1. Who we are
AuraQuote ("AuraQuote," "we," "us") is a quoting and workflow-management platform that turns itemized plans into priced client proposals and operational dispatch sheets. It is commonly used by travel, event, and other service teams, but is not limited to any one industry; it is operated as an individual undertaking based in the United Arab Emirates (contact details in Section 12). This Policy explains what personal data we collect, why, and what rights you have.
We act in two different roles depending on whose data it is:
- Data controller for your own account data if you are a registered Customer — see Section 2.
- Data processor for the data your organization inputs about your own clients while using the Service — see Section 3. Your organization remains the controller of that data; our processing of it is governed by our Terms of Service.
2. Data we collect about you (our Customer)
| Category | Examples | Why |
|---|---|---|
| Account data | Organization name, your name, work email, hashed password, chosen language | Create and secure your account, run the workspace |
| Billing data | Plan tier, billing cycle, subscription status — full card details are handled directly by our payment processor and are never stored on our servers | Manage your subscription |
| Referral data | A referral code stored in your browser if you arrived via a partner link (first-touch, no expiry until you clear browser data) | Attribute sign-ups to the correct referral partner |
| Usage & log data | Login timestamps, IP address, device/browser type, actions taken in the product, audit trail of admin actions | Security, abuse prevention, support, product improvement |
3. Data your organization inputs about your clients ("Client Data")
To build plans and proposals, your team will typically enter information about your own clients — such as name, phone number, scheduled dates, party size, and preferences. This is your organization's data; we process it only to provide the Service to you (store it, calculate pricing, render the client-facing proposal and the operational dispatch sheet). We do not use Client Data for our own marketing, and we do not sell it.
The client-facing proposal page is accessible via a unique link and does not require the recipient to log in. When a recipient opens that link, we record lightweight engagement signals — open count, last-viewed time, time spent, which version was viewed — tied to the link/token, not to the recipient's identity, so your team can see whether a proposal has been read. This data is shown back to you (the Customer) inside the product.
4. Cookies and local storage
We use browser local storage (not third-party advertising cookies) for: keeping you logged in, remembering your language preference, storing referral attribution, and — for the reporting workspace specifically — caching itinerary edits made while offline so they can sync once your connection is restored. We do not currently run third-party advertising trackers on the product.
5. Who we share data with
We do not sell personal data. We share data with a limited set of sub-processors strictly to run the Service:
| Provider | Purpose | Data involved |
|---|---|---|
| Cloud infrastructure provider | Application hosting, database, and file storage | Account data and Client Data you input |
| Lemon Squeezy, Inc. | Payment processing | Billing data — we never receive your full card number |
We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, or property of AuraQuote, our Customers, or others.
6. International data transfers
We are based in the United Arab Emirates and our infrastructure runs on a global cloud network, with our primary database region in Asia-Pacific (Singapore). If you or your clients are located in the European Economic Area, United Kingdom, or another region with data-transfer restrictions, we take reasonable steps to ensure your data receives an adequate level of protection wherever it is processed.
7. Data retention
We retain account and Client Data for as long as your account is active. After account closure, we retain data for up to 30 days to allow export and recovery, after which it is deleted or anonymized, except where longer retention is required by law (e.g. billing records for tax purposes).
8. Your rights
Depending on where you are located, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; export your data in a portable format; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise these rights, use the contact details in Section 12. If your data was entered by a business using AuraQuote (i.e. you are their client, not our direct Customer), please contact that organization directly first, as they control that data; we will assist them in fulfilling your request.
9. Security
We use industry-standard measures to protect data in transit and at rest, including encrypted connections, encrypted data snapshots, and role-based access controls within each Tenant. No system is 100% secure, and we cannot guarantee absolute security.
10. Children's privacy
AuraQuote is a business tool intended for use by adults acting on behalf of a company. We do not knowingly collect personal data directly from children. Trip party details may reference minors traveling with a group (e.g. "2 adults, 1 child") as entered by our Customer; this is limited operational data, not an account held by a minor.
11. Changes to this Policy
We may update this Policy from time to time. For material changes, we will provide reasonable notice before they take effect.
12. Contact
Questions about this Policy or your data: support@auraquote.com.
