Privacy Policy

01 Data we collect

From the Start a project form: your name, email, phone number, company, the service you need, your budget range, your timeline and the project details you write in the form.

If you click our Zalo or phone link, what you share in that chat or call is handled the same way as a form message.

Basic technical data your browser sends when you visit, such as IP address, browser type and pages viewed.

We do not ask for sensitive personal data. Please do not include it in your brief.

02 Why we use it

To reply to your enquiry, prepare a quotation and work with you on a project. To keep the website secure and see which pages people use.

We do not sell or rent your personal data.

03 Who can see it

Only Aura staff who handle enquiries and projects. Form messages are stored in our content management system on our own servers in Ho Chi Minh City, and are delivered to us by email through Google (Gmail). Website traffic passes through Cloudflare for delivery and security. These providers process the data only to run these services for us. We share data with authorities only when the law requires it.

Videos are embedded from YouTube in privacy-enhanced mode and load only when you press play; YouTube then handles that data under its own privacy policy.

04 How long we keep it

Enquiries that do not become a project: up to 24 months, then deleted. Data linked to a signed contract: as long as accounting and tax law requires.

05 Cookies

We use Google Analytics and Meta Pixel to understand how visitors use the website and to measure our ads. These tools set cookies in your browser. You can block or delete cookies in your browser settings.

06 Aura Social

The sections above cover this website. This section covers Aura Social, the internal tool we use to schedule and publish posts on our own Facebook Page "AURA Productions", our Instagram and Threads accounts (both @aura.prodhouse) and our LinkedIn Page. We also use it to post on the personal LinkedIn profiles that Aura staff choose to connect. It is a copy of the open-source scheduler Postiz that we run on our own server. The sections after this one apply to both the website and Aura Social.

Aura Social connects to Meta through two apps we registered with Meta: one also called "Aura Social" (for Facebook and Instagram) and "Aura Social Threads" (for Threads). The tool connects to LinkedIn through a third app we registered with LinkedIn, also called "Aura Social". Apart from the personal LinkedIn profiles of Aura staff, only our own accounts are connected. The apps are not offered to the public, and no one outside Aura signs in through them.

For these accounts, the tool stores their IDs, names, usernames and profile pictures. It stores the access and refresh tokens that let it post for us, including an access token and the account ID of the staff member who connected them. It keeps the posts, photos and videos we schedule or publish through it.

When a member of Aura staff connects their personal LinkedIn profile, they agree to let Aura Social store their LinkedIn member ID, name, profile picture and public profile URL, together with the access and refresh tokens for that profile. The tool reads these details when the profile is connected and again each time it renews the connection. They can withdraw their consent at any time and ask us to delete this data, as our Data Deletion page explains.

With the permissions we gave it, the tool can also read statistics about our own Pages and accounts. It can read the public comments and replies that other people leave on our posts as well. Meta and LinkedIn send each comment or reply with details of the person who wrote it, such as their name or username and account ID. The tool reads statistics, comments and replies only when we use those features. Apart from those comments and replies, it does not collect data about anyone outside Aura.

We use this data only to publish our posts, manage comments on them and see how they perform. We do not sell or rent it. We do not use it for advertising, sales, recruiting or building profiles of people.

The data is stored on our own server in our Ho Chi Minh City office. Only Aura staff can sign in to the tool. Photos and videos we upload to it can be opened by anyone who has the direct link to them, because Meta fetches them from that link to publish a post. Traffic to and from the tool passes through Cloudflare for delivery and security.

We also use an AI assistant, Claude by Anthropic, to draft and schedule posts in the tool for us. It can see the accounts, posts and media in the tool. Claude runs on Anthropic's systems, so the data it works with is sent to Anthropic. We share the data with authorities only when the law requires it.

We keep this data while an account is connected to the tool. When we disconnect an account, we delete its stored tokens and data. When someone asks us to delete data about them, we do so as our Data Deletion page explains. If we stop using Aura Social, we delete its data.

Backups of Aura Social are kept on its server and on our storage in the office. Old copies are deleted automatically, so deleted data is gone from all backups within 10 days.

To ask us to delete this data, including any copy of a comment you left on our posts, email [email protected]. Our Data Deletion page at aura-production.net/data-deletion explains how to remove our apps' access and what we delete.

07 Your rights

You can ask us to show you the data we hold about you, correct it, delete it, or withdraw your consent. Email us at [email protected] and we will reply within the time the law requires.

08 Changes

We may update this policy. The date at the top shows the latest version.

09 Contact

Aura Productions, 824/5 Sư Vạn Hạnh, Phường Hòa Hưng, TP. Hồ Chí Minh, Vietnam. Email: [email protected]