Privacy Policy

This Privacy Policy explains how Aurimen ("we", "us") processes personal data when you visit https://aurimen.io, use https://app.aurimen.io, or interact with our support and transactional communications.

This policy applies to platform users, workspace administrators, advisors, reviewers, entrepreneurs, and individuals invited to complete questionnaires or access case materials.

Aurimen is currently operated under the trade name Aurimen. Full legally required operator identification will be published in the Legal Notice before commercial transactions are opened to the public.

For personal data submitted to a professional Workspace, the Customer generally determines the professional purposes for which the information is collected and used. In those circumstances, the Customer generally acts as controller and Aurimen processes the data on the Customer's behalf to provide, secure, maintain, and support the Service.

Aurimen may act as an independent controller for limited processing required for account administration, service security, fraud prevention, legal compliance, and the establishment, exercise, or defence of legal claims.

Individuals whose personal data have been submitted by a Customer should generally direct requests relating to that professional processing to the relevant Customer. Aurimen will support Customers with applicable requests where required by law and the governing agreement.

• Account and profile information such as name, email address, role, and authentication factors.
• Workspace configuration, billing references, and support correspondence.
• Case, questionnaire, and review content submitted by authorized users.
• Technical logs including IP address, device/browser data, and security events necessary to operate and protect the Service.

• Providing, securing, and improving the Service.
• Authenticating users and enforcing workspace permissions.
• Generating workflow notifications and transactional emails.
• Billing, fraud prevention, and legal compliance.
• Responding to support requests and maintaining service reliability.

Where the GDPR or similar laws apply, we rely on one or more of the following: performance of a contract, legitimate interests in operating a secure B2B platform, compliance with legal obligations, and consent where required (for example, non-essential cookies where implemented).

We use infrastructure and communications providers necessary to host and deliver the Service, such as cloud hosting, email delivery, and payment processing partners engaged under appropriate contractual safeguards.

We do not sell personal data. We may disclose information when required by law, to protect rights and safety, or in connection with a corporate transaction subject to confidentiality obligations.

Data may be processed in countries other than your own. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

We retain personal data for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Workspace retention settings and firm policies may also govern case content.

We apply administrative, technical, and organizational measures designed to protect personal data. No method of transmission or storage is completely secure; users must also protect credentials and workspace access.

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing. Requests relating to processing for which Aurimen is controller may be submitted to the contact below. For Professional Workspace Data controlled by a Customer, see Professional Workspace Data. You may also lodge a complaint with a supervisory authority.

The Service is intended for professional and business use and is not directed to children.

Privacy-related requests: support@aurimen.io.

We may update this Privacy Policy from time to time. The latest version will always be published on this page.