Privacy Policy

1. Introduction

Aurionex Systems ("we," "us," or "our") operates TLDRPro. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information you provide directly:

• Email address (for waitlist registration and account creation)
• Name (optional, for account personalization)
• Documents and text you submit for analysis
• Usage data and analytics

3. How We Use Your Information

We use collected information to:

• Provide and maintain our service
• Process and analyze documents you submit
• Send you updates about our service (with your consent)
• Improve and optimize our platform
• Detect and prevent fraud or abuse

4. Data Retention

We retain data in accordance with our obligations under the EU AI Act (Regulation 2024/1689) and applicable data protection law.

• Analysis data (URLs submitted, extracted signals, output reports): retained for 6–12 months from date of processing, as required under AI Act Art. 12 for transparency and auditability of AI system outputs.
• Account data (email, name): retained for the duration of your account plus 90 days after deletion request.
• Session data: purged within 30 days.

All retained data is stored on Abacus.AI infrastructure within secured environments. You may request early deletion of your data by contacting [email protected], subject to our legal retention obligations.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), secure data storage, and regular security audits. However, no method of transmission over the Internet is 100% secure.

6. Third-Party Services

We may use third-party services for analytics, payment processing, and infrastructure. These services have their own privacy policies governing their use of your information.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability

8. Cookies

We use essential cookies for authentication and session management. Analytics cookies are used only with your consent to understand how you use our service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. EU AI Act & DSGVO Compliance

TLDRPro operates as a limited-risk AI system under the EU Artificial Intelligence Act (Regulation 2024/1689).

AI Act Art. 12 — Transparency & Record-Keeping:

All AI-generated outputs are labeled [AI-GENERATED | TLDRPro v1.0] with a processing timestamp. Analysis data is retained for 6–12 months for auditability.

AI Act Art. 13 — Transparency to Users:

Users are explicitly informed when content is AI-generated. TLDRPro does not engage in autonomous decision-making. All outputs are for informational purposes only and require human review.

GDPR Art. 6(1)(f) — Legitimate Interests:

Where processing is not based on consent or contract, we rely on legitimate interests (service security, fraud prevention, platform improvement), balanced against your rights.

DSGVO §25 — Privacy by Design:

TLDRPro is built with privacy by design principles: data minimisation, purpose limitation, and technical measures to prevent unauthorised access. All submitted website content is treated as untrusted input and is never executed as system instructions.

Unsafe Input Handling:

All URLs and pasted web content submitted by users are treated as unsafe, untrusted input. Content is sanitized before processing and is never interpreted as executable instructions by our AI systems.

11. GDPR Compliance (EEA Users)

For users in the European Economic Area, we comply with the General Data Protection Regulation (GDPR). Your rights include:

• Right of Access — Request a copy of your personal data
• Right to Rectification — Correct inaccurate or incomplete data
• Right to Erasure — Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing — Limit how we use your data
• Right to Data Portability — Receive your data in a structured format
• Right to Object — Object to processing based on legitimate interests

Legal basis for processing: consent (waitlist signup), contract performance (service delivery), and legitimate interests (security, improvement).

11a. Business Users & Data Processing Agreements

If you use TLDRPro on behalf of an organisation and process personal data of third parties through our Service, you may require a Data Processing Agreement (DPA) with Aurionex Systems. Please contact [email protected] to request a DPA before processing personal data through the Service.

12. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — What personal information we collect and how it's used
• Right to Delete — Request deletion of your personal information
• Right to Opt-Out — Opt out of the sale or sharing of personal information (we do not sell your data)
• Right to Non-Discrimination — Equal service regardless of privacy choices
• Right to Correct — Correct inaccurate personal information

We do not sell personal information. We do not use sensitive personal information for purposes other than providing our services.

13. Exercising Your Rights

To exercise any of the rights described above, including data deletion requests, please contact us:

Email: [email protected]

We will respond to verified requests within 30 days (or 45 days for complex requests, with notice). For your protection, we may verify your identity before processing requests.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact Aurionex Systems at [email protected].