What Aunara keeps, and why.

What we collect

• Your Google sign-in: your name, email address and Google account ID. Never your Google password.
• Your business: what you tell Aunara and the files and sources you share, and the records, documents and conversations that come from them.
• Connected services: what a connection you approve gives access to, such as the emails Aunara sends for you or your Stripe balance activity.
• Access requests: your email, your company’s name and when you agreed to be contacted.
• Technical data: your IP address, held briefly in memory to limit repeated sign-in and request attempts, and records of each model call (time, size and cost, not its content) for budgets and billing.

Cookies

Aunara sets only the cookies it needs to sign you in: a session cookie, and short-lived cookies that tie a Google sign-in or a new sign-up to your browser. There are no advertising or analytics cookies.

How we use it

To run Aunara for you, to keep accounts and businesses separate and secure, to answer your support requests, and to meet legal duties. We don’t sell your data, use it for advertising, or use your business data to train AI models.

Who processes it for us

Aunara works with a few providers, each only for its part:

• Cloudflare hosts the website and the app.
• A managed PostgreSQL database stores your account and business data.
• An AI model provider (through OpenRouter) receives the conversation and business context needed to prepare each reply.
• Google signs you in; Gmail sends email when you connect it.
• Resend delivers invitations and notices; Nango holds the connections you approve; Stripe handles payments once plans start.

What the Aunara team can see

Support sees the support requests you open, with the references they carry, and technical records of work that failed or is held. Your conversations are not shown to the team by default.

How long we keep it

Account and workspace retention periods, deletion handling and backup expiry remain open decisions for public release. This draft does not promise a deletion deadline or an automated deletion feature. Contact null@nullsquare.net with a privacy request.

Your choices

You can see and correct your business data in Aunara, export it, disconnect services, and ask for your account or your business’s data to be deleted. Ask through Help & support in your workspace.

Children

Aunara is for businesses and is not meant for anyone under 18.

Changes

If we change this policy in a way that matters, we will tell you in the app before it applies.

Who operates this app

This app is operated by NullSquare, Inc. For privacy questions and requests, contact null@nullsquare.net.

Google sign-in

When Google sign-in is available and you choose it, Google provides the identity information authorized by the request, such as your Google account identifier, verified email address, name and profile picture. We use that information to verify your sign-in and associate it with the correct app account. We do not receive your Google password.

Basic Google sign-in does not authorize access to Gmail, Drive, Calendar or contacts. An optional Google service connection requires a separate authorization. Signing in does not grant an invitation, role, subscription or access to another person’s data.

You can revoke the app’s authorization in your Google Account settings. Revocation does not automatically delete app records already held. Contact null@nullsquare.net to ask about access, correction or deletion. Google handles its part of sign-in under Google’s privacy policy.