本中文版为方便阅读而提供的译文，如与英文版存在差异，以英文版为准。
1. 我们是谁
AuraQuote（以下称“AuraQuote”“我们”）是一个报价与工作流管理平台，可以把逐项列出的方案变成带价格的客户提案和内部执行的派工单。它常被旅行、活动及其他服务类团队使用，但并不限于某一个行业；我们以个人经营者的身份运营，主要所在地为阿拉伯联合酋长国（联系方式见第 12 节）。本政策说明我们收集哪些个人数据、为什么收集，以及您享有哪些权利。
根据数据是谁的，我们扮演两种不同的角色：
- 对于您自己的账号数据（如果您是注册客户），我们是数据控制者——见第 2 节。
- 对于您所在组织在使用服务时录入的、关于您自己客户的数据，我们是数据处理者——见第 3 节。这类数据的控制者仍然是您所在的组织；我们对它的处理受《服务条款》约束。
2. 我们收集的关于您（我们的客户）的数据
| 类别 | 示例 | 用途 |
|---|---|---|
| 账号数据 | 组织名称、您的姓名、工作邮箱、加密后的密码、所选语言 | 创建并保护您的账号、运行工作空间 |
| 账单数据 | 套餐档位、计费周期、订阅状态——完整的银行卡信息由我们的支付处理方直接处理，绝不会存储在我们的服务器上 | 管理您的订阅 |
| 推荐数据 | 如果您是通过合作伙伴的链接访问的，您浏览器中会保存一个推荐码（首次触达归因，在您清除浏览器数据之前不会过期） | 把注册归属到正确的推荐合作伙伴 |
| 使用与日志数据 | 登录时间、IP 地址、设备 / 浏览器类型、您在产品中的操作、管理员操作的审计记录 | 安全、防止滥用、客户支持、改进产品 |
3. 您所在组织录入的关于您客户的数据（“客户数据”）
为了制作方案和提案，您的团队通常会录入关于您自己客户的信息——例如姓名、电话号码、行程日期、人数和偏好。这是您所在组织的数据；我们只为向您提供服务而处理它（存储、计算价格、生成面向客户的提案页和内部执行的派工单）。我们不会把客户数据用于我们自己的营销，也不会出售它。
面向客户的提案页可以通过唯一的链接访问，收件人不需要登录。收件人打开链接时，我们会记录一些轻量的互动信号——打开次数、最近查看时间、停留时长、看的是哪个版本——这些信号关联的是链接 / 令牌，而不是收件人的身份，这样您的团队就能知道提案有没有被看过。这些数据只会在产品内展示给您（客户）。
4. Cookie 与本地存储
我们使用浏览器本地存储（而不是第三方广告 Cookie），用途包括：保持您的登录状态、记住您的语言偏好、保存推荐归因，以及——专门针对报价工作台——缓存您离线时所做的行程编辑，待网络恢复后再同步。我们目前不在产品中运行任何第三方广告追踪器。
5. 我们与谁共享数据
我们不出售个人数据。我们仅为运行服务而与少数几个子处理方共享数据：
| 服务商 | 用途 | 涉及的数据 |
|---|---|---|
| 云基础设施提供商 | 应用托管、数据库和文件存储 | 账号数据和您录入的客户数据 |
| Lemon Squeezy, Inc. | 支付处理 | 账单数据——我们不会收到您完整的银行卡号 |
在法律要求、为执行我们的条款，或为保护 AuraQuote、我们的客户或他人的权利、安全或财产时，我们也可能披露数据。
6. 跨境数据传输
我们的主要所在地是阿拉伯联合酋长国，基础设施运行在全球化的云网络上，主数据库位于亚太地区（新加坡）。如果您或您的客户位于欧洲经济区、英国或其他对数据传输有限制的地区，我们会采取合理措施，确保您的数据无论在哪里被处理，都能得到充分的保护。
7. 数据保留
只要您的账号处于有效状态，我们就会保留账号数据和客户数据。账号关闭后，我们最多再保留 30 天，供您导出和恢复，之后会将其删除或匿名化；法律要求保留更久的除外（例如出于税务目的的账单记录）。
8. 您的权利
根据您所在的地区，您可能享有以下权利：查阅我们持有的关于您的个人数据；更正不准确的数据；要求删除；以可移植的格式导出您的数据；反对或限制某些处理；以及在处理基于同意时撤回同意。如需行使这些权利，请使用第 12 节中的联系方式。如果您的数据是由使用 AuraQuote 的某家企业录入的（也就是说您是他们的客户，而不是我们的直接客户），请先直接联系该组织，因为该数据由他们控制；我们会协助他们完成您的请求。
9. 安全
我们采用业界标准的措施保护传输中和存储中的数据，包括加密连接、加密的数据快照，以及每个租户内部基于角色的访问控制。没有任何系统是百分之百安全的，我们不能保证绝对的安全。
10. 儿童隐私
AuraQuote 是面向成年人、代表公司使用的商业工具。我们不会有意直接从儿童处收集个人数据。行程的人员信息中可能会提到随团出行的未成年人（例如“2 位成人，1 位儿童”），这是由我们的客户录入的、范围有限的运营数据，并不是由未成年人持有的账号。
11. 本政策的变更
我们可能会不时更新本政策。对于重大变更，我们会在其生效前提供合理的通知。
12. 联系我们
对本政策或您的数据有疑问：support@auraquote.com。