Privacy Policy

1. Who we are

AurumAI Ltd. operates this website as an AI-powered platform focused on gold market insights. We provide structured, explainable analysis of market data so users can explore trends and signals related to gold-focused assets. This policy applies to information collected on this website when you browse pages, interact with cookie controls, request a demo, or contact us.

Where this policy refers to “we”, “us”, or “our”, it refers to AurumAI Ltd. Where it refers to “you” or “user”, it refers to visitors and users of the website. This policy should be read alongside our Terms.

2. Cookie categories (three tiers)

Cookies are small text files stored on your device. We also use similar technologies (for example, pixels and event tags) to understand site usage and support advertising measurement when you consent. We divide cookies into exactly three categories. Essential cookies are required for core functionality. Analytics and marketing cookies are optional and are only activated after you provide consent.

3. Marketing cookies (mandatory sub-disclosures)

If you enable marketing and advertising cookies, we may use tracking technologies and advertising partners to deliver and measure ads. The disclosures below explain how those activities work and what choices you have.

4. Consent requirements

Our consent banner is designed to provide clear choices and avoid setting analytics or marketing cookies until you opt in. The banner offers three options: Accept All, Reject Non-Essential, and Manage Preferences. Your choice is stored in localStorage for 12 months. If you reject, only essential cookies operate.

5. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only, not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

6. Lead Forms and Contact Requests

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at the email address in this policy.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

7. Google Services and Advertising

This website uses the following Google services:

Google's advertising products are governed by: https://policies.google.com/technologies/ads

8. Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

• Page views and time on site
• Specific conversion events (form submissions, purchases)
• Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

9. Prohibited content self-declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

10. Landing page integrity statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

11. Children’s privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor.

12. International data transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.

13. User rights (GDPR Articles 15 to 22)

If you are located in the EEA or UK, you have the following rights:

• Access (Art. 15): request a copy of data we hold about you
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion ('right to be forgotten')
• Restriction (Art. 18): limit how we process your data
• Portability (Art. 20): receive your data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdraw consent (Art. 7.3): revoke consent at any time without penalty

To exercise any right, email us at the contact address provided in this policy. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

• EU users: https://edpb.europa.eu
• UK users: https://ico.org.uk

14. What data we collect

Depending on how you use the website, we may collect the following categories of information. Some items are provided directly by you, while others are collected automatically when you interact with the website and, if you consent, via analytics and advertising tools.

We do not intentionally collect special-category data (for example, health data) through the website. Please avoid submitting sensitive information in free-text fields.

15. Legal basis for processing (GDPR Art. 6)

Where GDPR or UK GDPR applies, we rely on the legal bases below. If you withdraw consent, this does not affect processing that occurred before the withdrawal.

16. Retention periods

We retain personal data only for as long as needed for the purposes described in this policy, unless a longer retention period is required by law. Specific retention periods include:

17. Changes to this policy

If we update this Privacy Policy, we will revise the “Last Updated” and “Effective Date” above. Material changes will be notified via a homepage banner at least 14 days before taking effect. Continuing to use the website after the effective date means you accept the updated policy.

18. Contact

For privacy questions, data access requests, or deletion requests, contact us using the details below. To help us verify your request, please include sufficient information to identify your interaction with the website, and do not include sensitive information in your message.