Privacy Policy

Last updated: October 12, 2026

Aura Boost Tech Canada Inc. ("Aura Boost", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at aura-boost.com and use our services, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information We Collect

Information you provide directly:

• Contact form: name, email address, subject, and message content
• Account registration: full name, email address, and password (or Google account information if using Google Sign-In)

Information collected automatically:

• IP address: collected when you submit the contact form or use the AI Readiness Scanner, for rate limiting and security purposes
• Website URLs: URLs you submit to our AI Readiness Scanner are processed in real time to generate results but are not stored after the scan completes
• Firebase authentication tokens: session cookies used to keep you signed in

Information we do not collect:

• We do not use analytics tracking (e.g., Google Analytics)
• We do not use marketing pixels or advertising cookies
• We do not use third-party tracking technologies

2. How We Use Your Information

Data	Purpose	Legal Basis
Contact form submissions	To respond to your inquiry	Implied consent (you initiated contact)
Account information	To create and manage your account, provide access to services	Express consent at sign-up
IP addresses	Rate limiting, security, and abuse prevention	Legitimate business interest
Scanner URLs	To generate AI readiness reports	Implied consent (you submitted the URL)

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Google Cloud / Firebase: Our hosting, database (Firestore), and authentication provider. Data is processed and stored on Google Cloud servers. See Firebase Privacy and Security.
• Google (Gmail SMTP): Contact form submissions trigger an email notification sent through Gmail's SMTP service to our team.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority.

4. Cross-Border Data Transfers

Our services use Google Cloud infrastructure. Your personal information may be stored and processed in the United States (Google Cloud nam5 region) or other jurisdictions where Google operates. By using our services, you acknowledge that your information may be transferred outside of Canada. Google Cloud maintains robust security certifications, but privacy laws in other jurisdictions may differ from those in Canada.

5. Data Retention

• Contact form submissions: Retained in our database until we have responded to your inquiry and for a reasonable period thereafter for record-keeping, unless you request deletion.
• Account data: Retained for as long as your account is active. You may request deletion at any time.
• Scanner data: URLs submitted to the scanner are processed in real time and are not stored after the scan is complete.
• IP addresses: Rate-limiting records are held in memory only and are cleared when our servers restart.

6. Cookies and Similar Technologies

Our website uses minimal cookies:

• Authentication cookies: If you sign in, Firebase sets session cookies to maintain your login state. These are strictly necessary for the service to function and are not used for tracking.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. Because we only use strictly necessary cookies, no cookie consent banner is required under Canadian law.

7. Your Privacy Rights

Under PIPEDA and applicable provincial legislation, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent for the collection, use, or disclosure of your information (subject to legal or contractual restrictions)
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us using the details in Section 11 below. We will respond within 30 days.

8. Security

We protect your personal information with measures including:

• HTTPS encryption (TLS) for all data in transit
• Firebase security rules restricting database access
• Secrets stored in Google Cloud Secret Manager (never in source code)
• SSRF prevention on our scanner endpoint
• Rate limiting to prevent abuse

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Electronic Communications (CASL Compliance)

We comply with Canada's Anti-Spam Legislation (CASL). When you submit our contact form, we will reply to your inquiry under implied consent. We will not send you marketing or promotional emails unless you have provided express consent (e.g., by opting in to updates). Every commercial electronic message we send will include our contact information and a functional unsubscribe mechanism.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 16, we will delete it promptly.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Aura Boost Tech Canada Inc.
Email: omniwebb2024@gmail.com
Website: aura-boost.com

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.