Privacy Policy

Auralis ("we", "us", or "our") operates the website helloauralis.com and builds AI systems for owner-operated service businesses. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Dutch and EU privacy laws.

01Data Controller

Auralis (operated by Matei Câmpean)
Tilburg, Netherlands
Contact: matei@helloauralis.com

02What Data We Collect

We may collect the following data:

• Contact information: name, email address, phone number, business name
• Communication data: emails, call recordings, chat messages exchanged during discovery calls or service delivery
• Website usage data: IP address, browser type, pages visited (via cookies or analytics tools)
• Business data: customer messages, order data, retention metrics, and other operational data processed through the Auralis Operating System on behalf of our clients

03How We Use Your Data

• To provide, maintain, and improve the Auralis Operating System and supporting services
• To communicate with you about our services, including responding to inquiries
• To process customer interactions, orders, and operational events on behalf of our clients
• To send service-related notifications (deployment status, system alerts, scheduled reports)
• To comply with legal obligations

04Legal Basis for Processing

We process your data based on:

• Contract performance: to deliver services you or your business have engaged us for
• Legitimate interest: to improve our services and communicate relevant information
• Consent: where explicitly given, such as for marketing communications
• Legal obligation: to comply with applicable laws and regulations

05Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: hosting (Netlify, Hetzner), AI infrastructure (Anthropic, ElevenLabs, OpenAI, Higgsfield), email (Google Workspace), workflow orchestration (n8n), database (Airtable / Supabase), telephony (Twilio), and CRM tools that help us deliver the Operating System
• Our clients: conversation, order, and operational data processed on their behalf
• Legal authorities: when required by law

06Data Retention

We retain personal data only as long as necessary for the purposes described above, or as required by law. When data is no longer needed, it is securely deleted.

07Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at matei@helloauralis.com.

08Cookies and Analytics

Strictly necessary storage. We use a small number of browser-storage keys (localStorage) to remember your language, your cookie choice, and — if you start the audit — your progress so you can continue where you left off. When you pick a language with the EN | RO switch, one cookie (au_en or au_ro) also remembers that choice for up to a year, so the site opens in your language next time; it holds nothing but the choice itself. None of this is shared.

Analytics. We use Google Analytics 4 to understand how many people find this site and which pages they read. It is loaded only after you accept on the cookie banner: if you decline, or have not yet chosen, nothing is loaded and no data reaches Google. When enabled, Google Ireland Limited / Google LLC acts as a processor and may transfer data to the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. We collect no advertising data, run no advertising, and Google Signals and ad personalisation are disabled.

Changing your mind. You can withdraw or grant consent at any time — it takes one click and applies immediately.

Manage cookie preferences

09Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction. All data in transit and at rest is encrypted. Servers are located in the European Union.

10Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated, and the updated date posted at the top of this page.

11Contact

For questions about this Privacy Policy or your personal data, contact:
matei@helloauralis.com

12Free AI Audit ("Leak Finder")

English — If you complete the free AI audit on this site, we collect your answers about how your business operates, plus the contact details you enter (name, business name, website, email, phone) and your consent timestamp. We use this data to: (1) generate your audit results and personalized AI roadmap, (2) contact you about them if you asked us to, and (3) prepare for a call you book. Some follow-up questions in the audit are generated live by an AI model — you are told this before you start. If you provide your website or public social page address, we read its publicly available pages (exactly what any visitor sees — never behind a login) to prepare the audit; we never ask for passwords, account access, or your customers’ personal data. Processing runs on our EU infrastructure (Hetzner, Germany); the AI analysis is performed by Anthropic (USA, under a Data Processing Agreement) and session records may be stored in Airtable (USA, certified under the EU–US Data Privacy Framework). Your answers are never sold and never used to train AI models. Audit sessions are retained for up to 12 months, then deleted; you can request deletion at any time at matei@helloauralis.com. Cost figures shown in your results are conservative estimates derived from your own answers, not measurements.

