Auni

Legal

Privacy Policy

What we collect, why, who processes it, and the controls you have. Short version: only what the product needs, never sold, and the blockchain parts are public by nature.

Effective [EFFECTIVE DATE]

01Who is responsible for your data

Auni is operated by [COMPANY LEGAL NAME], registered at [REGISTERED COMPANY ADDRESS]. That entity decides how the personal data described here is handled and is the one to contact about it.

02What we collect

Auni collects only what the product needs to work:

  • Account details from sign-in: your email address, and any display name, avatar, or time zone you set.
  • Your embedded wallet addresses. Wallet keys are secured by our authentication provider, Privy; we never see or store private keys.
  • Your conversations with Auni, the action cards and approvals they produce, and the automations you create — this is the product's working record of what you asked for and what was done.
  • The execution journal: a verified, append-only record of every money-moving action, kept because you need to be able to audit exactly what happened.
  • Operational data: notification records, security events (like MFA changes), and service logs used to keep the product running and safe.

03What we deliberately do not collect

No advertising trackers, no selling or renting your data, no third-party ad cookies. Error reports sent to our monitoring service are stripped of request bodies, headers, cookies, and user identity before they leave our servers.

04The blockchain is public

Transactions you approve are recorded on public blockchains, permanently and outside our control. Your wallet address and its full transaction history are visible to anyone. Deleting your Auni account cannot remove anything from a blockchain.

05AI processing

Your conversations are processed by third-party large-language-model providers, reached through a gateway, to generate Auni's responses. We send only what the conversation needs. Voice dictation, if you use it, is transcribed by a speech provider.

We do not train models on your conversations, and we do not sell them. What we send is then handled by each provider under that provider's own terms: some retain prompts and responses for a period, typically to monitor for abuse, and some may use them to improve their own models. We do not require providers to guarantee zero retention. Treat anything you type into a conversation as something that will leave our servers and reach a model provider.

06Who processes data for us

We use a small set of infrastructure providers, each only for its job:

  • Privy — sign-in and embedded wallet security.
  • Railway and Vercel — hosting for our servers and website (including DNS).
  • Upstash — short-lived operational state (rate limits, coordination).
  • AI model providers, accessed through a gateway — generating responses.
  • Exa and xAI — web and social search when a conversation needs it.
  • ElevenLabs — voice dictation, if you use it.
  • Resend — sending you notification email.
  • Sentry — error monitoring, with personal data stripped.
  • Elfa — market-signal monitoring that powers automations.
  • Coinbase Onramp, reached through Privy — buying USDC with a card, bank transfer, or Apple Pay, where that is available in your region.

If you buy USDC through the in-app funding flow, that purchase is handled by Coinbase Onramp as its own provider under its own terms and privacy policy. You give your payment details to them, not to us: we never see or store your card number or bank credentials, and we receive only enough about the purchase to show you its status.

07We never connect to your bank

Auni does not link to, read, or store bank accounts, and it has no view of any account you hold outside your Auni wallets. We do not ask for bank logins, we do not use an account-aggregation service, and we cannot see your brokerage, retirement, or savings accounts. Withdrawals go to your own crypto wallet; cashing out to a bank is not something Auni does.

08Why we process it

We process your data to provide the service you asked for: holding your account, generating responses, preparing and executing the exact actions you approve, delivering notifications you'd expect (an automation fired, a payment confirmed or stopped, a security hold), securing the product, and debugging failures. We also process what the law requires us to.

09Retention and deletion

We keep your data while your account exists. The execution journal is retained even after other data is deleted, because it is the audit record of financial actions.

You can download a complete copy of your data and delete your account in Settings. Deletion permanently removes your conversations, automations, and notifications. The execution journal, withdrawal history, and wallet registrations are kept as the audit record of financial actions, and deletion is refused while any transaction is still settling so money is never orphaned mid-flight.

10Where your data is processed

Our providers operate internationally, and most of them are based in the United States. Using Auni means your data will be processed in countries whose privacy law may differ from your own, including countries outside the UK, EEA, or wherever you happen to live. Where the law requires a specific safeguard for that transfer, we rely on the mechanism described at [INTERNATIONAL TRANSFER MECHANISM].

11Your rights

Depending on where you live, privacy law may give you rights to access, correct, export, or delete your personal information. Email us and we will handle reasonable requests.

12Changes and contact

We will announce material changes to this policy in the product or by email before they take effect. Questions or requests: support@auni.io. Read this alongside our Terms of Service and Risk Disclosure.