This Privacy Policy explains how Aura InstaBoost ("we", "us") collects, uses, and protects your personal data when you use aurainstaboost.com. We comply with the EU General Data Protection Regulation (GDPR) and equivalent local laws.
1. Data We Collect
- Order data: Instagram username, post URL (for likes orders), email address.
- Payment data: handled directly by Stripe; we never see your full card number.
- Technical data: IP address, browser type, device, pages visited, referrer.
- Cookies: see our Cookie Policy.
2. Why We Use It (Legal Basis)
- To deliver your order — contract performance (Art. 6(1)(b) GDPR).
- To process payments and prevent fraud — legal obligation and legitimate interest (Art. 6(1)(c), (f)).
- To send transactional emails (confirmation, delivery notice) — contract performance.
- To improve the website — legitimate interest, based on anonymised analytics.
3. Sharing With Third Parties
We share data only with the processors required to run the Service:
- Stripe, Inc. — payment processing.
- Supabase / Lovable Cloud — database and email infrastructure hosting.
- Telegram — internal order notifications to our staff.
- SMM delivery provider — receives the Instagram handle / post URL needed to fulfil the order.
We do not sell your personal data.
4. International Transfers
Some processors are located outside the EEA (e.g. the United States). Where this occurs, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
5. Retention
We keep order and email records for as long as required to provide support, comply with tax/accounting obligations (typically up to 10 years), and resolve disputes. Anonymous analytics may be retained indefinitely.
6. Your Rights
Under GDPR you may, at any time, request to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data (right to be forgotten), subject to legal retention.
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent, where processing is based on consent.
- Lodge a complaint with your local data-protection authority.
To exercise these rights, contact hello@aurainstaboost.com.
7. Security
We use TLS encryption in transit, encrypted databases at rest, and access controls on all internal systems. No method of transmission over the internet is 100% secure, but we take commercially reasonable steps to protect your data.
8. Children
The Service is not directed to anyone under 18. We do not knowingly collect data from minors.
9. Changes
We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date.
10. Contact
Data controller: see Legal Notice. Email: hello@aurainstaboost.com.