Aura Innovation — Privacy Notice

We collect personal information from (a) users who create accounts and use the Service, and (b) Customer Data submitted to the Service (which may include tenant-related information such as names, unit identifiers, lease dates, and rental amounts).

We use personal information to provide and secure the Service, process files, generate Outputs, provide customer support, prevent fraud, and comply with legal obligations.

We retain personal information only as long as necessary for these purposes and as described below.

Depending on your location, you may have rights to access, delete, correct, or opt out of certain disclosures. See "Your Choices and Rights."

This Privacy Notice applies to personal information processed through the Service, our support channels, and related websites where this Privacy Notice is posted.

2.1 Information You Provide Directly

• Account information: name, business email, phone number, company, role

• Credentials: username and password (or SSO identifiers)

• Support communications: messages, attachments, recordings (if applicable)

2.2 Information Submitted to the Service (Customer Data)

Customer Data may include personal information about tenants or other individuals contained in leases, rent rolls, amendments, and related documents, such as:

• Names and unit identifiers

• Lease dates, rent amounts, and charges

• Contact details if present in source documents

Important: Customers are responsible for determining what data to submit and for ensuring they have a lawful basis and appropriate authorization to provide such data.

2.3 Information Collected Automatically

• Device and usage data: IP address, browser, device identifiers, log files, timestamps

• Activity data: page interactions, feature usage, error logs

• Cookies and similar technologies, as described in any applicable Cookie Policy

We collect personal information from:

• Users and Customers directly

• Files and content submitted to the Service

• Service providers (e.g., hosting, security, analytics) as necessary to operate the Service

We use personal information to:

• Provide, operate, and maintain the Service

• Process files and generate Outputs

• Authenticate users and manage accounts

• Provide customer support and communications

• Monitor performance, debug, and improve the Service

• Protect against fraud, abuse, and security incidents

• Comply with legal obligations and enforce our Terms

Customer Data submitted to the Service may be processed using artificial intelligence and machine learning technologies to generate lease abstracts, summaries, analyses, reports, and related outputs ("Outputs").

Customers retain all ownership rights in Customer Data submitted to the Service.

Aura Innovation does not use Customer Data to train public artificial intelligence models.

Unless expressly authorized in writing by the Customer, Aura Innovation will not use Customer Data to train proprietary AI models in a manner that would make Customer Data available to other customers or third parties.

While we strive to provide highly accurate results, AI-generated Outputs may contain errors, omissions, or inaccuracies. Customers are responsible for reviewing and validating Outputs before relying upon them for legal, financial, accounting, operational, or business decisions.

We may disclose personal information to:

• Service providers and subprocessors that help us operate the Service (including hosting, storage, security, analytics, and customer support providers)

• Professional advisors, including legal, accounting, and audit advisors

• Law enforcement agencies, regulators, courts, or other parties when required by law or legal process

We do not sell personal information in exchange for monetary compensation.

If applicable laws define certain advertising-related disclosures as a "sale" or "sharing" of personal information, we will provide any required notices and opt-out mechanisms.

In the event of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other corporate transaction, personal information and Customer Data may be transferred as part of that transaction, subject to applicable confidentiality and legal obligations.

We retain personal information only as long as necessary for the purposes described above, including:

• Account data: while the account remains active and for a reasonable period thereafter

• Customer Data: retained for sixty (60) days after processing unless the Customer requests earlier deletion or applicable law requires longer retention

• Backup copies: retained and deleted according to our backup rotation and disaster recovery procedures

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information and Customer Data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

However, no security system is completely secure, and we cannot guarantee absolute security.

If personal information is transferred across national borders, we will use appropriate safeguards as required by applicable law.

Depending on your jurisdiction, you may have rights to:

• Access or obtain a copy of your personal information

• Request deletion of personal information

• Correct inaccurate personal information

• Opt out of certain disclosures where required by law

• Restrict or object to certain processing activities where applicable

To exercise any applicable rights, contact us at the email address below.

The Service is intended for business and commercial use and is not directed to children. We do not knowingly collect personal information from children under the age of 13 or any higher age required by applicable law.

We may update this Privacy Notice from time to time. We will revise the "Last Updated" date and provide additional notice where required by law.

Aura Innovation

Email: info@aurainnovation.ai