Privacy
Last updated 26 July 2026
Plain language, deliberately. Aurion is built by one person and is in beta; this page is an honest description of what happens to your data, not a legal document, and it is not legal or compliance advice. If anything here is unclear or you want your data gone, email privacy@aurion.fm.
What we collect
- Your account — the email address you sign up with.
- What you tell us — your calibration answers, and any bio or notes you write. These are the core of what Aurion does: it reads you from your own words, not from numbers you do not have yet.
- Your public music presence — what we read from Spotify and YouTube about the artist you confirm as you: catalog, titles, channel details, profile image.
- Your public social presence — for each social handle you give us: display name, bio, profile photo and follower count. Nothing else.
- Your scan history — a snapshot each time you scan, so the product can show how your identity has changed over time.
Why
To do the one thing Aurion is for: read your artist identity across the places you exist and tell you what is inconsistent or missing. Your scan history exists so that picture can improve release after release rather than starting from nothing each time. We do not sell your data, we do not share it for advertising, and we do not use it to train anything.
The third-party lookup
When you give us a social handle, a third-party service — Apify — fetches what that profile shows publicly, on your behalf. It is the same information anyone visiting your profile logged out would see.
We keep five things from it: handle, display name, bio, profile photo and follower count. That service returns a great deal more than that, and everything else is discarded the moment it arrives — it is never stored, never logged and never written to an error report. Your profile photo is copied into our own storage, because the link the platform provides expires within a few days.
We do not go looking for your accounts. Nothing is fetched until you type a handle, and removing the handle stops it.
Where it lives
In Supabase (database, authentication and file storage) and on Vercel, which runs the app. Interpretation is generated by Anthropic's Claude API, which receives the parts of your profile needed to write it. Sign-in emails are sent via Resend.
How long we keep it
For as long as you have an account. Scan history is deliberately kept — being able to show you how you have changed is the point of it — but it is yours, and you can have all of it deleted at any time.
Deleting your data
Email privacy@aurion.fm from your account address and ask. Everything — account, scans, calibration, social data and photos — is removed. There is no retention period and nothing to argue with; during beta this is done by hand, so allow a few days.
Cookies
Only what signing in requires. No advertising or analytics trackers.
Aurion is in beta and this page will get more precise as the product does. If something here does not match what you experience, that is a bug worth telling us about.