Privacy policy
Last updated: October 5, 2026
This policy explains what personal information Auromis collects through this website and through the Auromis service, how we use and share it, and the choices you have. Auromis is a business tool for commercial subcontractors and the people who do their books. It isn’t meant for personal or household use.
On this page20
- Who we are
- The short version
- What we collect and why
- Documents you upload
- AI extraction and improving the service
- Who we share it with
- We don’t sell your information
- Text message alerts
- Emails from us
- Cookies
- How long we keep it
- Security
- Your choices and rights
- How to make a request
- If you’re outside the United States
- Children
- Where we process data
- Automated decisions
- Changes to this policy
- Contact
This policy covers two things. This website creates standard server logs when you open a page, and collects what you type into the cash-report or contact form — nothing else. The Auromis app is where accounts, uploaded documents, support conversations and billing come in.
Who we are
This website and the Auromis service are provided by:
Auromis
Email: support@auromis.com
In this policy, “Auromis”, “we” and “us” mean that business. Email is the fastest way to reach us about anything in this policy.
The short version
- We don’t sell your personal information, and we don’t share it for targeted advertising.
- This website stores nothing in your browser and makes no request to any other company’s server: no analytics, no advertising, no tracking cookies, no third-party embeds, and fonts served from our own server.
- We process the documents you upload to run the service for you. We never send anything in your name.
- We never sell your documents or the data in them.
- Corrections you make may help us improve how Auromis reads documents of that kind.
- Statistics combined across many customers are only produced with your consent.
- You can ask to see, correct or delete your information.
What we collect and why
| What | Examples | Where it comes from | Why we use it |
|---|---|---|---|
| Cash-report requests | Name, work email, company, role, trade, main state you work in, number of active jobs, how you heard about us (optional), which version of the site you used (US, UK or Germany) and the page you signed up on | You | To put your cash report together and send it to you, decide who we set up first, keep you updated about Auromis and prepare your account. Your optional answer on how you heard about us shows us which channels work |
| Messages to us | Name, email address, company, topic, your message | You | To answer you |
| Server logs | IP address, date and time, page requested, browser and operating system, referring page | Your browser, automatically | To deliver the website, keep it secure and fix errors |
| Account details | Name, work email, company, role, login credentials, settings, users you add | You and your colleagues | To provide the service and keep your account secure |
| Uploaded documents and extracted data | Pay apps and invoices, schedules of values and contract lines, approvals and notices from GCs, remittances, bank statements, accounting exports; amounts, dates, GC and job names, contact names | You and the users you add | To provide the service on your instructions (see “Documents you upload”) |
| Support conversations | Chat and email transcripts | You | To help you and improve our help content |
| App usage logs | Sign-ins, uploads, errors, features used, with time and user account | Automatically | To keep the service secure, fix problems and improve it |
| Billing details | Company name, billing contact, address, tax ID, plan, invoices | You and our payment provider | To bill you and keep records the law requires |
| Mobile number (only if you opt in) | Phone number and your text-alert consent | You | To send deadline alerts by text |
| Business contact details from public sources | Name, work email, company, trade, license or public-works details | Public records (see “Emails from us”) | To tell businesses about Auromis |
We only use sensitive personal information, such as your login credentials, to provide the service and keep it secure. We don’t use it to infer anything about you.
What you type into a form reaches us only when you press send. Submissions go to our own server, run for us by Cloudflare (see “Who we share it with”); they are not passed to any other company, and we use them only for the purpose the form is for.
Documents you upload
When you upload documents, we process them on your behalf and only to provide the service to you. In legal terms we act as your service provider (or “processor”). We don’t use your documents for our own marketing, and we never sell them.
If you’re named in a document that one of our customers uploaded, for example as a project manager at a GC, please contact that customer first. We’ll help them respond.
We never send letters, notices or anything else in your name, and we never log in to GC portals. Letters are drafts that you check, edit and send yourself.
AI extraction and improving the service
Auromis uses artificial intelligence (AI) to read your documents. To do that, we send document content to an AI provider, which processes it on our behalf and returns what it has read. Every extracted number links back to where it was found in the document, so you can check it. Totals and deadlines are calculated by fixed program code, not by the AI.
What we do, and don’t do, with what you upload:
- We use it to run Auromis for you. That’s what you give it to us for, and we don’t use it for our own marketing.
- We never sell it, and we never hand it to your GCs, your competitors or data brokers.
- Corrections may improve how documents are read. When an extracted value is corrected, by you or by our team, we may keep that example — the relevant excerpt of the document and the correct value — and use it to check and improve how Auromis reads documents of that kind.
- Document layouts. We learn the layout of recurring documents, such as a particular GC’s pay-app form, so Auromis reads that format faster for every customer. Other customers never see your numbers or your content.
- Statistics only with your consent. Combined figures across many customers, such as how fast a GC pays on average, are produced only if you agree to it. The data is de-identified and grouped first, so no individual customer can be identified.
- You can delete it. Deleting a document in Auromis deletes the data extracted from it too, on the schedule in “How long we keep it”.
We choose AI providers on the basis of what their contracts allow them to do with the content we send. Before any provider handles a document you upload, we name it in the table under “Who we share it with”, say where it processes data and set out what we agreed.
Who we share it with
We share personal information only as far as the purposes above need it, and only with companies that process it on our behalf under a contract limiting what they may do with it. Today there is exactly one:
| Provider | What they do | Information | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosts this website, delivers it to your browser and runs the server that receives our forms | Server logs: IP address and request details. What you send us through the cash-report or contact form | Cloudflare’s global network. Form submissions are stored in its Western Europe region. The company is based in the United States |
Nothing else about this website reaches a third party: there is no analytics provider, no advertising network, no font, map or video service and no chat widget.
