Privacy Policy
Last updated: August 22, 2026
Aura ("we," "us," or "our") provides parish and diocesan administration software (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit goaura.org, request early access, or otherwise use the Service.
Who we are
Controller: Aura. Contact: hello@goaura.org. If you are a parish or diocese using Aura, your organization remains the controller of parishioner data you provide to the Service; we act as processor under your instructions.
Information we collect
- Contact and account information: parish or diocese name, email address, administrative role, and any message or account details you provide. We use this to create and manage accounts, respond to inquiries, and provide onboarding and support.
- Usage data: basic analytics such as pages viewed, referring URL, device and browser type, and approximate region. We do not use advertising trackers.
- Cookies: only strictly necessary cookies to operate the site and Service. No third-party advertising cookies.
- Parishioner data: sacramental registers, census, and contributions you choose to entrust to the Service are processed only on behalf of your parish or diocese under a data processing agreement. This marketing site itself does not collect parishioner data.
How we use information
- To create and manage accounts, respond to inquiries, and provide support and onboarding.
- To operate, secure, and improve goaura.org and the Service.
- To communicate about the Service, including onboarding, availability, and product updates (you may opt out of non-essential communications at any time).
- To comply with law and enforce our Terms.
Legal bases where applicable (EEA/UK): legitimate interest to provide and improve the Service and respond to inquiries, consent where you provide it, and compliance with legal obligations.
Sharing
We do not sell parishioner data, analyze it for advertising, or share it with third parties for their own use. We share only with service providers who assist in operating the Service (e.g., hosting, email delivery) under confidentiality and data-processing terms, or when required by law.
Retention
Contact and account inquiries are retained until you request deletion or for up to 24 months after last contact. Parishioner data is retained per your parish or diocese's instruction and our data processing agreement. Usage data is aggregated or deleted within 12 months.
Security
Information is encrypted in transit (TLS) and at rest where applicable. Access is limited to authorized personnel. No system is perfectly secure; please contact us immediately if you believe your information has been compromised.
Your choices and rights
Depending on your location you may have rights to access, correct, delete, or restrict processing of your information, to object, and to data portability. To exercise these rights, email hello@goaura.org. You may also opt out of non-essential communications at any time. We will not discriminate against you for exercising your rights.
Children
The marketing site is not directed to children. The Service is intended for use by parishes/dioceses and their authorized staff and volunteers. Parishes are responsible for ensuring lawful handling of any youth information they later entrust to the Service.
International transfers
We are based in the United States. If you access the Service from outside the U.S., your information may be processed in the U.S. under applicable safeguards.
Contact
Questions about this Policy or to make a request: hello@goaura.org or by mail to Aura, Privacy Office.
Changes
We will post updates to this page and revise the "Last updated" date. Material changes will be communicated via the site or email where appropriate.