Privacy Policy
Last updated 5 August 2026
Written to be read. If anything here is unclear, ask us before you sign up rather than after.
1.Who this covers
This describes how AuroWin handles information when you use the product. It covers the account you sign in with, the organization your account belongs to, and the business information your organization records in AuroWin.
Your organization decides what it puts into AuroWin. We hold it on your organization's behalf and do not decide what goes in.
2.What we hold
Account information: your email address, your name if you supply one, and the organizations and role assigned to you.
Business information your organization records: accounts, contacts, products, suppliers, competitors, deals, uploaded RFQ documents, interview answers, pricing inputs, assessments, quotations and recorded outcomes.
Operational records: an audit trail of changes to deals, pricing, settings, memberships and subscription state, each with the actor who made the change and the values before and after.
Billing information: your subscription state, the plan, period dates, and the invoice history returned to us by our payment processor.
3.What we do not hold
We do not hold payment card details. Card data is entered directly with our payment processor and never reaches AuroWin's systems.
We do not read the content of your deals for our own purposes. We do not sell information, and we do not share one organization's information with another.
We do not send messages to your customers. AuroWin prepares drafts; a person at your organization reviews, approves and sends them from their own systems.
4.Who can reach your information
Members of your organization, according to their role. Every business record carries an organization identifier and access is restricted at the database level, so a request for another organization's records returns nothing rather than relying on the interface to hide it.
Our engineering staff, where it is necessary to operate the service or to investigate a fault you have reported. Such access is limited to what the task requires.
Our infrastructure and payment providers, to the extent needed to run the service — hosting and database infrastructure, and payment processing.
5.Artificial intelligence and your information
AuroWin uses a language model for two things: extracting fields from an uploaded RFQ, and rephrasing interview questions. Deal context is sent to the model provider for those purposes.
No financial figure is ever produced by a model. Total cost, gross profit, gross margin and minimum selling price are computed by our own server-side code from your configured policy.
Text inside an uploaded document is treated as data and never as an instruction to the system.
If your organization would prefer that no deal content is sent to a model provider, contact us before signing up so we can tell you exactly what that changes.
6.How long we keep it
Business information is kept while your organization's account is open, and for as long as your organization needs it. Ending a subscription does not delete anything — the workspace becomes read-only and the records remain readable.
Audit records are kept alongside the records they describe, because an audit trail with gaps in it is not an audit trail.
When an organization asks us to delete its workspace, we delete its business records from our systems. Backups are overwritten on their own cycle, so a copy may persist in backup for a limited period after deletion.
7.Your choices
You can correct your own account details from the settings screen.
An administrator of your organization can add or remove members, and can ask us to export or delete the organization's information.
To ask about, correct, export or delete information, contact us. We will need to confirm you are who you say you are, and for organization-wide requests, that you have the authority to make them.
8.Changes to this policy
If we change how we handle information in a way that materially affects you, we will say so in the product before the change takes effect, rather than quietly updating this page.
This policy describes how the product actually behaves today. It has not been reviewed by a lawyer and it is not tailored to any particular regulatory regime. If your organization has specific legal requirements for handling business information, raise them with us before signing up — we would rather tell you plainly what we can and cannot meet.