Privacy Policy

Last updated: August 31, 2026

1. Introduction

AuraSend ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at aurasend.vercel.app or use our email outreach platform.

2. Google User Data & Gmail API Limited Use Disclosure

AuraSend connects with Google OAuth and the Gmail API to allow users to send automated outreach emails, track replies, and monitor sending health.

  • Usage Scopes: We request only the minimum necessary Google OAuth scopes (`openid`, `email`, `profile`, `gmail.send`, `gmail.readonly`, `gmail.modify`) to authenticate users and enable email operations authorized by the user.
  • No Data Selling or Advertising: AuraSend does NOT sell, rent, or trade Google user data to any third party. Google user data is NEVER used for serving advertisements or training AI models without explicit opt-in.
  • Limited Use Requirement: AuraSend's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Information We Collect

We collect information that you voluntarily provide when registering an account, integrating email inboxes, or communicating with us:

  • Account Information: Name, email address, password hash, role, and billing details.
  • Connected Inbox Credentials: OAuth refresh tokens, access tokens, and optional SMTP settings (all stored encrypted with AES-256).
  • Lead & Campaign Data: Lead emails, custom template content, sending logs, and reply status.
  • Technical & Log Data: IP address, browser type, device information, and interaction logs.

4. How We Use Your Information

We use the collected information for the following legitimate business purposes:

  • To provide, maintain, and operate the AuraSend platform services.
  • To authenticate user sign-in and maintain secure user sessions.
  • To execute email drip sequences and warmup schedules requested by the user.
  • To calculate analytics, bounce rates, and inbox health statistics.
  • To prevent fraud, abuse, and violations of our Terms of Service.

5. Data Storage & Security

We implement industry-standard administrative, technical, and physical security controls to safeguard your personal data. All OAuth tokens and sensitive keys are encrypted at rest using AES-256-GCM. Connections are secured using SSL/TLS 1.3 encryption.

6. Data Retention & Deletion

You may disconnect your Google account or delete your AuraSend profile at any time through your Account Settings. Upon account deletion, all associated access tokens, lead records, and campaign logs are permanently purged from our primary production databases within 30 days.

7. Contact Us

If you have any questions or privacy inquiries, contact us at: support@aurasend.com