Privacy Policy - Aurora

Last updated: 19/03/2026

1. Introduction

Big Ton (CNPJ: 35.796.886/0001-06), responsible for the Aurora platform, is committed to protecting your privacy. This policy explains how we collect, use, share and protect your personal information. Aurora operates mainly in Brazil, the United States, Argentina and the European Union; we comply with the LGPD, the General Data Protection Regulation (GDPR) and applicable local laws in each jurisdiction.

We do not retain or share data in ways that could violate copyright or personal data protection. The content you create on the platform is yours; we do not exploit it commercially nor transfer it to third parties for purposes that violate LGPD, GDPR or intellectual property laws.

2. Information We Collect

2.1 Information You Provide

  • Full name and email (required for registration)
  • Profile information (bio, photo, preferences)
  • Content created (texts, projects, characters, settings)
  • Payment information (processed by secure third parties)
  • Communications and feedback sent to our support

2.2 Information Collected Automatically

  • Platform usage data (pages visited, features used)
  • Technical information (IP address, browser type, operating system)
  • Performance data (load time, errors)
  • Cookies and similar technologies to improve experience

2.3 Third-Party Information

  • Payment processor data (transaction confirmation)
  • Analytics provider information (to improve our services)
  • Social authentication service data (if used)

3. How We Use Your Information

We use your information for the following purposes:

  • Service delivery: Provide and maintain platform functionality
  • Personalization: Customize your experience and recommendations
  • Communication: Send important notifications and updates
  • Support: Answer questions and resolve technical issues
  • Security: Detect and prevent fraud and misuse
  • Improvement: Analyze usage to improve features
  • Legal compliance: Meet legal and regulatory obligations
  • Marketing: Send offers and relevant content (with your consent)

4. Legal Basis for Processing

We process your personal data based on the following LGPD legal bases:

  • Contract performance: To provide contracted services
  • Consent: For optional features and marketing
  • Legitimate interest: For service improvement and security
  • Legal obligation: To meet legal requirements

5. Information Sharing

We do not sell your personal information. We share data only in the following situations:

  • Service providers: Partners that help operate the platform
  • Payment processors: To process financial transactions
  • Legal requirements: When required by law or competent authorities
  • Rights protection: To protect our legal rights
  • Consent: With your express authorization
  • Business transfer: In case of merger or acquisition

6. Data Retention

We retain your information for as long as necessary for:

  • Account data: While your account is active + 5 years
  • Created content: According to your account settings; we do not retain or share content that could violate copyright or LGPD
  • Abandoned accounts: We reserve the right to delete accounts inactive for more than 24 (twenty-four) months; after deletion, data is deleted or anonymized, with no retention that violates data protection or copyright
  • Payment data: According to tax and legal requirements
  • Security logs: 2 years for security purposes
  • Marketing data: Until consent is withdrawn

After these periods, data is anonymized or securely deleted. We do not use or share user data in ways that violate LGPD, GDPR or third-party rights.

7. Security

We implement technical and organizational measures to protect your information:

  • Encryption of data in transit and at rest
  • Strict access controls
  • 24/7 security monitoring
  • Regular security updates
  • Secure and redundant backups
  • Privacy training for staff

8. Your Rights (LGPD)

You have the following rights regarding your personal data:

Confirmation

Confirm whether we process your data

Access

Access your personal data

Correction

Correct incomplete or incorrect data

Anonymization

Block or delete unnecessary data

Portability

Transfer data to another provider

Deletion

Delete personal data

Information

Know who we share with

Revocation

Withdraw consent at any time

9. Cookies and Similar Technologies

We use cookies to improve your experience:

  • Essential: Required for basic operation
  • Functional: Remember preferences and settings
  • Analytics: Understand how you use the platform
  • Marketing: Personalize ads (with consent)

You can manage cookies through your browser settings.

10. International Transfers and Jurisdictions

Aurora's main markets are Brazil, the United States, Argentina and the European Union. Your data is processed mainly in Brazil. When it is necessary to transfer data to other countries (e.g. service providers in the US or EU), we ensure adequate levels of protection through standard contractual clauses, adequacy decisions or other safeguards approved by the LGPD, GDPR and applicable local laws.

For users in Brazil, the LGPD and ANPD apply; in the European Union, the GDPR and local supervisory authorities; in the United States and Argentina, applicable data protection laws in each jurisdiction. We do not retain or share data in ways that could violate copyright or personal data protection in these regions.

11. Protection of Minors

Our platform is not intended for users under 18. We do not knowingly collect data from minors. If we identify such a situation, we will take steps to delete the information.

12. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated by email or through the platform. We recommend reviewing this page regularly.

13. Data Protection Officer

To exercise your rights or clarify questions about privacy, contact our Data Protection Officer:

Email: dpo@aurora.didog.cloud

Privacy Channel: privacidade@aurora.didog.cloud

Company: Big Ton - CNPJ: 35.796.886/0001-06

Response Time: Up to 15 business days

14. Supervisory Authorities

Depending on your jurisdiction, you may contact the following data protection authorities:

  • Brazil: National Data Protection Authority (ANPD) – www.gov.br/anpd
  • European Union: Supervisory authority of your Member State (e.g. CNIL in France, AEPD in Spain)
  • United States: Depending on the state, state consumer protection agencies or applicable federal authorities
  • Argentina: Dirección Nacional de Protección de Datos Personales (DNPDP)