Privacy Notice
Last updated: July 2, 2026
1. Who we are
Aurvault Nexus Inc. ("Aurvault", "we", "us") operates Kamoop 1.0. For the personal data described in this notice, Aurvault Nexus Inc. is the data controller.
2. What we collect and why
| Category | Purpose | Legal basis |
|---|---|---|
| Account data (email, hashed password, sign-in tokens) | Create and secure your account; authenticate you. | Contract performance. |
| Workflow content you submit (SOP text, voice recordings, generated analyses) | Run the diagnostic engine and store your outputs. | Contract performance. |
| Subscription and billing metadata (Paddle subscription ID, status, plan) | Grant premium access and manage entitlements. | Contract performance. |
| Support messages | Respond to inquiries. | Legitimate interest. |
| Usage and device data (IP, browser, page views, error logs) | Security, fraud prevention, and product improvement. | Legitimate interest. |
| Marketing communications (optional) | Product updates and announcements. | Consent. |
Payment card and billing address details are collected directly by Paddle and are not received or stored by Aurvault.
3. Who we share it with
- Paddle.com Market Ltd. — our Merchant of Record for checkout, subscription management, payments, tax compliance, invoicing, and refunds.
- Cloud infrastructure and analytics subprocessors — hosting, database, error monitoring, and product analytics providers that process data on our behalf under contract.
- AI model providers — third parties that generate diagnostic outputs from your workflow content. Providers are contractually restricted from using your content to train their models.
- Professional advisers — legal, accounting, and audit providers when necessary.
- Authorities — where required by valid legal process.
4. International transfers
We and our subprocessors may process data outside your country of residence, including in Canada, the United States, the United Kingdom, and the EEA. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
5. Retention
We retain account and workflow data for as long as your account is active and for a reasonable period afterwards (typically up to 12 months) to allow reactivation and to meet legal obligations. Billing records held by Paddle are retained for the period required by applicable tax law. After the retention period we delete or anonymize the data.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, port, or object to our processing of your personal data, and to withdraw consent for optional processing at any time. You may also lodge a complaint with your local data protection authority. To exercise these rights, contact us at the address in Section 9; we will respond within one month.
7. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, database row-level security, and audit logging. No system is perfectly secure; we work to promptly investigate and address any incident.
8. Cookies
We use essential cookies to keep you signed in and to remember your session. We may also use limited analytics and error-monitoring cookies to understand usage and diagnose issues. You can manage cookies through your browser settings; blocking essential cookies will impair sign-in.
9. Contact
Aurvault Nexus Inc. — karenpoko@aurvaultnexusinc.com. For payment-related privacy inquiries, contact Paddle at paddle.net.