Română — Dacă completezi auditul AI gratuit de pe acest site, colectăm răspunsurile tale despre cum funcționează afacerea, plus datele de contact introduse (nume, numele afacerii, website, email, telefon) și momentul consimțământului. Folosim aceste date pentru: (1) generarea rezultatelor auditului și a planului AI personalizat, (2) contactarea ta în legătură cu ele, dacă ai cerut asta, și (3) pregătirea apelului pe care îl rezervi. Unele întrebări de continuare din audit sunt generate pe loc de un model AI — ești informat despre asta înainte de start. Dacă ne dai adresa site-ului sau a paginii publice de social media, citim paginile ei publice (exact ce vede orice vizitator — niciodată în spatele unui login) pentru pregătirea auditului; nu cerem niciodată parole, acces la conturi sau date personale ale clienților tăi. Prelucrarea rulează pe infrastructura noastră din UE (Hetzner, Germania); analiza AI este realizată de Anthropic (SUA, în baza unui Acord de Prelucrare a Datelor), iar sesiunile pot fi stocate în Airtable (SUA, certificat EU–US Data Privacy Framework). Răspunsurile tale nu se vând niciodată și nu sunt folosite pentru antrenarea modelelor AI. Sesiunile de audit se păstrează maximum 12 luni, apoi se șterg; poți cere ștergerea oricând la matei@helloauralis.com. Cifrele din rezultate sunt estimări conservatoare derivate din propriile tale răspunsuri, nu măsurători.

13Emails to businesses / Emailuri către firme

Română — Din când în când scriu, o singură dată și cu cel mult două mesaje de urmărire, firmelor de servicii din România cu care cred că pot lucra. Adresa de email o iau exclusiv din pagina de contact publicată de firma respectivă pe propriul site — niciodată din liste cumpărate — și fiecare mesaj spune de pe ce site a fost luată. Scriu doar la adresele generale ale firmelor (office@, contact@ și altele asemenea), nu persoanelor fizice. Operator: Matei Câmpean (Auralis), Tilburg, Olanda. Temeiul prelucrării: interesul legitim de a propune servicii unei firme la adresa ei de contact publică (art. 6 alin. (1) lit. f GDPR). Ce păstrez: adresa, numele firmei, site-ul, pagina de pe care am luat adresa, data fiecărui mesaj și orice răspuns — maximum 12 luni. Ca să nu mai primiți mesaje: răspundeți cu STOP la oricare dintre ele și adresa intră imediat pe lista de excludere, pe toate canalele; lista aceea se păstrează pe termen nelimitat, doar ca să nu vă mai scriu. Puteți scrie și la matei@helloauralis.com. Nu folosesc pixeli de deschidere și nu urmăresc clicurile din aceste mesaje. Aveți dreptul de acces, rectificare, ștergere și opoziție, și dreptul de a depune o plângere la ANSPDCP (dataprotection.ro) sau la Autoriteit Persoonsgegevens.

English — From time to time I write, once and with at most two follow-ups, to Romanian service businesses I believe I can work with. The email address comes exclusively from the contact page that business published on its own website — never from purchased lists — and every message says which site it was taken from. I write only to a firm's general addresses (office@, contact@ and the like), never to private individuals. Controller: Matei Câmpean (Auralis), Tilburg, the Netherlands. Legal basis: the legitimate interest of proposing services to a business at its public contact address (Art. 6(1)(f) GDPR). What I keep: the address, the business name, the website, the page the address was taken from, the date of each message and any reply — for at most 12 months. To stop receiving messages: reply STOP to any of them and the address goes on the exclusion list immediately, across every channel; that list is kept indefinitely, solely so that I never write to you again. You can also write to matei@helloauralis.com. No open pixels and no click tracking are used in these messages. You have the right of access, rectification, erasure and objection, and the right to lodge a complaint with ANSPDCP (dataprotection.ro) or the Autoriteit Persoonsgegevens.