Scope and operator
This notice applies to the public Aura marketing website operated by ParaThoughtLabs in Texas, United States. Mobile-account and app data are covered separately by the Aura App Privacy Policy. Aura is in closed alpha testing on iOS and Android. Marketing-gallery imagery uses licensed stock media and contains no customer account information.
Privacy questions may be sent to privacy@parathoughtlabs.com.
Information processed
Contact form submissions may include your name, email address, organization, inquiry type, message, consent selection, and a unique submission identifier used to prevent duplicate delivery. Do not include passwords, payment data, government identifiers, health information, or other sensitive personal information in the message.
Content-permission and copyright requests may also include your name, email, mailing address, phone number, identified content, statements of authority, electronic signature, selected permissions, and verification or case references. Provide only information needed for the request. These details are used to verify requests, record permission, and handle content-rights disputes. As disclosed on the form, relevant notices and contact details may be shared with affected parties when needed to handle a request.
Like nearly every hosted website, the hosting and security provider may also process technical request information needed to deliver and protect the site and form endpoint. This can include:
- IP address and approximate city or country derived from it;
- requested page, date and time, response status, and request identifier;
- browser, device, operating-system, language, and user-agent information; and
- security and firewall events used to prevent abuse and denial-of-service attacks.
ParaThoughtLabs does not combine contact or technical information with an Aura profile, because this website has no account system.
Why it is processed
Technical request information is processed only to deliver requested pages, maintain availability and security, prevent abuse, and diagnose operational failures. Contact information is processed to respond to the inquiry you requested, evaluate a potential investment or business relationship, maintain necessary correspondence, and protect the form from abuse. It is not added to a marketing list through this form.
Where European or UK data-protection law applies, these purposes rely on steps requested before a potential relationship, consent where applicable, and legitimate interests in communicating, operating, and protecting the website, subject to visitors’ rights and applicable legal obligations.
Service provider and transfers
Vercel Inc. is the deployment provider that delivers site files and runs the server-side form endpoint in addition to providing network, firewall, and deployment infrastructure. Vercel may process end-user IP addresses, IP-derived location, request, device, form, and security information under its own contractual and privacy terms.
Resend is the email-delivery provider for contact submissions. It receives the form fields needed to deliver the inquiry to ParaThoughtLabs and may process message delivery metadata.
Amazon Web Services stores protected content-permission and copyright case records and supports their verification and review workflows. These services do not enable optional usage analytics.
Processing may occur in the United States or other locations where Vercel, Resend, and their subprocessors operate. Before directing the site to jurisdictions that require transfer safeguards, ParaThoughtLabs must confirm the applicable data-processing agreements and transfer mechanisms.
Retention
Restricted permission and copyright records are retained to administer the permission or request and address disputes or legal obligations. Their retention depends on the active permission, open case, and any applicable legal hold, rather than the ordinary contact-inbox period. You can request a review through Privacy Choices.
Contact submissions are delivered to the monitored ParaThoughtLabs inbox and are retained for up to 24 months after the last response unless a legal, security, contractual, or dispute record requires a longer period. Email delivery metadata follows the configured Resend retention settings and provider terms and must be reviewed at least annually.
If you opt in, selected page and feature events are sent to PostHog in the United States. Free-plan analytics retention is up to one year; feedback is retained for up to 90 days in Aura and subject to provider retention. Hosting, runtime, and security records follow the selected Vercel plan, security settings, and provider retention rules.
Cookies and tracking
Aura uses local storage to remember your analytics choice. Optional usage analytics uses PostHog with an in-memory session identifier. It excludes contact form text, full URLs and query strings, and does not use session replay, advertising identifiers or fingerprinting.
A hosting or security provider may use mechanisms that are strictly necessary to deliver or protect the service. Those mechanisms cannot be used by Aura for advertising or cross-site profiling under the current website configuration.
Sale, sharing, and targeted advertising
ParaThoughtLabs does not sell website visitor information, share it for cross-context behavioral advertising, or use it for targeted advertising. Therefore, this website does not currently display a “Do Not Sell or Share My Personal Information” control. This conclusion must be reviewed before using contact submissions for marketing, adding advertising or tracking, or introducing data partnerships.
Children
This marketing website is intended for a general audience and is not directed to children under 13. Children should not use the contact form. ParaThoughtLabs does not knowingly collect personal information from children through this site. Sample family-event and profile examples do not create website accounts. The mobile alpha testing program is restricted to adults and does not offer child profiles.
If you believe a child submitted information by form or email, contact privacy@parathoughtlabs.com so the request can be reviewed and, when appropriate, deleted.
Your privacy choices and rights
Depending on where you live and whether a law applies to ParaThoughtLabs, you may have rights to request access, correction, deletion, restriction, portability, or objection concerning your personal information, and to appeal or complain to a privacy regulator. You may submit a request to Privacy Choices or privacy@parathoughtlabs.com. Identity verification may be required before responding to a request.
Aura does not discriminate against a visitor for exercising an applicable privacy right. Because the website has no user account, the information that can be matched to an individual should be limited to contact correspondence and associated delivery or security records.
Changes to this notice
The effective date will change when this notice is materially updated. A prominent notice or consent request will be added before a new practice requires it. The separate Aura App Privacy Policy must be reviewed against the final signed mobile releases and deployed providers before public launch. Mobile-account deletion requests are available at the account deletion page.