Legal
Privacy Policy
Last updated 29 August 2026
AURO ("AURO", "we", "us") operates a beauty-matching platform connecting clients with independent beauty specialists. Because our service involves your appearance, taste, portfolio images and appointments, we've written this policy to be specific about what that means for your data — not just a generic template.
1. Information we collect
We collect information you give us directly, including:
- Account details — name, email, password (stored hashed, never in plain text), city.
- Profile content — your avatar and cover photo, an "about me" description, your hobbies, and your self-described communication style.
- Style — the aesthetic tags you pick directly (Natural, Minimal, Editorial, Soft Glam, Luxury, Bold, Classic, Avant-Garde), used to power matching and search.
- Beauty DNA — your answers to our 20-question psychographic test (a lighthearted beauty-personality signal, not a clinical or medical assessment), used for deeper compatibility matching.
- Specialist listings — if you join as a specialist: your services, prices, portfolio images, and whether you travel to clients or work from a studio.
- Bookings and reviews — appointments you make or receive, and reviews you write or receive.
- Conversations with Goldie — messages you send our AI concierge, so it can recommend real specialists and products from our own database (never fabricated ones).
- Search activity — the queries you type into AI Search, used to improve matching over time.
We also automatically collect limited technical data (IP address, browser type, device type) and cookies — see our Cookie Policy for details.
2. How we use your information
- To match you with specialists or clients who fit your taste and personality.
- To let Goldie give you real, database-backed recommendations — never invented ones.
- To let you book, manage, and review appointments.
- To show a specialist relevant context about a client who books them, and vice versa.
- To keep the platform secure and prevent abuse (including moderation of listings).
- To communicate with you about your account or bookings.
- With your consent, to tell you about new cities, features, or the AURO waitlist.
3. Who sees your information
Client information relevant to a booking (name, contact details, preferences) is shared with the specialist you book — this is core to how AURO works, and is explained during onboarding. Specialist listings (portfolio, services, reviews) are public by design.
We do not sell your personal data. We share data only with service providers who help us run AURO (e.g. hosting), under confidentiality obligations, and where required by law.
Goldie's product suggestions link out to third-party marketplaces (such as Noon, Namshi, Sephora, Cult Beauty, Lookfantastic, Space NK, Druni or Primor, depending on your region). These are outbound links to their search pages — we do not share your personal data with them, and their own privacy policies govern what happens once you leave AURO.
4. Legal basis and your rights
We rely on your consent, the performance of our contract with you, and our legitimate interest in operating and improving AURO as our bases for processing. Depending on where you live — including under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for EU/UK visitors, the GDPR — you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data, directly from your profile in most cases.
- Delete your account and associated data.
- Object to or restrict certain processing, and withdraw consent at any time.
- Request a copy of your data in a portable format.
To exercise any of these rights, contact us at privacy@auro.app.
5. Data retention
We keep your data for as long as your account is active. If you delete your account, we remove your profile, bookings, and messages within a reasonable period, except where we must retain limited records to comply with law or resolve disputes.
6. Security
We use industry-standard safeguards — including password hashing and access controls — to protect your data. No system is 100% secure, so we encourage using a strong, unique password.
7. Children
AURO is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.
8. International transfers
AURO is based in Dubai, UAE. If you access AURO from outside the UAE, your data may be processed in the UAE or other countries where our service providers operate, with appropriate safeguards in place.
9. Changes to this policy
We'll update this page if our practices change, and update the "last updated" date above. Material changes will be communicated in-app.
10. Contact us
Questions about this policy or your data? Reach us at privacy@auro.app. AURO is based in Dubai, United Arab Emirates.