Privacy Policy

1. Who we are

This Privacy Policy explains how Auxari Inc. (“Auxari,” “we,” “us,” or “our”), collects, uses, and shares information when you use the Auxari application, website at auxari.com, and related services (collectively, the “Service”).

For the purposes of applicable data protection law, the data controller is Auxari Inc. You can contact us at legal@auxari.com.

2. Scope

This policy applies to personal information we process when you create an account, connect third-party services, and use Auxari’s features. It does not cover the third-party services you connect (such as Google, Microsoft, your vehicle provider, or your smart-home platform), which are governed by their own privacy policies.

3. Information we collect

Information you provide to us

Account information: name, email address, and password (stored only as a salted hash).
Authentication and security information: phone number (if you enable SMS-based two-factor authentication), two-factor authentication settings, and one-time codes.
Communications you send us (e.g., support requests).
Any preferences, routines, and instructions you configure in the Service.

Information from connected services (only with your authorization, via OAuth) When you choose to connect an account, we access data from that service to provide Auxari’s features:

Google — [[ list exact scopes, e.g. Gmail message content/metadata, Google Calendar events ]].
Microsoft — [[ e.g. Outlook mail, Microsoft 365 calendar ]].
SmartCar (vehicle) — [[ e.g. vehicle location, odometer, fuel/charge level, lock status, and the commands you ask Auxari to send ]].
Home Assistant (smart home) — [[ e.g. device states and the control commands you issue ]].

Information we collect automatically

Usage data (features used, actions taken, timestamps).
Device and log data (IP address, device type, browser, app version).
Cookies and similar technologies (see our separate Cookie Policy).

[[ Add or remove categories so this list exactly matches what is actually collected. ]]

4. How we use your information

We use your information to:

Provide, operate, and maintain the Service, including the assistant’s ability to read context from and take actions on your connected accounts and devices at your direction.
Power proactive features and routines that act on your behalf based on your settings.
Authenticate you and protect your account (including two-factor authentication).
Communicate with you about your account, security, and the Service.
Maintain security, prevent fraud and abuse, and debug.
Comply with legal obligations.
Improve the Service — but see Section 5: improvement using Google user data is limited, and Google user data is never used to train generalized AI/ML models.

5. Google user data and the Limited Use requirements

Auxari accesses information from Google APIs (such as Gmail and Google Calendar) only to provide user-facing features you have requested, and only with your explicit authorization through Google’s OAuth consent flow.

Limited Use disclosure. Auxari’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

We limit our use of Google user data to providing or improving user-facing features that are prominent in Auxari’s interface.
We do not transfer Google user data except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition with your consent.
We do not use or transfer Google user data for serving advertising, including personalized, retargeted, or interest-based advertising.
We do not allow humans to read your Google user data unless: (a) you have given affirmative consent to view specific messages or data; (b) it is necessary for security purposes (such as investigating abuse) or to comply with applicable law; or (c) the data has been aggregated and anonymized for internal operations.
We do not use Google user data to train generalized or non-personalized artificial intelligence or machine-learning models, and we do not transfer such data for that purpose.

[[ If any Restricted Scopes such as Gmail content are used, confirm Google's additional security/assessment requirements are met; describe retention and in-product disclosures accordingly. ]]

6. Microsoft and other connected-service data

We access Microsoft account data (such as Outlook mail and Microsoft 365 calendar) only with your authorization and only to provide the features you request, consistent with Microsoft’s API terms. The same principle applies to your vehicle (SmartCar) and smart-home (Home Assistant) data: we access and act on it only to deliver the features you have set up, and we do not sell it or use it for advertising. [[ Confirm specifics with counsel. ]]

7. Automated processing and actions taken on your behalf

Auxari is an AI assistant. With your authorization, it can read context from your connected services and take actions on your behalf — for example, sending email, modifying calendar events, controlling smart-home devices, or sending commands to your vehicle. You can configure which actions are automatic and which require your confirmation, and you can review actions taken. [[ Describe the confirmation/permission model and any human oversight accurately. ]]

8. Legal bases for processing (EEA/UK users)

Where GDPR or UK GDPR applies, we rely on: performance of our contract with you; your consent (which you may withdraw at any time, including by disconnecting a service); our legitimate interests (such as securing and improving the Service); and compliance with legal obligations. [[ Confirm bases per processing activity with counsel. ]]

We do not sell your personal information, and we do not use your connected-service data for advertising. We share information only:

With service providers (subprocessors) who help us run the Service, under contract — [[ list, e.g. Amazon Web Services (hosting), Amazon SES (email), SMS provider, analytics provider ]].
To comply with law or respond to lawful requests.
To protect rights and safety (ours, yours, or the public’s).
In a business transfer (merger, acquisition, or asset sale), subject to the Limited Use commitments above for Google data.
With your consent or at your direction.

10. International data transfers

[[ If data is transferred across borders, describe mechanisms such as Standard Contractual Clauses. Confirm with counsel. ]]

11. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter only as required for legal, security, or legitimate-business purposes. When you disconnect a service or delete your account, we delete or de-identify the associated data within [[ time period ]], except where retention is legally required. [[ Confirm actual retention periods. ]]

12. Security

We take reasonable and appropriate measures to protect your information, including [[ describe only what is actually implemented, e.g. encryption in transit, encryption at rest, access controls, two-factor authentication ]]. No method of transmission or storage is completely secure.

13. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or port your information, to object to or restrict certain processing, and to withdraw consent. You can also disconnect any third-party integration at any time in your settings, and you may revoke Auxari’s access directly through the provider (e.g., your Google or Microsoft account security settings). To exercise your rights, contact legal@auxari.com. We will respond as required by applicable law.

[[ For California residents: add CCPA/CPRA-specific disclosures. Confirm with counsel. ]]

14. Children’s privacy

The Service is not directed to children under [[ 13 / 16 / 18 — confirm based on jurisdiction ]], and we do not knowingly collect their personal information.

15. Third-party services

The Service links to and integrates with third-party services. Their handling of your data is governed by their own privacy policies, not this one.

16. Changes to this policy

We may update this policy. If we change how we use Google user data or other personal information in a material way, we will notify you and, where required, obtain your consent before the new use takes effect.

17. Contact us

Auxari Inc. legal@auxari.com