General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.
This privacy policy applies to the website auranexus.ai as well as to our web applications on the subdomains press.auranexus.ai, vision.auranexus.ai, quote.auranexus.ai, hub.auranexus.ai, analyzer.auranexus.ai and ads.auranexus.ai. The specific features of the web applications are explained in Section 6.
Controller
auraNexus.ai GmbH i. G. Oliver Range Augustinusstraße 11a 50226 Frechen
Phone: +49 (0) 2234 4351436 E-mail: info@auranexus.ai
This website and our web applications are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, in Germany. The personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
We have concluded a data processing agreement (DPA) with our hoster. IONOS privacy policy.
Privacy Policy
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Note on the responsible party
The responsible party for data processing on this website is the controller named above.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Storage period
Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, provided that we have no other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons no longer apply.
Your rights
You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to have this data corrected, blocked or deleted. You also have the right to restrict processing and the right to data portability. You can contact us at any time for this purpose and for further questions on the subject of data protection.
Right to lodge a complaint with the competent supervisory authority
In the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. We use both technically necessary cookies and analysis cookies.
Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. They are necessary for the proper operation of the website.
Analysis cookies (e.g. for Google Analytics) are only set with your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected.
We use Complianz (Complianz BV, Netherlands) to manage your cookie consent. The tool stores your consent decision locally in your browser and allows you to adjust your preferences at any time. Complianz privacy policy.
Contact form and e-mail
If you contact us via contact form or e-mail, your details including the contact details you provide will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR).
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.
Newsletter
If you would like to subscribe to the newsletter offered on the website, we require an e-mail address from you. Registration takes place using the double opt-in procedure: After you register, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else’s e-mail address.
For sending newsletters and transactional emails, we use Plus Five Five, Inc. (Resend), USA, as a processor. The transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework. Resend’s privacy policy.
The processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time, for example by clicking on the unsubscribe link in each newsletter issue. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe. Data stored by us for other purposes remain unaffected.
We offer a WhatsApp chat for contacting us. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of Meta Platforms Inc.
When using it, your message, telephone number and other metadata are transmitted to WhatsApp and processed on servers in the EU and in the USA. The data transfer to the USA is based on the EU-U.S. Data Privacy Framework.
The use is based on your consent (Art. 6 para. 1 lit. a GDPR), which you grant by actively starting the chat. WhatsApp privacy policy.
Chatbot (Voiceflow)
On this website, we use a chatbot based on Voiceflow. The provider is Voiceflow Inc., 65 Front Street West, Toronto, ON M5J 1E6, Canada.
When using the chatbot, your entries (text messages) and technical data such as IP address, browser type and timestamp are transmitted to Voiceflow servers and processed there. The data may also be transferred to the USA. Canada has an adequacy decision from the EU Commission.
The use is based on your consent (Art. 6 para. 1 lit. a GDPR), which you grant by actively starting the chat. Alternatively, the processing is based on our legitimate interest in efficient customer communication (Art. 6 para. 1 lit. f GDPR). Voiceflow privacy policy.
Calendly
We use Calendly for scheduling appointments (Calendly LLC, 3423 Piedmont Road NE, Atlanta, GA 30305, USA). When booking, your entered data (name, e-mail address, possibly further information) is transmitted to Calendly and processed there.
The data transfer to the USA is based on the EU-U.S. Data Privacy Framework. The legal basis for the processing is your consent (Art. 6 para. 1 lit. a GDPR), which you grant by actively using the booking tool. Calendly privacy policy.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse your user behaviour on our website. Various usage data such as pages accessed, time spent, operating systems used and the origin of the user are recorded. This data may be summarised by Google in a profile.
We use Google Analytics with the IP anonymisation function. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA.
The data transfer to the USA is based on the EU-U.S. Data Privacy Framework. The use of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time.
Google privacy policy.
Google Maps
This website uses Google Maps to display maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When using Google Maps, data such as your IP address and your location are transferred to Google servers. This data may also be transferred to the USA. The data transfer to the USA is based on the EU-U.S. Data Privacy Framework.
The use of Google Maps is in the interest of an appealing presentation of our online offers and easy findability of our location (Art. 6 para. 1 lit. f GDPR). Google privacy policy.
