Privacy Policy

This Privacy Policy explains how Auralizz ("Auralizz", "we", "us") collects, uses, stores, and shares information when you visit auralizz.com, create an account, use the personal workspace, operate a company workspace, or open a connected product such as Inventory Management System (IMS) or POS Lite.

It applies to the public website and the live platform services available today, and to features we add later that continue to process the same kinds of information. By creating an account or using the services, you acknowledge this policy. Related rules are in our Terms & Conditions.

This policy covers visitors to the public website, registered users, company owners and members, people whose details you store in Auralizz (for example customers, vendors, or invited colleagues), and users who open IMS or POS Lite from Auralizz.

If you use Auralizz on behalf of a company, that company is responsible for the business records it stores. Auralizz processes those records to provide the service. If you store someone else’s personal details (such as a customer email or a teammate invite), you must have a lawful reason to do so.

We collect information you provide, information created while you use the product, and limited technical data needed to run and secure the service.

Account and identity. When you register or update your profile we collect first name, last name, email address, password (stored in hashed form, never in plain text), optional mobile number, profile photo, and records that you accepted the Terms and this Privacy Policy (including the version and time). We also store email verification status, password-reset and verification tokens, roles, onboarding status, and session activity.

Public website and support. If you email us, we receive the address and content you send, and any company name or other details you include. The public contact form on the website does not currently transmit messages to our servers; until it does, please use the published email addresses. We may keep support correspondence to handle your request.

Technical and security data. We collect IP address, browser and device information, approximate request timing, pages or APIs you access, error diagnostics, and correlation identifiers used to troubleshoot issues. Authentication uses essential session cookies. A theme-preview preference may be stored in your browser’s local storage.

Your personal workspace is tied to your Auralizz account. Depending on which apps you use, we store the content you enter so the product can work for you.

• Personal Tasks: lists, projects, tags, task titles and notes, due dates, priorities, recurring rules, completion history, and derived analytics (for example workload or overdue views).
• Personal Finance: accounts you create, categories, income and expense transactions, transfers, budgets, savings goals, recurring rules, and reports generated from that data. This is user-entered information. Auralizz does not currently connect to banks or import card feeds.
• In-app notifications related to your account and workspace activity.
• Workspace preferences such as favorite apps.

Some personal apps (including Notes, Calendar, Contacts, Documents, Habits, Reminders, and personal Goals) are shown in the catalog but are not live yet. When they launch, they will store the content you add there under this policy. We do not invent sample personal data for those apps.

If you create or join a company, we collect organization and operational records needed to run that workspace.

• Company profile: name, display and legal names, company type, registration number, industry, size, business email and phone, website, country, address, logo, and related settings (locale, currency, and similar configuration).
• Membership: owner and member accounts, roles (such as Owner or Member), invitation emails, invitation status, and who sent the invite.
• Locations and structure: shops (including POS Lite shop code), warehouses, departments, and related contact details.
• ERP masters and operations, where enabled: customers and vendors (including names, tax registration numbers, emails, phones, notes, and credit limits), items and inventory, categories, brands, units, taxes, price lists, payment terms and methods, fiscal years, number series, accounting accounts and journals, stock movements, counts, transfers, adjustments, and approval records.
• Files you upload, such as a profile photo, company logo, or master images. Files are stored in platform object storage and served only through authorized application routes.

Company operational data is designed to stay in that company’s isolated store (database-per-company). Personal workspace data is not mixed into another company’s ERP database.

When you choose Open Workspace for Inventory Management System (IMS) or POS Lite, Auralizz starts a short-lived sign-in so you do not create a separate password for that product. Those products are operated as connected applications in the Auralizz ecosystem.

To complete sign-in we send only the identity and organization context needed to create or match the user in that product. We do not send your Auralizz password, session cookies, or Auralizz access tokens.

• IMS: Auralizz user id, company id, tenant key, email, display name, and whether the account is active.
• POS Lite: Auralizz user id, company id, shop code, company name, email, display name, company membership role (for example Owner or Member), and whether the account is active. POS Lite may show the company name as the shop name.

After you are signed in, IMS and POS Lite process the operational data you create there under their own product functions (for example inventory, sales, or shop settings). Signing out of IMS or POS Lite does not automatically end your Auralizz session, and signing out of Auralizz does not by itself revoke an already-open session in those products.

