Privacy Policy

1. Introduction

Aurica Creative Inc. ("Aurica," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website, use our platform, or interact with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access auricacreative.com and app.auricacreative.com and any related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, professional discipline, and organization when you request access or create an account.
• Profile Information: Professional biography, portfolio links, skills, and other details you choose to add to your profile.
• Content: Projects, scripts, compositions, media files, and other creative works you upload or create on the Platform.
• Communications: Messages, feedback, and support requests you send to us or other users through the Platform.
• Payment Information: Billing details processed through our third-party payment processor. We do not store full credit card numbers on our servers.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, click patterns, and interaction data.
• Device Information: Browser type, operating system, screen resolution, device identifiers, and language preferences.
• Log Data: IP address, referral URLs, access times, and error logs.
• Cookies and Similar Technologies: See section 14. In short: the application sets a session cookie and short-lived sign-in cookies, our funnel measurement sets a 90-day first-party cookie and keeps a random visitor id in your browser's local storage, Vercel Analytics runs on this site without cookies, and we use no advertising cookies or advertising pixels.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Platform and its features
• Compute anonymized, aggregate benchmarks across members and return them to you: see section 6 for exactly what is included, the five-member floor that protects it, and how to opt out
• Process your account registration and manage your subscription
• Personalize your experience and deliver relevant content and recommendations
• Facilitate collaboration between users and manage project workflows
• Protect intellectual property rights and detect unauthorized use of creative works
• Send administrative communications, security alerts, and product updates
• Analyze usage patterns to improve Platform performance and develop new features
• Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize sharing with specific collaborators, teams, or organizations.
• Service Providers: With trusted third-party vendors who assist in operating the Platform (hosting, analytics, payment processing, customer support).
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice provided to you.
• Safety and Security: To protect the rights, safety, and property of Aurica, our users, or the public.

5. Third-Party Services and Sub-Processors

This is the list of services that receive your data, and what each one receives:

• Anthropic (Claude): the text you submit and the working context around it, including prompts, scene and script text, notes, and the profile and history the assistant needs to answer. Powers coaching narrative and document generation.
• OpenAI: audio you record, including self-tape audio, for transcription; and the text of your records, to organise and search them (embeddings). Also receives voice audio as a fallback for scene-condition analysis when the primary provider is unavailable.
• xAI (Grok): text you submit and your working context, only when model routing directs a request to it. An alternate model provider alongside Anthropic and OpenAI; not used by default.
• Hume AI: voice audio, for real-time scene-condition analysis in Scene Partner.
• ElevenLabs: text, for the read-aloud voices, including Scene Partner dialogue; and clips you choose to auto-caption in the Editing Bay, for transcription. ElevenLabs does not transcribe your self-tapes.
• Daily.co: live video and audio for coaching sessions. Coaching sessions are not available at launch, so Daily.co receives no member data until they open.
• Amazon Web Services (S3): storage of your uploaded recordings, audio, and documents.
• Railway: application hosting and the database that holds your account and your work.
• Vercel: hosting for this website and the founding-membership page, and the cookieless page-view and page-speed measurement (Vercel Analytics and Speed Insights) that runs on this website.
• TMDb: the titles of credits on your résumé, to enrich them with production metadata. Personal information is not sent.
• Resend: your email address and message contents, for transactional and account email.
• Stripe: payment processing. Aurica does not store card numbers.
• Sentry: error reports from the application and from your browser on this website, which may incidentally include identifiers such as your account id and technical details of your browser.
• Google: fonts, which your browser loads from Google Fonts when a page opens, so Google receives your IP address and browser details; and sign-in, if you choose to sign in with Google.
• Twilio: text messages, only if you turn on SMS: your phone number and the content of the messages.
• Your browser's speech service: if you use dictation, your browser sends your voice to its own speech recognition service (Google for Chrome, Apple for Safari). Aurica does not control that service.
• Google Calendar: calendar events you choose to sync, only after you connect your Google account.
• Brave Search: search queries, meaning the text you ask the assistant to search for, and, when it prepares an audition brief, the production title and role name from your own record. Your scripts, notes, and documents are not sent.
• Telegram: when you escalate a support conversation to the founder, the subject line and an excerpt of your message are delivered to him over Telegram. Support conversations you do not escalate are never sent.
• Your browser's push service (Google, Mozilla, or Apple, depending on your browser): if you turn on deadline and tape-viewed notifications, the notification is relayed to your device through it. The content is encrypted to your device before it leaves our servers; the push service can see that a message was delivered to you, not what it says.

