Privacy Policy
Last updated: November 3, 2026
This Privacy Policy explains how Aulra Tech Solutions LLC ("Aulra," "we," "us") collects, uses and shares information when you use aulravoice.com, listen.aulravoice.com and related services (the "Service").
1. The short version
- Nothing is recorded. We do not record or store the audio of broadcasts, transcripts or translations. They are processed in real time to produce the translation and then discarded. Our logs do not contain what was said.
- Listeners do not create accounts and we do not ask them for names, emails or payment.
- We do not sell or share personal information for cross-context behavioral advertising, and we do not use advertising or analytics trackers.
- Payments are handled by Stripe; we never see your full card number.
2. Information we collect
2.1 Organization owners and operators (account holders)
| Category | Examples | Source |
|---|---|---|
| Identifiers and account data | name of the organization, email address, password (stored hashed by our authentication provider), two-factor authentication secret, hashed recovery codes, role (owner or operator) | You |
| Commercial and billing information | subscription status, invoices, usage in language-seconds, credit balance and purchases; from Stripe: card brand, last four digits, expiration, a card fingerprint used to enforce one free trial per card | You and Stripe |
| Broadcast metadata | start and end time, duration, target languages, translation seconds used, engine and voice settings, the listener link token | Generated by the Service |
| Security and technical data | IP address, browser and device information, sign-in events, anti-bot signals from the CAPTCHA (Cloudflare Turnstile) | Your device and our providers |
| Communications | messages you send to support; delivery status of emails we send you | You and our email provider |
2.2 Listeners
Listeners open a link or scan a QR code. We do not ask for any personal information. To deliver audio, our servers necessarily process the listener's IP address and basic connection information, which we do not combine with other data and keep only in short-lived technical logs. We do not identify individual listeners; we keep only aggregate counts, such as the peak number of listeners of a broadcast.
2.3 Broadcast audio and its translation
The voice captured by the operator is streamed to our servers and to our AI providers to be transcribed, translated and turned into speech, and the result is streamed to listeners. We do not store this audio, text or translated speech. Our AI providers process it under their API terms, which may permit temporary retention for abuse and misuse monitoring (see section 5). Organizations should let speakers know their speech is being translated by an automated service.
2.4 Browser storage
We use your browser's local storage for your session sign-in and for preferences such as theme and chosen language. We do not use advertising cookies or third-party analytics.
3. How we use information
- To provide, secure and maintain the Service: authenticate users, run broadcasts, deliver translations, measure usage and enforce the free trial and credit balance.
- To bill you through Stripe and send account, billing and security emails (for example: invitations, trial ending, payment failed, credits running low).
- To prevent fraud and abuse, including duplicate free trials and automated sign-ups.
- To comply with law and enforce our Terms.
- To improve the Service using aggregated, non-content data (for example, total minutes translated). We do not use broadcast content to train AI models; our AI providers state that API data is not used to train their models by default.
4. How we share information
We do not sell personal information and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA. We disclose information only to:
Service providers and subprocessors, under contracts that limit their use of the data to providing services to us:
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe, Inc. | Payment processing, subscriptions, invoices, card validation | Billing contact, payment card (held by Stripe), usage amounts |
| OpenAI, L.L.C. | Speech recognition, translation and speech synthesis during a broadcast | Broadcast audio and text, in real time |
| Anthropic, PBC | Translation during a broadcast, when used by the translation engine | Broadcast text, in real time |
| Supabase, Inc. | Database and authentication | Account, billing status and broadcast metadata |
| Fly.io, Inc. | Application hosting for the translation server | Broadcast stream in transit, technical logs |
| Cloudflare, Inc. | Website hosting, security and CAPTCHA (Turnstile) | Website requests, IP address, anti-bot signals |
| Resend, Inc. | Transactional email delivery | Email address and email content |
Legal and safety reasons: to comply with law, a subpoena or court order; to protect the rights, property or safety of Aulra, our users or others.
Business transfers: in a merger, acquisition, financing or sale of assets, subject to this Policy.
Within your organization: owners can see their operators' names and emails. Operators cannot see billing amounts.
5. AI providers and "nothing is recorded"
Aulra itself keeps no copy of broadcast content. Our AI providers receive broadcast audio or text only to return the translation. Under their standard API terms, providers may retain API inputs and outputs for a limited period (for example, up to 30 days) solely to detect abuse, and state that API data is not used to train their models by default. We will update this section if those terms change.
6. Retention
| Data | Retention |
|---|---|
| Broadcast audio, transcripts, translations | Not stored by Aulra |
| Account data | While the account exists, and for a reasonable period after closure, unless longer retention is required by law |
| Billing records and broadcast metadata | As long as needed for accounting and tax law |
| Payment events received from Stripe | Payload cleared after 90 days; the event record is kept for auditing |
| Technical and security logs | A limited period |
| Card fingerprints (one trial per card) | While needed to prevent trial abuse |
7. Security
We use encryption in transit, mandatory two-factor authentication for account holders, row-level access controls in our database, and least-privilege access for our staff and providers. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you as required by law.
8. Children's privacy (COPPA)
The Service is intended for organizations and is not directed to children under 13. Account holders (owners and operators) must be 18 or older, and we do not knowingly collect personal information from children under 13.
Events using Aulra may have listeners of any age, including children (for example, at a school or a place of worship). Listeners do not create accounts or provide personal information. The only data processed from a listener's device is the technical connection information (such as IP address) needed to deliver the audio, which we use solely to support the internal operations of the Service and not for advertising, profiling or contacting the listener. If you believe a child under 13 has given us personal information, contact [email protected] and we will delete it.
Organizations that use the Service with children are responsible for any notices or consents their own rules or laws require for their events.
9. Your choices and rights
- Account information: owners can update organization settings and operators in the dashboard; each user can change their own password and authenticator.
- Emails: account, billing and security emails are part of the Service and cannot be turned off while the account is active. We do not send marketing emails.
- Close your account: contact [email protected].
9.1 California residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use and disclose, and to receive a copy of it;
- Delete personal information we collected from you, subject to legal exceptions (for example, billing records we must keep);
- Correct inaccurate personal information;
- Opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of;
- Limit use of sensitive personal information — we use account credentials (a category of sensitive personal information) only to provide and secure the Service, as permitted by the CCPA;
- Not be discriminated against for exercising these rights.
To make a request, email [email protected]. We will verify your request using information associated with your account (for example, by confirming your email address). You may use an authorized agent with written permission. We respond within 45 days, which may be extended once by 45 days as permitted.
Categories disclosed for a business purpose in the past 12 months: identifiers, commercial information, internet or network activity, and audio processed in real time (not retained) — to the service providers listed in section 4. Sources: you, your device, and Stripe.
9.2 Other U.S. states
Residents of other states with comprehensive privacy laws may have similar rights. Contact [email protected] and we will honor them as required by applicable law.
10. Where we process data
We operate in the United States and process data in the United States (Fly.io and Supabase, both in the Eastern U.S.).
11. Changes to this Policy
We will post updates here and change the "Last updated" date. For material changes, we will notify account owners by email or in the dashboard before the changes take effect.
12. Contact
Aulra Tech Solutions LLC · Acworth, Georgia 30102, USA · [email protected]