We will also need providers for our mailbox, for AI document reading, for support chat, for text alerts and for payments. Each one goes into the table above, with what it does and where it processes data, before it starts handling anything. If a payment provider acts as a reseller (merchant of record), you’ll buy your subscription from it, and it will handle your payment details under its own privacy policy.
Apart from that, we may disclose information when the law requires it, to protect our rights or the safety of others, to our professional advisers, or as part of a merger, acquisition or sale of our business. In that case we’ll tell you before your information becomes subject to a different privacy policy.
We don’t sell your information
We don’t sell personal information, and we don’t share it for cross-context behavioral advertising or use it for targeted advertising, as those terms are defined in US state privacy laws. We haven’t done so in the past 12 months. We don’t disclose personal information to third parties for their own direct marketing.
Text message alerts
If you opt in, we’ll text you deadline alerts at the mobile number you give us. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out. Text alerts are optional and not required to use Auromis.
We don’t share your mobile number or your text-message consent with third parties or affiliates for their marketing.
Emails from us
If you ask us for a cash report, we’ll email you the report, anything we still need in order to produce it, and updates about Auromis. We’ll only send you a newsletter or other marketing emails if you agree to them separately.
We may also email people at construction businesses to tell them about Auromis. For that we use business contact details from public sources, such as state contractor-licensing records and public-works filings. If we ever buy business contact data from a provider, we’ll name the provider here before we use it.
Any marketing email we send says who it is from, includes a postal address for us, and has a simple way to opt out. We honor opt-outs within 10 business days and keep your address on a suppression list so you aren’t emailed again.
Cookies
We don’t use analytics, advertising or tracking cookies. In fact this website stores nothing at all in your browser — our Cookie notice explains that in full. Because we don’t track you across sites, our website doesn’t respond differently to Do Not Track signals.
How long we keep it
| Information | How long |
|---|---|
| Server logs | 30 days, unless we need them longer to investigate a security incident |
| Cash-report requests | Until you unsubscribe, or at most 24 months after we last heard from you |
| Messages to us | 24 months after we’ve answered |
| Account details | While you’re a customer, then deleted within 90 days of your account closing |
| Uploaded documents and extracted data | Until you delete them or your contract ends. You can then export your data for 30 days, after which we delete it from our active systems. Backups are overwritten within a further 35 days |
| Correction examples (see “AI extraction and improving the service”) | 24 months |
| Support conversations | 24 months |
| App usage logs | 12 months |
| Billing records | As long as tax and accounting law requires us to keep them |
| Suppression list after you opt out | For as long as you shouldn’t be contacted |
Where we have to keep something longer because the law requires it, or because we need it to establish or defend a legal claim, we keep only that and nothing more.
Security
This website is served only over an encrypted connection (HTTPS/TLS). It sends strict security headers, including a content security policy that blocks third-party code, it loads nothing from any other company’s server, and it stores nothing in your browser — so there is very little about a visit to attack.
In the app we encrypt stored data, give access only to the people who need it and log that access; our Security page describes how. No system is perfectly secure. If you find a security problem, please email support@auromis.com and we’ll look into it.
Your choices and rights
Everyone can:
- ask for a copy of the personal information we hold about them,
- ask us to correct or delete it,
- unsubscribe from marketing emails using the link in every email,
- stop text alerts by replying STOP.
Depending on where you live, US state privacy laws may also give you the right to know how we collect, use and disclose your information, to receive it in a portable format, to opt out of its sale, sharing or use for targeted advertising (we don’t do any of these), and not to be treated differently for using your rights.
Many of these laws apply only to businesses above certain size thresholds. California’s law, for example, applies to businesses with annual gross revenue above $26,625,000 (the figure in effect since January 1, 2025), businesses that buy, sell or share the personal information of 100,000 or more California consumers or households, and businesses that earn half or more of their revenue from selling or sharing personal information. Most other states’ laws don’t cover people acting in a business or employment context. So these laws may not apply to Auromis. We’ll honor the requests described here anyway.
How to make a request
Email support@auromis.com. We’ll confirm we received your request within 10 business days and answer within 45 days. If we need more time, we’ll tell you, and we may extend once by up to another 45 days.
To protect you, we’ll verify your identity by matching what you tell us with what we hold, for example by confirming your email address. You can also use an authorized agent; we may ask for proof that you authorized them.
If we decline your request, you can appeal by replying to our decision within 30 days. We’ll answer your appeal within 45 days. If you’re not satisfied with the outcome, you can contact your state attorney general.
If you’re outside the United States
This policy covers the US version of this website. The UK version has its own privacy notice, written for UK data protection law, and you can reach it from the footer of any UK page.
Wherever you are, you can email support@auromis.com to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to object to how we use it, or to withdraw a consent you gave us. We’ll handle your request whether or not the law where you live obliges us to.
Children
Auromis is for businesses. We don’t knowingly collect personal information from anyone under 16. If you think a child has given us personal information, please email support@auromis.com and we’ll delete it.
Where we process data
This website is delivered by Cloudflare’s global network, which means a page may be served, and the request logged, from a Cloudflare location in another country. Your information may therefore be processed outside your state or country, where privacy laws may differ, but always under the protections described in this policy.
We name every provider we use, and say where each of them processes data, in the table under “Who we share it with” — so you can see exactly where your information goes.
Automated decisions
We don’t make decisions about you by automated means alone that have legal or similarly significant effects on you. Auromis works out deadlines and prepares draft letters automatically, but you decide what to do with them.
Changes to this policy
We’ll update this policy when our service or the law changes. The date at the top shows when it last changed. We’ll also email customers about significant changes.
Contact
Questions about this policy or your information?
Auromis
Email: support@auromis.com