Aurica does not train its own models on your content. We will update this list before any new sub-processor receives your data.

6. Population Intelligence

Aurica pools anonymized career patterns across its members and returns them to you as benchmarks: booking rate, callback rate, auditions per month, and the response patterns of the offices you submit to. This is the part of Aurica a single-user tool cannot do, and we would rather explain it than bury it.

What goes in: derived numbers from your activity, and the names of entities that are already shared across members: a production, a casting office. What never goes in: your scripts, your tapes, your notes, your documents, your messages, or anything you have written.

How it is protected: a pattern is computed only when at least five distinct members contribute to it. Below five, nothing is computed and nothing is shown. Where a signal is drawn from what other members did rather than from your own activity, your own rows are excluded from it. You are never named.

You are included by default. To be excluded from every benchmark Aurica computes, turn off "Include my career patterns in benchmarks" in Settings → Data & Privacy. This takes effect on the next computation.

Separately, Project Constellation is opt-in only. If you join, other members who have also joined can see the number of joined members on a production they are already on, and only when that number is three or more. It is reciprocal: you see these counts only while you are part of them. Your name is never shown. You can leave at any time.

7. Access by Aurica Personnel

Authorized Aurica personnel may access member data as needed to operate, support, and secure the Platform: to diagnose a fault, answer a support request, investigate abuse, or meet a legal obligation. Access is limited to the people who need it for those purposes. We do not read your work for any other reason.

Where a third party you have authorized, such as your representation under Roster Lens, views your materials, that access is recorded and readable by you.

8. Intellectual Property & Creative Works

We understand the unique sensitivity of creative content. Your creative works uploaded to the Platform remain your intellectual property, and we do not claim ownership of any content you create on the Platform. Our AI features process your content only to provide the specific service you requested. Aurica does not train its own models on your content.

9. Data Security

We implement industry-standard technical and organizational measures to protect your personal information: your data is encrypted in transit, and stored with infrastructure providers that encrypt it at rest. Authentication uses httpOnly cookies and hashed tokens, and every read and write is scoped to your account at the application layer. We conduct regular security reviews and maintain incident response procedures. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, your personal data and uploaded content is deleted within 30 days, except where retention is required by law (for example, billing records retained for seven years for tax compliance).

11. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing activities
• Request data portability (receive your data in a structured, machine-readable format)
• Withdraw consent where processing is based on consent
• Opt out of marketing communications at any time
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@auricacreative.com.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Those countries may have data protection laws different from those where you live. For questions about transfers, contact privacy@auricacreative.com.

13. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact privacy@auricacreative.com and we will take steps to delete it promptly.

14. Cookies and Similar Technologies

The Aurica application sets a session cookie to keep you signed in, plus short-lived cookies that hold sign-in state while you sign in, including with Google. All are first-party. It sets no advertising cookies or advertising pixels. The Stripe checkout flow may set Stripe's own cookies, governed by Stripe's privacy policy.

This website and the founding-membership page send first-party measurement events to app.auricacreative.com, for example that a page was viewed or that a reserve link was clicked, with the credentials your browser holds for that address. In reply, the Aurica platform sets a first-party cookie named aurica_ft. It lasts 90 days and holds a random visitor id and the campaign source that brought you here. Each site keeps a random visitor id in your browser's local storage under the key aurica_visitor_id, and this website adds its id to links to the founding page (as vid). Otherwise each site keeps its own id. The id is random and contains no name or email address. We use it to understand which pages lead to reservations.

Vercel Analytics and Speed Insights run on this website and measure page views and page speed without cookies. Sentry error monitoring runs in your browser on this website. Your browser loads fonts from Google Fonts, so Google receives your IP address and browser details when a page opens.

If your browser sends Do Not Track or Global Privacy Control, this website and the founding-membership page send no measurement events and create no visitor id. Vercel Analytics, which is cookieless, and error monitoring are not affected by that signal.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: