Privacy Policy

Last updated: July 7, 2026

1. Who We Are

AURA ("we", "us", "our") operates this coming-soon page. We are part of ORBEAT Records. If you have questions about this policy, contact us at info@orbeatrecords.com.

2. What Data We Collect

We collect only the information you voluntarily provide through our forms:

• Notify Me form: your email address
• Beta Registration form: your name, email address, label/company name, role, and any notes you choose to share

3. How We Use Your Data

We use your data only for the following purposes:

• To notify you when AURA launches (Notify Me signups)
• To review and respond to beta applications (Beta Registration)
• To communicate with you about your application status

4. Legal Basis (GDPR)

Under the UK GDPR and EU GDPR, we process your data based on your consent — you explicitly provide your information by submitting a form. You can withdraw consent at any time by contacting us.

5. Data Storage & Sharing

Your data is stored in a Neon Postgres database hosted on AWS (US East region). We use Elastic Email to send notification emails. Both services act as data processors under our instructions. Your data is not sold, shared with third parties for marketing, or used for any purpose other than those listed above.

Data retention: we retain submitted data until you request deletion or until AURA launches, whichever comes first, unless a longer retention is required by law.

6. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to our processing of your data

To exercise any of these rights, email info@orbeatrecords.com. We will respond within 30 days.

7. Cookies

This site does not use cookies, trackers, or analytics scripts that collect personal data. We do not use any third-party tracking services. A minimal cookie consent notice is displayed for compliance purposes.

8. Security

We implement appropriate technical measures to protect your data, including encrypted database connections (SSL/TLS), API rate limiting, and honeypot fields to prevent automated bot submissions.

9. Changes to This Policy

We may update this policy. Changes will be posted on this page with an updated date.