Privacy Policy

Last updated: 2026-04-18

1. Who This Applies To

This policy covers visitors, leads, and customers of aura-jonad.com. AuraJonad is the data controller. For international customers, Lemon Squeezy acts as a separate data controller for payment and tax data — see their privacy policy for that scope.

2. Data We Collect

• Account data: name, email, password hash, country.
• Order data: items purchased, purchase timestamp, license keys issued, download/access logs, booking times for services.
• Payment data: processed by Paymob (Egypt) or Lemon Squeezy (international). We never see or store full card numbers. We receive last-4, brand, country, and a tokenized reference only.
• Lead data: email and source tag (from free lead magnets and newsletter forms).
• Support data: messages you send us, chat transcripts, screenshots you attach.
• Technical data: IP address, device, browser, pages viewed, event actions (via GA4 and, if enabled, Meta Pixel).

3. How We Use It

• Deliver digital products (license keys, signed download URLs, Notion shares).
• Schedule and run service calls (audits, builds).
• Send order receipts, license delivery, and service onboarding emails.
• With your consent, send marketing emails, product updates, and launch notifications.
• Improve the website, measure funnel performance, and fix bugs.
• Detect fraud, abuse, chargebacks, and comply with legal requests.

4. Who We Share With

• Paymob — payment processing for Egypt.
• Lemon Squeezy — merchant of record for international orders (handles VAT and sales tax).
• Supabase, Vercel, Cloudflare, Resend — infrastructure, hosting, email delivery.
• Google Analytics 4 / Meta — analytics and ad measurement, if you consent to non-essential cookies.
• Notion, Loom, Zoom — delivery of specific product components (templates, walkthroughs, calls).
• Authorities — only if legally required.

We never sell your personal data.

5. Cookies & Tracking

Essential cookies power login, cart, and checkout. Analytics cookies (GA4) and marketing pixels (Meta) only load after you accept non-essential cookies in our banner. You can withdraw consent at any time via the cookie settings link in the footer.

6. Your Rights

You can request access, correction, export, or deletion of your data, or object to processing, by emailing privacy@aura-jonad.com. We respond within 30 days. EU/UK residents have rights under GDPR; California residents have rights under CCPA.

7. Data Retention

Account and purchase records are kept for 7 years to comply with Egyptian commercial and tax law and to honor lifetime-license obligations. Lead emails are kept until you unsubscribe. Analytics data is retained per GA4 defaults (14 months).

8. Security

HTTPS everywhere, encrypted database at rest, row-level security, signed short-lived URLs for digital deliveries, and scoped staff access. No system is 100% secure; if a breach affects your data, we will notify you and the appropriate authority within 72 hours.

9. International Transfers

Your data is processed outside Egypt (Supabase EU, Vercel, Lemon Squeezy US, Paymob Egypt). We rely on standard contractual clauses and vendor DPAs to protect it.

10. Children

We do not knowingly collect data from anyone under 18 and do not market to minors.

11. Changes

We may update this policy. Material changes are emailed to registered users and posted here with a new "Last updated" date.

12. Contact

privacy@aura-jonad.com