Private by default.
Explicit when saved.
This page describes the product’s current technical behaviour. It will be reviewed with formal legal terms as the pilot matures.
AI inquiries and Zero Data Retention
Model-backed requests require sign-in, are bounded, credit-metered and sent through narrowly scoped credentials. Consensus traffic runs primarily on the Groq API, where Groq processes request content as a data processor under its own services agreement; OpenRouter fallback routes remain Zero Data Retention (ZDR) required, and if no eligible route is available the request fails rather than using an unapproved endpoint. AuraUnited does not store consensus prompts or answers in D1.
What ZDR covers
ZDR controls the model-provider route selected by OpenRouter. It does not cover optional plugins, tools or external services a customer separately chooses to enable. Those services may have their own data practices. Free-model availability may also change; privacy requirements take priority over automatic fallback.
Abuse prevention
AuraUnited has no analytics, advertising pixels, device fingerprinting or session replay. A public website cannot receive your device’s MAC address. For registration and request limits, the Cloudflare connecting address is transformed in memory with a secret-keyed one-way digest; only the temporary digest and counter are stored, and expired counters are deleted.
Private planning session
The Goal Map, milestone packages and PDF brief are assembled in the browser. AuraUnited does not save that project, and the planning flow does not send it to a model service.
Saved Workspace
Signed-in customers must deliberately select Saved Workspace and press Save. The approved goal, answers, milestones and outcome history are then stored against the Site-specific account identifier.
GitHub comprehension
Customers choose the repositories GitHub may expose. AuraUnited requests repository contents read-only, excludes common secret and generated files, redacts detected credential patterns and does not store source files in its database. Reports remain in the current browser session during the pilot.
Repository model processing
When repository comprehension is activated, a bounded, redacted evidence set is sent through the same ZDR-constrained provider routing. AuraUnited does not enable model-side response storage. A request is rejected when no eligible ZDR endpoint is available.
Payments and refunds
Credit packs are paid through the Stripe hosted checkout in EUR. AuraUnited stores the Checkout reference, account ownership, payment status, credit quantity and the tax breakdown Stripe reports, but never card details. VAT is collected by Stripe where applicable. A self-service refund within 24 hours removes the purchased credits. No subscription and no recurring charge is created.