Privacy Notice

1. Controller

2. Data and purposes

• Website and security data: IP address, device/browser data, timestamps and logs, to deliver and secure the website and prevent abuse.
• Account data: name, email, identifiers, language, authentication and settings, to create and administer your account.
• Workspace content: prompts, uploaded files or images, conversation history and generated output, to perform the feature you request and let you access your history.
• Order data: plan, amount, currency, tax country, transaction reference and subscription status, to fulfil purchases, provide support and meet accounting duties. Complete card data is handled by the payment provider, not Sina.
• Messages and consent choices: support correspondence, newsletter choice and cookie preference, to answer you and record your choices.

3. Legal bases

Contract steps and service delivery rely on Art. 6(1)(b) GDPR; accounting and consumer-law records on Art. 6(1)(c); service security, limited operational measurement and legal claims on legitimate interests under Art. 6(1)(f); newsletters, non-essential analytics and comparable optional processing on consent under Art. 6(1)(a). You may withdraw consent prospectively at any time.

4. AI and other recipients

Only the content needed for a requested feature may be sent to configured AI and infrastructure providers. Depending on the selected feature these can include OpenAI, Anthropic and Google. Hosting, email delivery, website analytics (only after consent) and the payment provider displayed in checkout also receive the minimum data required for their function. Professional advisers or authorities receive data only where legally required. We do not sell personal data.

5. International transfers

Some technology providers may process data outside the European Economic Area. Where the destination is not covered by an EU adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses and, where appropriate, supplementary measures. Details relevant to your selected feature are available at info@ahura.cloud.

6. Retention

Account and workspace data is retained while your account is active and then deleted or anonymised when no longer needed, subject to backups and legal claims. You can delete supported workspace content in the service or request account deletion. Security logs are kept only for a limited operational period. Invoices and transaction records are retained for the statutory German accounting and tax periods, generally up to ten years.

7. Cookies and analytics

Strictly necessary storage supports security, sessions, language and your consent choice. Non-essential analytics or marketing technology is loaded only after consent. You can reopen the cookie settings to withdraw or change that consent; refusal does not block core access.

8. Your rights

Subject to the GDPR's conditions, you can request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent at any time and complain to a supervisory authority. Our lead contact is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), datenschutz-hamburg.de.

9. Required data and automated decisions

Account and checkout fields marked as required are necessary to provide the requested contract; without them we cannot open the account or complete the order. Sina does not make decisions about you that produce legal or similarly significant effects under Art. 22 GDPR.

10. Contact and updates

Privacy requests: info@ahura.cloud. We update this notice when processing changes and publish the current date above.