We use information to:

• Create and authenticate accounts, verify email, reset passwords, and keep you signed in.
• Provide personal apps, company workspaces, ERP features, notifications, and files.
• Launch connected products you request and map your membership into IMS or POS Lite.
• Invite colleagues, apply roles, and enforce access controls.
• Operate Super Admin functions that keep the platform healthy (user and company administration).
• Send service messages such as verification, password reset, invitations, and important operational notices.
• Secure the service, prevent abuse, investigate incidents, and keep audit trails of who created or changed records.
• Improve reliability and diagnose errors using logs and correlation identifiers.
• Meet legal, accounting, and compliance obligations.

We do not use your personal finance entries or company operational records to sell advertising. We do not sell personal information.

Auralizz uses essential cookies to keep you signed in. These cookies are HttpOnly session cookies. They are required for login, logout, and authorized API calls. The service will not work correctly if you block them.

We may store a non-essential theme-preview choice in your browser’s local storage. That preference stays on your device and is not used to track you across other websites.

We do not currently use third-party advertising or analytics cookies on the public website. If that changes, we will update this policy.

We share information only as needed to operate Auralizz:

• Infrastructure providers that host the application, databases, file storage, and email delivery (including cloud services such as Microsoft Azure).
• Connected products you open (IMS and POS Lite), limited to the sign-in context described above.
• People in your company workspace who are authorized to see that company’s records (owners, members, and roles you assign).
• Professional advisers or authorities when required by law, to protect rights and safety, or to handle a dispute.

We do not sell, rent, or trade personal information. A service provider that processes data for us may do so only to provide that service to Auralizz, not for their own marketing.

Auralizz is built so each company’s operational database is isolated from other companies. Your personal workspace belongs to your user account. Company members see company data according to their role. They do not receive your personal finance or personal task data unless you put that information into a company record yourself.

Platform Super Admin staff can access platform administration tools (for example user status, company lifecycle, and configuration) to operate and support the service. Access is limited to what is needed for those duties, and actions are subject to platform security controls.

We keep information while your account or company workspace is active and for a reasonable period afterwards so the product, security, audit, and legal requirements can be met.

• Account data is kept until the account is closed, then deleted or anonymized except where we must retain records (for example security logs or legal claims).
• Personal workspace content is kept until you delete it or close the account.
• Company, ERP, shop, and membership records are kept for the life of the company workspace and as required for that organization’s operations.
• Uploaded files are kept until you replace or remove them, or the related account or company is removed.
• SSO authorization codes are short-lived and consumed once.
• Email verification and password-reset tokens expire after a limited time.
• Support emails are kept as long as needed to complete the conversation and for a reasonable follow-up period.

We use administrative, technical, and organizational measures appropriate to a multi-tenant business platform. These include hashed passwords, encrypted transport (HTTPS), HttpOnly session cookies, role-based access, company data isolation, and authorized file delivery.

No internet service can guarantee absolute security. You are responsible for choosing a strong password, keeping credentials confidential, and using access controls carefully when you invite company members.

Depending on applicable law, you may request access to personal information we hold about you, correction of inaccurate details, deletion of your account or specific content, a copy of your information, or restriction of certain processing.

You can already update much of your profile in the product, change your password, upload or remove your photo, and delete records you created in personal or company apps (subject to your company role). You can sign out to end the current Auralizz session cookies.

To make a privacy request, email support@auralizz.global. We may need to verify that the request comes from the account holder. If you are a customer or vendor whose details were stored by a company using Auralizz, contact that company first; they control those business records.

Where company records must be retained for accounting or legal reasons, we may decline or limit deletion of those records and explain why.

Auralizz is a business platform. It is not directed at children, and you must be at least 18 years old to create an account. We do not knowingly collect personal information from children. If you believe a child has registered, contact us and we will delete the account.

Auralizz is hosted on cloud infrastructure. Information may be processed in the regions where we operate the service (including Microsoft Azure). If you access Auralizz from another country, your information is transferred to those processing locations so we can provide the product.

We will update this policy when the product or our practices change. The “Last updated” date at the bottom will change. Material updates may also be reflected in the privacy version recorded when you register. Continued use of Auralizz after an update means you accept the revised policy. If you do not agree, stop using the service and request account closure.

Privacy questions and requests: support@auralizz.global. General inquiries: hello@auralizz.global. You can also use the Contact page on this website for published email details.