1. Who We Are

AUREM is a Website Repair and business-automation service operated by Polaris Built Inc., a corporation registered in Ontario, Canada. We are committed to handling your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.

2. Information We Collect

We collect three categories of data:

• Account data: name, email, company, billing address, payment method (via Stripe).
• Audit & Repair data: screenshots, SEO/schema scans, performance metrics, and credentials or OAuth tokens you voluntarily grant so we can repair your Shopify store, Google Search Console, domain DNS, or similar platforms.
• Platform telemetry: usage logs, error traces, AI-agent conversation history, and session metadata used to deliver and improve the service.

3. How We Use Your Information

We use your data only to: deliver the Audit and Repair work you purchased; operate our AI agents on your behalf; process payments; send service notifications; investigate fraud or misuse; and comply with legal obligations. We do not sell your data.

4. Access to Client Dashboards & End-Customer Data

During a Website Repair engagement we may access dashboards that contain your end-customers’ personal information (e.g., Shopify orders, analytics). We act as a data processor on your behalf. We:

• Access only what is strictly necessary to perform the Repair.
• Do not export, copy, or store your end-customer data on our systems beyond what is required to complete the work.
• Revoke our access immediately once the Repair is accepted.
• Maintain audit logs of any access for 12 months.

5. Storage & Security

Data is stored in encrypted databases with AES-256 at rest and TLS 1.3 in transit. Access to production systems is restricted to authorized personnel behind multi-factor authentication. We run multi-tenant isolation with per-client scoping enforced at the database layer.

6. Third-Party Processors

We rely on reputable vendors: Stripe (payments), Google (OAuth and Workspace), MongoDB Atlas (database), Redis Cloud (caching), and LLM providers (OpenAI, Anthropic, Google) for AI-agent inference. Each is contractually required to protect your data and we share only what is necessary for each function.

7. Your Rights Under PIPEDA

You have the right to: request access to personal data we hold about you; correct inaccuracies; withdraw consent; request deletion subject to our legal retention obligations; and file a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated. To exercise any of these rights, email ora@aurem.live.

8. Retention

Account and engagement data is retained for the duration of your active subscription plus 30 days. Audit reports and invoices are retained for 7 years to meet Canadian tax and accounting requirements. You may request earlier deletion of non-financial data at any time.

9. Data Location & Cross-Border Transfer

Primary data storage is in North America (Canada / United States). Some sub-processors (Stripe, Google) may process data in other jurisdictions. By using the service you consent to such cross-border processing under the safeguards above.

10. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising trackers. You may disable non-essential cookies in your browser settings without losing core functionality.

11. Children’s Privacy

The service is intended for businesses and users aged 18 and above. We do not knowingly collect data from children under 13.

12. Changes to This Policy

We may update this Policy as the service evolves. Material changes will be emailed to active clients at least 14 days before taking effect.

13. Contact, Privacy Officer

For any privacy question, complaint, or access/deletion request, reach our Privacy Officer at ora@aurem.live or by mail: Polaris Built Inc., 7221 Sigsbee Drive, Mississauga, ON L4T 3L6, Canada. We respond within 30 days as required by PIPEDA.