Google reCAPTCHA
This website uses Google reCAPTCHA v3 to protect against spam and abuse. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When using it, data such as your IP address and your user behaviour are transmitted to Google. This data may also be transferred to the USA. The data transfer to the USA is based on the EU-U.S. Data Privacy Framework.
The use is based on our legitimate interest in protecting our website from abusive automated spying and spam (Art. 6 para. 1 lit. f GDPR). Google privacy policy.
Links to LinkedIn are integrated on our website. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
If you click on a LinkedIn link, you will be redirected to the LinkedIn platform. Data may be transmitted to LinkedIn. LinkedIn privacy policy.
The following sections apply to our web applications on the subdomains press.auranexus.ai, vision.auranexus.ai, quote.auranexus.ai, hub.auranexus.ai, analyzer.auranexus.ai and ads.auranexus.ai. The applications are aimed at business customers and registered users. When using them, additional data is generated beyond the mere website visit.
Cookies and consent (vision.auranexus.ai)
When you first visit
With your consent to the Statistics category, we use Google Analytics 4 there (Google Ireland Limited, details see section 5). Without your consent, no analytics cookies are set; we use Google Consent Mode, which in this case only transmits cookieless, non-personal signals.
With your consent to the Marketing category, we use Google Ads including conversion tracking (Google Ireland Limited). Cookies such as _gcl_au are set to measure the success of our ads. In addition, when you register we transmit a hashed version of your email address to our own system auraAds in order to attribute conversions server-side. Both only happen with your consent to the Marketing category.
Registration and Contract Data
When you create a user account, we process the data provided (name, e-mail address, company, access data) as well as the content and usage data generated during use. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of a contract or pre-contractual measures).
For the management of user accounts and logins, we use Clerk Inc., USA, as a processor in individual applications. The transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework. Privacy policy of Clerk.
Databases
For individual applications, we use database services from Supabase Inc., USA, with data storage in Ireland (AWS region eu-west-1). The legal basis is Art. 6 para. 1 lit. f GDPR, our legitimate interest in secure and stable operation. Privacy policy of Supabase.
Processing by AI Models
The core function of our applications is the processing of content by AI models, such as the creation of texts, the analysis of media content or the visualization of uploaded photos. For this purpose, we transmit the content you enter and the files you upload to specialized providers of AI models based in the EU and the USA. The transfer to third countries takes place on the basis of the EU-U.S. Data Privacy Framework or standard contractual clauses according to Art. 46 GDPR.
Your content is processed by these providers exclusively to provide the respective function and is not used to train AI models. The legal basis is Art. 6 para. 1 lit. b GDPR.
We list the providers we currently use in our continuously maintained list of sub-processors.
Note for auraVision: Uploaded garden photos may allow conclusions to be drawn about properties and persons depicted. If possible, please do not upload any photos in which people are recognizable. Uploaded photos and the visualizations created from them are assigned to the respective customer project and stored there for as long as the project exists. You can delete photos and projects in the application at any time. When your user account is deleted, the associated photos and projects are also deleted.
Payment Processing
For paid functions, we process payments via Stripe Payments Europe Ltd., Ireland. Stripe processes your payment data as an independent controller, partly with the involvement of Stripe Inc., USA (certified under the EU-U.S. Data Privacy Framework). We do not receive full payment data ourselves. The legal basis is Art. 6 para. 1 lit. b GDPR. Privacy policy of Stripe.
Error Diagnosis
To detect and fix technical errors, we use the Sentry service (Functional Software Inc., USA, certified under the EU-U.S. Data Privacy Framework) in certain applications. Technical error data such as browser type, time and error message is processed, but no content data. The legal basis is Art. 6 para. 1 lit. f GDPR, our legitimate interest in error-free operation. On vision.auranexus.ai, we additionally enable a session recording (Session Replay) to be able to understand usability issues, but only with your consent to the Statistics category. Privacy notices from Sentry.
Order Processing for Business Customers
Insofar as you use our applications as a company and have personal data of third parties processed in the process, we act as a processor according to Art. 28 GDPR. The basis is the data processing agreement concluded with you. The sub-processors mentioned there correspond to the list linked above.
For security reasons and to protect the transmission of confidential content, this page uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
As of: July 2026
