Privacy Policy

ORA ECHO LLC ("we," "us," or "our") operates the Aurexecho platform and is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your Personal Data when you access or use the Platform. This Privacy Policy is incorporated into and forms part of our Terms and Conditions.

By using the Platform, you consent to the collection, use, and disclosure of your Personal Data as described in this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Platform.

This Privacy Policy applies to all users of the Platform, including registered account holders, subscribers, free-tier users, and visitors. It covers Personal Data collected through the Platform's website, mobile applications, progressive web applications, and any other digital interfaces operated by ORA ECHO LLC.

2.1 Information You Provide Directly

• Account registration information (name, email address, password hash);
• Payment information (processed by Stripe; we do not store full card numbers or CVV);
• Profile information and preferences;
• Communications you send to us (support requests, feedback, etc.);
• Information provided when accepting our Terms and Conditions (IP address, timestamp, acceptance flag).

2.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Usage data (content played, listening history, session duration, features used, progress data);
• Device information (device type, operating system, browser type, device identifiers);
• Log data (IP address, access times, pages viewed, referring URLs, error logs);
• Cookies and similar tracking technologies (session cookies, preference cookies, analytics cookies).

2.3 Information from Third Parties

We may receive information about you from third parties, including payment processors (Stripe), analytics providers, and marketing partners. Such information is subject to the privacy policies of those third parties.

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features;
• Process payments and manage subscriptions;
• Send transactional emails (receipts, subscription confirmations, password resets);
• Send marketing and promotional communications (with your consent where required by law);
• Send streak milestone notifications and new episode alerts (you may opt out at any time via the unsubscribe link in each email);
• Analyze usage patterns to improve content and user experience;
• Detect, prevent, and respond to fraud, security incidents, and abuse;
• Comply with legal obligations and enforce our Terms and Conditions;
• Respond to your inquiries and provide customer support;
• Personalize your experience on the Platform;
• Conduct research and analytics to understand how users interact with the Platform.

We do not sell your Personal Data. We may share your information with:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including payment processing (Stripe), email delivery (Resend), cloud infrastructure (Cloudflare, AWS), analytics, and content delivery networks. These service providers are authorized to use your information only as necessary to provide services to us.

4.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of ORA ECHO LLC, our users, or the public.

4.3 Business Transfers

In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you of any such transfer and any choices you may have regarding your information.

4.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

We use cookies, web beacons, and similar tracking technologies to collect usage data, maintain session state, remember your preferences, and improve the Platform. The types of cookies we use include:

• Essential cookies: Required for the Platform to function, including session authentication;
• Preference cookies: Remember your settings and preferences (language, volume, etc.);
• Analytics cookies: Help us understand how users interact with the Platform.

You may control cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of the Platform, including your ability to log in or maintain session state.

We retain your Personal Data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data is retained for the duration of your account and for up to seven (7) years after account deletion for legal and compliance purposes;
• Payment records are retained as required by applicable financial regulations;
• Usage and listening data is retained for up to three (3) years;
• Communications with our support team are retained for up to two (2) years.

When you delete your account, we will delete or anonymize your Personal Data within a commercially reasonable time, except as required by law or for legitimate business purposes such as fraud prevention.

We implement commercially reasonable technical and organizational security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS;
• Secure password hashing using industry-standard algorithms;
• Access controls limiting employee access to Personal Data on a need-to-know basis;
• Regular security assessments and monitoring.

However, no security system is impenetrable, and we cannot guarantee the absolute security of your data. You are responsible for maintaining the security of your account credentials. ORA ECHO LLC is not responsible for any unauthorized access to your account resulting from your failure to maintain the security of your credentials.

Depending on your jurisdiction, you may have the following rights with respect to your Personal Data:

• Access: Request a copy of the Personal Data we hold about you;
• Correction: Request correction of inaccurate or incomplete data;
• Deletion: Request deletion of your Personal Data, subject to legal retention requirements;
• Opt-out of marketing: Opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us at [email protected];
• Opt-out of notifications: Opt out of new episode and streak milestone emails via the one-click unsubscribe link in each email;
• Data portability: Request a copy of your data in a portable format where technically feasible.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

The Platform is not directed to individuals under the age of eighteen (18). We do not knowingly collect Personal Data from children under 18. If you are a parent or guardian and believe that your child has provided us with Personal Data without your consent, please contact us at [email protected]. If we become aware that we have collected Personal Data from a child under 18, we will take steps to delete such information promptly.

ORA ECHO LLC is based in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to such transfer and processing.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, we rely on appropriate legal mechanisms for such transfers, including standard contractual clauses where applicable.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what Personal Data we collect, use, disclose, and sell;
• The right to delete your Personal Data;
• The right to opt out of the sale or sharing of your Personal Data;
• The right to non-discrimination for exercising your privacy rights.

We do not sell Personal Data. To exercise your CCPA rights, contact us at [email protected]. We will respond within the timeframe required by the CCPA.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last Updated" date. For significant changes, we may also send an email notification to the address associated with your account.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you must cease using the Platform.

For questions about this Privacy Policy or our data practices, please contact:

We will respond to privacy-related inquiries within thirty (30) days, or within the timeframe required by applicable law.