This Privacy Policy explains how auradata ("auradata", "we", "us"), operated by Aura Cloud Org, collects, uses and shares personal information when you visit auradata.dev (the "Site") or use the auradata service (the "Service"). It applies to the private beta. Contact: hello@auradata.dev.
Your code and credentials
Access to your repositories and your warehouse credentials are used for one purpose only: running your dbt projects and showing you the results. They are stored encrypted (credentials in AWS Secrets Manager, repository access through the GitHub App's short-lived tokens), are passed only to the isolated container that runs your job, are never written to logs or artifacts, and are never sold, shared with or made available to any third party. The infrastructure providers in section 3 process this data on our behalf, under our instructions, and only to provide the Service.
1. Information we collect
Information you provide.
- Beta sign-up: your email address and, if you answer the optional questions, your warehouse, how you run dbt today and your company size.
- Account: your name and email address when you sign in to the Service (through WorkOS).
- Workspace content: projects, jobs, environments, teams, invitations and other configuration you or your teammates enter.
- Warehouse credentials you connect, stored in AWS Secrets Manager and provided only to the container that runs your job.
- Messages you send us, for example to hello@auradata.dev.
Information collected automatically.
- Site usage: page views and sign-up form events, collected with PostHog. Session replay is disabled on the Site.
- Campaign attribution: UTM parameters, the referring page and the landing page of the visit that led to a sign-up.
- Advertising measurement: when a Reddit ad campaign is running, a Reddit pixel on the Site records a page visit and, after you sign up, a sign-up and lead event.
- Service usage: page views and product events in the console (for example creating a project or starting a run), associated with your user id and workspace, collected with PostHog.
- Technical data: IP address, browser and device information, and server logs, as recorded by our hosting and security providers.
Information from third parties.
- GitHub: when you install the auradata GitHub App, the repositories you select, pull request metadata and check runs we read and write for them, and the commits we fetch to run your project.
2. How we use information
- To provide, operate and secure the Service: run your dbt projects, store run logs and artifacts, show results, docs, lineage and tests.
- To manage the beta: contact you about onboarding, changes and feedback.
- To understand how the Site and Service are used and to fix and improve them.
- To measure advertising campaigns that bring visitors to the Site.
- To comply with law and enforce our Terms.
We do not sell personal information, we do not share it with third parties for their own purposes, and we do not show advertising inside the Service.
3. How we share information
We share personal information only with the providers that run auradata, each acting on our instructions:
- Amazon Web Services: hosting, storage of run logs and artifacts, secrets storage.
- Neon: our application database.
- Cloudflare: DNS and email routing.
- WorkOS: sign-in.
- GitHub: the GitHub App you install.
- Kit: the beta mailing list (email address and sign-up answers).
- PostHog: product analytics.
- Reddit: ad measurement pixel on the Site only, during ad campaigns.
We may also disclose information if required by law, to protect our rights or users, or as part of a merger, acquisition or sale of assets, with notice to you.
4. Cookies and similar technologies
The Site uses PostHog cookies and local storage for analytics and, during ad campaigns, Reddit's pixel cookies. The Service uses a session cookie to keep you signed in and PostHog for analytics. You can block cookies in your browser; the Service's session cookie is required to sign in.
5. Data retention
- Beta sign-up records are kept until you ask us to delete them or the beta list is closed.
- Account and workspace data, run logs and artifacts are kept for the life of your workspace and deleted when the workspace or account is deleted.
- Warehouse credentials are deleted when you remove the connection or delete the workspace.
- Analytics data is retained according to PostHog's retention settings for our project.
6. Security
Data is encrypted in transit and at rest. Warehouse credentials are held in AWS Secrets Manager and are never written to logs or artifacts. Each run executes in an isolated container that is removed after the run. Access to production systems is limited to the people operating the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, or to delete your account and its data, email hello@auradata.dev. You can unsubscribe from beta emails using the link in any email. If you are in the EEA or UK you also have the right to complain to your supervisory authority.
8. International transfers
auradata is hosted in the United States (AWS us-west-2 for the Service; a global CDN for the Site). If you access it from elsewhere, your information is transferred to and processed in the United States.
9. Children
The Site and Service are for businesses and are not directed to children under 16. We do not knowingly collect information from children.
10. Changes to this policy
We may update this policy as the Service changes. We will post the new version here with a new effective date and notify beta sign-ups before a change that materially affects how we handle their data.
11. Contact
Aura Cloud Org, operator of auradata. Email: hello@auradata.dev.