Last updated: August 2026
AuraOS ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our social media management platform at auraosstudio.com.
We collect the following information when you use AuraOS:
We use your information exclusively to provide the AuraOS service — specifically to authenticate you, store your connected account credentials, and publish content to your social media accounts on your behalf. We do not sell, rent, or share your personal information with third parties for marketing purposes.
When you connect your TikTok account, we collect your TikTok user ID and display name via the Login Kit API, and your OAuth access token to publish videos on your behalf via the Content Posting API. We only access the scopes you explicitly authorize (user.info.basic and video.publish). We do not access your TikTok followers, messages, or any other data beyond what is necessary to provide the publishing functionality.
When you connect an Instagram account, we access it through Meta's Graph API using Facebook Login. We collect only your Facebook user ID and name, the ID and access token of the Facebook Page you select, and the ID and username of the Instagram Business Account linked to that Page. These are used solely to publish the content you create in AuraOS to your Instagram account, at times you choose. We do not access or store your followers, direct messages, comments, or any other Instagram data. You can disconnect at any time from the Accounts page, which deletes the stored tokens immediately, or revoke access from Facebook Settings → Business Integrations.
Your data is stored securely using industry-standard encryption. OAuth tokens are stored in a secure database and are never exposed publicly. Uploaded media files are stored in encrypted cloud storage. Disconnecting a social account removes its tokens but does not delete uploaded media — see our Data Deletion page to request removal.
We retain your account data for as long as your account is active. When you disconnect a social media account, the associated OAuth tokens are deleted immediately. You may request deletion of all your data by contacting us at support@auraosstudio.com. Full details of what is and is not removed are on our Data Deletion page.
AuraOS uses the following third-party services to operate: Supabase (database), Cloudflare R2 (media storage), Upstash Redis (job queue), Anthropic (AI analysis of transcripts and generation of written content), and ElevenLabs (AI voiceover generation). Content you submit to features that use these providers is transmitted to them for processing. Each of these services has their own privacy policies governing data handling.
You have the right to access, correct, or delete your personal data at any time. You can disconnect any social media account from the Accounts page, which will remove the associated tokens from our system. For full data deletion requests, contact us at support@auraosstudio.com.
We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page.
For privacy-related questions or data deletion requests, contact us at support@auraosstudio.com.