Privacy policy

AURZUM — PRIVACY POLICY

This notice describes data processing when you visit https://aurzum-terminal.com, create an account, download or use AURZUM Terminal, subscribe, or contact support.

1. Scope and contact
AURZUM is the brand under which the website and Terminal are offered. For privacy questions, requests, or the exercise of rights, write to desk@aurzum-terminal.com.

2. Principles and categories of information
Only data that is adequate, relevant, and limited to the purposes described should be processed. Depending on the feature you use and the active flow, the following may be processed:

• Account data: email address, registration date and time, authentication method, and account status.
• License security: device identifier (HWID), account-device association, and device changes. This is used to protect the account and limit sharing; device changes are currently limited to once per month under the described configuration.
• Subscription data: tier, payment/subscription status, start, renewal, or expiration dates, and Stripe references needed to grant, maintain, cancel, or remove access.
• Support: your email address and information you voluntarily include in a message. Do not send passwords, full card numbers, CVV, API keys, authentication codes, or sensitive information.
• Transaction data: Stripe processes payment information on its own platform. Under the intended flow, AURZUM does not receive the full card number or CVV, but may receive payment confirmation and subscription metadata.
• Technical data: the website or providers may generate security, operational, error, browser, device, cookie, identifier, or IP-address logs. The Terminal does not use IP addresses as account data. Shopify, Google/Firebase, Stripe, network providers, or others may process them within their own services.

We do not request financial-profile, income, goal, risk-tolerance, or brokerage-account data to personalize Investment Hub. The tool analyzes the selected asset. Brokerage connections are not offered.

3. Locally stored information and external keys
Portfolios, positions, and watchlists are stored locally on the user’s device and are not synchronized to AURZUM’s server. Deleting a server account does not erase those local files. The user must manage or delete local copies from their own device.

If a user adds their own OpenRouter API key, the key and requests are sent from Terminal on the user’s device directly to OpenRouter. AURZUM does not receive the key or request content. OpenRouter may receive and process information the user submits under its own terms. Users should avoid including other people’s personal data or confidential information.

4. Processing purposes
Account and authentication data are used to create and maintain accounts, verify access, recover or secure accounts, and provide support. HWID may be used to verify the license, prevent unauthorized access, and limit sharing. Subscription metadata is used to confirm a tier, grant access, manage changes and cancellations, prevent unauthorized charges or access, and respond to disputes. Support messages are used to respond to and document a request. Security or technical logs may be used to protect the service, investigate failures or misuse, and comply with legal duties.

Under the described design, locally stored portfolios and watchlists are not used to create centralized server profiles. We do not intend to sell personal data or use it for personalized advertising. If this changes, the notice must be updated and consent obtained where required before the new processing begins.

5. Providers, processors, and transfers
• Shopify hosts the store and website/download pages and may operate cookies, fraud prevention, measurement, and technical logging according to the store configuration and its own terms.
• Google/Firebase/Firestore and Google sign-in provide authentication and storage for account or service data as configured. Google may process technical information needed to operate its infrastructure.
• Stripe processes payments and manages subscriptions. It receives directly the payment details users enter in its interface; AURZUM receives the status data and identifiers needed to manage access under the intended design.
• Market-data and news providers: the Terminal requests information directly from external sources on the user’s device, including yfinance to access data associated with Yahoo Finance and other data providers. Providers may receive technical requests and query data.
• OpenRouter receives requests sent directly from the user’s device when the user configures their own key.

Providers may process data in countries other than the user’s location, subject to their own terms, transfer mechanisms, and safeguards. Data will not be sent to other controllers for their own purposes without a legal basis and, where required, consent.

6. Cookies and similar technologies
Shopify and its apps/providers may use cookies, local storage, pixels, or identifiers for essential functions, security, preferences, analytics, or advertising, depending on store configuration. Shopify and its apps may use cookies or measurement tools according to the store configuration. Users may manage cookies through the controls available in the store and their browser.

7. Retention, blocking, and deletion
Data will be retained only as long as necessary for the purposes described, the subscription relationship, support, security, disputes, and legal, accounting, or tax duties. When no longer needed, it will be deleted or blocked as required by applicable law.

To request deletion, write to desk@aurzum-terminal.com and confirm from the account email. Once the request is confirmed, future renewals will be stopped, access will remain available through the end of the paid period, and the email and HWID will then be deleted from the active account. Only minimum records may be retained where necessary for a legal, accounting/tax obligation, a dispute, or a specific security incident, for the necessary period and with restricted access. Stripe, Shopify, Google, or other providers may retain their own records under applicable law and their policies. We will explain if certain data cannot be deleted immediately and why. A deletion request does not automatically erase local files on the user’s device.

8. Individual rights and requests
You may request access, correction, deletion/cancellation, or objection to processing (ARCO rights), and exercise other rights available under law, by writing to desk@aurzum-terminal.com. Include the account email, the right you wish to exercise, and enough detail to locate the information. Do not send passwords or unnecessary documents. To protect the account, we may request reasonable identity or authority verification. Requests will be handled free of charge except for reproduction or shipping costs permitted by law, within statutory deadlines and subject to applicable exceptions. You may also ask about processing, limit use or disclosure where available, or withdraw consent where processing depends on it, without retroactive effect or prejudice to legal grounds for retention.

For privacy matters, contact desk@aurzum-terminal.com. This contact channel does not replace legal procedures before the competent authority.

9. Security and incidents
We use reasonable and proportionate administrative, technical, and organizational safeguards to protect data against unauthorized access, use, loss, alteration, or disclosure. No online transmission or storage can be guaranteed absolutely secure. Internal access is limited to those who need it. If a breach significantly affects individuals’ rights, appropriate measures and notices required by law will be taken.

10. Children
Paid plans are intended for people aged 18 or older. Minors are not deliberately invited to subscribe. If we receive information indicating that an account belongs to a minor, we may restrict it and delete the information where legally appropriate.

11. Changes to this notice
We may update this Notice when the Service, providers, purposes, or law changes. The current version will state its update date and be posted on the website. Material changes will be communicated through a reasonable channel and consent will be obtained when legally required. Data use will remain limited to disclosed purposes or compatible purposes permitted by law.

Contact: desk@aurzum-terminal.com