resolve disputes, or preserve legitimate records. Upon expiration of the applicable retention period, information shall be securely deleted, anonymized, or otherwise handled as permitted by law.​

Where required by applicable law, relevant personal data security incidents shall be assessed and reported to competent authorities and affected individuals.

​

8. Cookies and Analytics

AURA may use cookies and similar technologies to:

• Maintain essential Platform functionality;

• Support account authentication and security;

• Remember user preferences;

• Analyze Platform performance and usage.

Where legally required, non-essential cookies will be subject to user consent. Users may manage available cookie preferences through the Platform's cookie settings or their browser. Additional information may be provided in a separate Cookie Policy.

​

9. Artificial Intelligence and Automated Processing

AURA may use automated technologies, including artificial intelligence, to support document organization, data extraction, business verification, information analysis, and Platform functionality. Where such processing involves personal data, applicable privacy, confidentiality, and security requirements shall be observed.​

AI-generated assessments and verification indicators are supporting resources and do not constitute guarantees of commercial performance or risk-free transactions. Where applicable law provides rights concerning decisions made solely through automated processing, users may exercise those rights through the designated privacy contact channel.

​

10. User Rights

Subject to applicable data protection laws, users and other data subjects may have the right to:

• Confirm whether their personal data is being processed;

• Request access to their personal information;

• Correct inaccurate or outdated information;

• Request deletion, anonymization, or restriction of processing where legally applicable;

• Request information about data sharing;

• Withdraw consent where processing is based on consent;

• Object to certain processing activities where permitted by law;

• Request data portability or review of qualifying automated decisions, where applicable.

Requests may be submitted through the contact details provided below.

Certain information may need to be retained to satisfy legal obligations, protect legitimate rights, or comply with applicable regulations.

​

11. Third-Party Websites and Services

AURA may contain links or integrations with third-party websites, services, or external information sources. These third parties may operate under their own privacy policies and data protection practices. AURA is not responsible for independent processing activities carried out by third parties outside its control, except where responsibility is established by applicable law.

​

12. Policy Updates

AURA may update this Privacy Policy to reflect changes in legal requirements, technology, Platform functionality, or operational practices. Material changes shall be communicated through appropriate channels when required. The latest version will be available on the Platform, together with its effective date.

​

13. Contact and Privacy Requests

For questions regarding this Privacy Policy, personal data processing, or the exercise of applicable privacy rights, please contact:

AURA CORPORATE SERVICES LTDA.

caroline@afxcorp.com.au

Registered Office Address: Sapiens Parque S.A., Florianópolis, SC, Brazil.​

​

© AURA. All rights reserved.

​