privacy policy

Aura Browser is a product of The Builder Company. When this policy says "we", "us", or "our", it refers to The Builder Company and the Aura Browser product. If you have questions, reach us at privacy@thebuilder.company.

The following data is stored exclusively on your local machine and is never transmitted to our servers:

• Browsing history, bookmarks, and downloaded files
• AI chat conversations and conversation history per tab
• Brain workspace notes, knowledge graph data, and logbook entries
• Research library contents (PDFs and saved pages)
• ChromaDB vector embeddings used for semantic memory
• Local LLM model files (GGUF format)
• All workspace data, settings, themes, and quick links
• Session state (open tabs across restarts)

When you use local AI models, all inference happens on your CPU/GPU. No query, no response, and no page content is sent anywhere.

We collect a minimal set of data to operate your account and process payments.

We do not collect telemetry, crash reports, usage analytics, or any behavioral data about how you use the browser. We do not sell your data. We do not show ads.

If you choose to use cloud AI models (OpenAI or Anthropic), your messages and page context are sent directly from your device to that provider's API using the API key you supply. This data is governed by the respective provider's privacy policy:

• OpenAI Privacy Policy
• Anthropic Privacy Policy

We never see or store the content of cloud AI requests. Your API keys are stored locally on your device only.

The account data we collect is used solely to:

• Create and maintain your Aura account
• Send you transactional emails (OTP verification, billing receipts)
• Enforce subscription plan limits within the app
• Deliver software updates
• Respond to support requests you initiate

We do not use your data for advertising, profiling, or any purpose beyond operating the service.

We do not sell, rent, or trade your personal information. We share data only with:

• MongoDB Atlas — hosts the database that stores account and subscription records (region: your nearest Atlas region)
• Zoho Mail — used to send transactional emails (OTP, receipts)
• Payment processor — if and when paid plans are enabled; only what's necessary for billing
• Law enforcement — only if legally required by a valid court order or equivalent legal process

Account data is retained for as long as your account is active. If you delete your account, your account and subscription data are deleted from our servers within 30 days. Local data on your device is not affected — you control that entirely.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate account information (via Settings → Profile)
• Request deletion of your account and associated data
• Export a copy of your account data

To exercise any of these rights, email privacy@thebuilder.company. We will respond within 30 days.

Account data in transit is encrypted via TLS. Passwords are not stored — we use email OTP for authentication. API keys (OpenAI, Anthropic) you enter in Settings are stored only in a local JSON file on your device, never on our servers.

Because most of your data never leaves your device, the primary security boundary is your own machine. We recommend keeping your operating system and Aura up to date.

Aura Browser is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have inadvertently done so, contact us and we will delete it promptly.

We may update this policy as the product evolves. Significant changes will be announced via the in-app update notification or by email. The "last updated" date at the top of this page always reflects the most recent revision. Continued use after changes constitutes acceptance.