Privacy Policy

Version 1.1. Effective August 22, 2026. Last modified August 22, 2026.

AUXERA PRIVACY POLICY
Version: 1.1 | Effective Date: August 22, 2026 | Status: APPROVED FOR BETA USE

1. Purpose

This Privacy Policy explains how Auxera LLC ("Auxera," "we," "us," or "our") collects, uses, stores and discloses personal information when users access the Auxera software platform ("Platform").

2. Information We May Collect

Account Information: name; work email; organization; job title; department; professional discipline; voluntarily provided work location (city, state, country).

Authentication Information: Authentication is provided through Clerk. Auxera may receive: Clerk user identifier; verified email; authentication status; organization identifier; and session information. Auxera does not independently store Clerk passwords.

Security and Technical Information: We may process: IP address; browser type; device type; login timestamp; failed login events; session identifiers; security-event information; and approximate IP-derived city/state/country used for security monitoring and permitted analytics. Auxera does not collect continuous GPS location.

Product Usage Information: We may collect: modules accessed; feature usage; session duration; workflow completion; errors; navigation behavior; and report creation events.

Project and User Content: Users may submit: project information; engineering documents; mitigation information; analyses; and uploaded files. Auxera processes these materials to provide requested Platform functionality.

Feedback and Support: We may collect: messages; feature requests; ratings; bug reports; screenshots voluntarily submitted; and support conversations.

Billing Information: If paid services are enabled, Stripe or another payment provider may process payment information. Auxera avoids directly storing full payment-card numbers.

3. How We Use Information

Information may be used to: create and maintain accounts; authenticate users; provide Platform functionality; manage organizations; secure the Platform; prevent fraud and abuse; troubleshoot; respond to support requests; improve user experience; understand feature adoption; maintain audit records; comply with applicable law; and enforce Platform agreements.

4. Behavioral Analytics

Where a user grants analytics consent, Auxera may use Microsoft Clarity to understand interaction, including clicks, scrolling, navigation, page interactions, session behavior, usability events, and visible page content. Clarity recordings may operate on the BCA, EHP, FEMA Toolkit, and Copilot workflows. All form inputs remain masked. Account, administrative, sign-in, and sign-up screens remain excluded from Clarity recording. Auxera does not intentionally transmit passwords, OTP or MFA values, API credentials, form-input values, or uploaded file contents to Microsoft Clarity. Users should not enter information into visible non-input content that they are not authorized to disclose to Auxera and its analytics service provider.

5. Analytics Consent

Non-essential analytics will not activate until the user grants consent. Users may manage analytics preferences in their account settings under Account → Privacy → Manage Analytics Preferences. Withdrawal of analytics consent does not disable essential account, security, or authentication functionality.

6. Service Providers

Auxera uses service providers for: authentication (Clerk); cloud hosting and infrastructure; behavioral analytics (Microsoft Clarity, where consent is granted); customer support (Intercom, where enabled); email delivery; payments (Stripe, where enabled); and security. These providers process information according to their respective agreements and privacy practices. Auxera only discloses information to service providers as reasonably necessary to operate, secure, support, and provide the Platform.

7. Sale of Personal Information

Auxera does not sell personal information for monetary consideration as part of its current business model. Auxera may disclose limited personal information to service providers and processors where reasonably necessary to operate, secure, support, analyze, or provide the Platform, as described in this Privacy Policy. Auxera does not characterize ordinary processing by contracted service providers acting on Auxera's behalf as a sale merely because information is technically transmitted to those providers. Nothing in this Section limits rights that an individual may have under applicable privacy law. If Auxera materially changes its data practices in the future, the Privacy Policy will be updated before implementing the changed practice where required.

8. Data Retention

Auxera retains information only as reasonably necessary for: Platform operation; security; contractual obligations; regulatory obligations; dispute resolution; legal acceptance evidence; and legitimate business requirements. Different information categories have different configurable retention periods. Legal acceptance records are retained for an extended period as evidence of contractual agreement.

9. Security

Auxera uses reasonable administrative, technical and organizational safeguards designed to protect information. Measures may include: encrypted network transmission; authentication controls; multi-factor authentication; role-based access; tenant isolation between organizations; secure session management; audit logs; security scanning; and restricted administrative access. No electronic system is completely secure.

10. User Data Rights

Depending upon applicable law, users may have rights relating to: access; correction; deletion; export; restriction; objection; and analytics preferences. Auxera provides workflows for applicable requests through Account → Privacy. Certain information may be retained where legally required or reasonably necessary for security, contractual evidence or dispute resolution.

11. Account Deletion

Deletion requests will: verify user identity; revoke active sessions; enter a deletion-pending state; apply applicable retention requirements; and delete or anonymize eligible information. Deletion of an account does not automatically require deletion of immutable legal acceptance records, audit evidence, or security records where lawful retention is required.

12. Profile Location vs. Session Location

Auxera maintains a clear separation between: (a) profileLocation — location voluntarily provided by the user as part of their professional profile; and (b) approximateSessionLocation — approximate city, state, and country derived from IP address or security infrastructure, used for security monitoring and permitted analytics. Auxera does not collect continuous GPS location and does not describe IP-derived location as precise.

13. Governmental and Professional Information

Users are responsible for determining whether governmental, engineering, applicant or project information may lawfully be submitted to Auxera. Users must not upload information that their professional, governmental or contractual obligations prohibit them from disclosing.

14. Children

Auxera is designed for professional users age 18 or older. Auxera is not intended for children.

15. Security Incidents

If Auxera determines that a security incident triggers legally required notification obligations, notices will be provided in accordance with applicable law. Not every security incident constitutes a legally defined data breach.

16. Changes to This Privacy Policy

Material Privacy Policy changes may require renewed acknowledgment or consent where required. Previous versions will be retained.

17. Contact

Privacy inquiries: privacy@auxera.io | Legal inquiries: legal@auxera.io | Legal notice address: Auxera LLC, 352 S Foster Dr, Apt 217, Baton Rouge, LA 70806, USA