Privacy Policy

1. Introduction

Aurica Creative Inc. ("Aurica," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website, use our platform, or interact with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access aurica.app and any related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, professional discipline, and organization when you request access or create an account.
• Profile Information: Professional biography, portfolio links, skills, and other details you choose to add to your profile.
• Content: Projects, scripts, compositions, media files, and other creative works you upload or create on the Platform.
• Communications: Messages, feedback, and support requests you send to us or other users through the Platform.
• Payment Information: Billing details processed through our third-party payment processor. We do not store full credit card numbers on our servers.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, click patterns, and interaction data.
• Device Information: Browser type, operating system, screen resolution, device identifiers, and language preferences.
• Log Data: IP address, referral URLs, access times, and error logs.
• Cookies and Similar Technologies: See section 14. In short: a single authentication cookie in the application, no third-party tracking or advertising cookies anywhere, and cookieless analytics on this site.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Platform and its features
• Compute anonymized, aggregate benchmarks across members and return them to you: see section 6 for exactly what is included, the five-member floor that protects it, and how to opt out
• Process your account registration and manage your subscription
• Personalize your experience and deliver relevant content and recommendations
• Facilitate collaboration between users and manage project workflows
• Protect intellectual property rights and detect unauthorized use of creative works
• Send administrative communications, security alerts, and product updates
• Analyze usage patterns to improve Platform performance and develop new features
• Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize sharing with specific collaborators, teams, or organizations.
• Service Providers: With trusted third-party vendors who assist in operating the Platform (hosting, analytics, payment processing, customer support).
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice provided to you.
• Safety and Security: To protect the rights, safety, and property of Aurica, our users, or the public.

5. Third-Party Services and Sub-Processors

This is the complete list of services that receive your data, and what each one receives:

• Anthropic (Claude): the text you submit and the working context around it — prompts, scene and script text, notes, and the profile and history the assistant needs to answer. Powers coaching narrative and document generation.
• OpenAI: audio you record, for transcription. Also receives voice audio as a fallback for scene-condition analysis when the primary provider is unavailable.
• xAI (Grok): text you submit and your working context, only when model routing directs a request to it. An alternate model provider alongside Anthropic and OpenAI; not used by default.
• Hume AI: voice audio, for real-time scene-condition analysis in Scene Partner.
• ElevenLabs: text, for speech synthesis of Scene Partner dialogue; and self-tape video and audio, for transcription.
• Daily.co: live video and audio during coaching sessions.
• Amazon Web Services (S3): storage of your uploaded recordings, audio, and documents.
• Railway: application hosting and the database that holds your account and your work.
• TMDb: the titles of credits on your résumé, to enrich them with production metadata. Personal information is not sent.
• Resend: your email address and message contents, for transactional and account email.
• Stripe: payment processing. Aurica does not store card numbers.
• Sentry: error reports from the application, which may incidentally include identifiers such as your account id.
• Google Calendar: calendar events you choose to sync, only after you connect your Google account.
• Brave Search: search queries — the text you ask the assistant to search for, and, when it prepares an audition brief, the production title and role name from your own record. Your scripts, notes, and documents are not sent.
• Telegram: when you escalate a support conversation to the founder, the subject line and an excerpt of your message are delivered to him over Telegram. Support conversations you do not escalate are never sent.
• Your browser's push service (Google, Mozilla, or Apple, depending on your browser): if you turn on deadline and tape-viewed notifications, the notification is relayed to your device through it. The content is encrypted to your device before it leaves our servers; the push service can see that a message was delivered to you, not what it says.

Our AI providers' commercial terms prohibit training on API data by default; we are formalizing data processing agreements with each sub-processor. We will update this list before any new sub-processor receives your data.

6. Population Intelligence

Aurica pools anonymized career patterns across its members and returns them to you as benchmarks: booking rate, callback rate, auditions per month, and the response patterns of the offices you submit to. This is the part of Aurica a single-user tool cannot do, and we would rather explain it than bury it.

What goes in: derived numbers from your activity, and the names of entities that are already shared across members: a production, a casting office. What never goes in: your scripts, your tapes, your notes, your documents, your messages, or anything you have written.

How it is protected: a pattern is computed only when at least five distinct members contribute to it. Below five, nothing is computed and nothing is shown. Where a signal is drawn from what other members did rather than from your own activity, your own rows are excluded from it. You are never named.

You are included by default. To be excluded from every benchmark Aurica computes, turn off "Include my career patterns in benchmarks" in Settings → Data & Privacy. This takes effect on the next computation.

Separately, Project Constellation is opt-in only. If you join, other members who have also joined can see the number of joined members on a production they are already on, and only when that number is three or more. It is reciprocal: you see these counts only while you are part of them. Your name is never shown. You can leave at any time.

7. Access by Aurica Personnel

Authorized Aurica personnel may access member data as needed to operate, support, and secure the Platform: to diagnose a fault, answer a support request, investigate abuse, or meet a legal obligation. Access is limited to the people who need it for those purposes. We do not read your work for any other reason.

Where a third party you have authorized, such as your representation under Roster Lens, views your materials, that access is recorded and readable by you.

8. Intellectual Property & Creative Works

We understand the unique sensitivity of creative content. Your creative works uploaded to the Platform remain your intellectual property. We do not use your creative content to train machine learning models, and we do not claim ownership of any content you create on the Platform. Our AI features process your content only to provide the specific service you requested, and this processing is done in real-time without persistent storage of your creative works in training datasets.

9. Data Security

We implement industry-standard technical and organizational measures to protect your personal information: your data is encrypted in transit, and stored with infrastructure providers that encrypt it at rest. Authentication uses httpOnly cookies and hashed tokens, and every read and write is scoped to your account at the application layer. We conduct regular security reviews and maintain incident response procedures. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, your personal data and uploaded content is deleted within 30 days, except where retention is required by law (for example, billing records retained for seven years for tax compliance).

11. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing activities
• Request data portability (receive your data in a structured, machine-readable format)
• Withdraw consent where processing is based on consent
• Opt out of marketing communications at any time
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@auricacreative.com.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

13. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact privacy@auricacreative.com and we will take steps to delete it promptly.

14. Cookies

The Aurica application uses a single httpOnly session cookie for authentication. It sets no third-party tracking cookies, advertising pixels, or analytics cookies. The Stripe checkout flow may set Stripe's own cookies, governed by Stripe's privacy policy.

This website and the founding-membership page use cookieless, privacy-preserving analytics: page views are counted in aggregate, and no cookie or cross-site identifier is set.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: