Last Updated: January 16, 2026
Welcome to AuraPilot AI. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our SaaS CRM platform.
We collect information you provide directly to us, including:
AuraPilot AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We access your Google Calendar and Contacts solely to sync your beauty business schedule and client list.
By connecting your Instagram Professional account, you grant AuraPilot AI access to "Platform Data," including messages and profile information. This data is used exclusively to allow you to manage client communications within our CRM. We do not sell this data. To revoke access or request data deletion, please see Section 8.
We use Apple and X OAuth for authentication purposes only. We do not post on your behalf without explicit action, nor do we scrape data from these platforms.
CRITICAL FOR TWILIO/A2P COMPLIANCE:
No Information Sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Exclusion: All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Opt-In: Users opt-in to receive SMS notifications regarding their account and client bookings during registration.
Opt-Out: You may opt-out of SMS communications at any time by texting "STOP". For help, text "HELP".
AuraPilot AI uses artificial intelligence to assist in client communication and business management. AI processing is performed on the data you provide to generate suggestions. We do not use your proprietary client data to train general-purpose AI models for other users.
We implement industry-standard security measures (SSL encryption, OAuth 2.0) to maintain the safety of your personal information.
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties, except for the express purpose of providing the service (e.g., sending an SMS via Twilio or syncing a calendar via Google).
Users may request the deletion of their data at any time. To initiate a data deletion request for your account or integrated platform data (Instagram/Meta), please email [email protected] with the subject line "Data Deletion Request." We will process all requests within 30 days.
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.