AURUM SPACE – PRIVACY POLICY (GDPR & A2P Compliance)

Effective Date: June 27, 2026

Data Controller: AURUM SPACE EOOD, Sofia, Bulgaria

1. Data Collection

To provide our AI Agent services, we may collect:

Professional Data: Name, business email, phone number.

Business Information: Operational profiles provided for system configuration.

Conversation Data: Audio recordings and text transcripts of AI-handled interactions.

2. How Data is Used

Data is used solely to configure, operate, maintain, and improve the AI Agent service. Access to transcripts is restricted to authorized technical personnel for service monitoring, training, and platform performance optimization.

3. SMS Opt-In Details & Mobile Privacy Protection

We collect SMS opt-in details when users voluntarily submit their phone numbers through our online contact forms or consultation booking forms. By providing these SMS opt-in details, users consent to receive informational and marketing text alerts from AURUM SPACE EOOD. Users can revoke consent and opt-out of these communications at any time by replying STOP to any message received.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates for marketing or promotional purposes.

No mobile information, text messaging originator opt-in data, phone logs, or personal consent history will be shared, sold, transferred, or rented to external third parties, affiliates, or partners for marketing or promotional purposes under any circumstances.

4. Cookie & Tracking Info

We use cookies, web beacons, tracking pixels, and tracking info to make our websites and the platform operate cleanly, diagnose server problems, analyze traffic trends, and measure platform performance. You can manage your cookie preferences directly via your internet browser settings.

5. Data Security Practices

We implement industry-standard technical, organizational, and physical data security practices designed to protect your personal data from unauthorized access, loss, alteration, or disclosure. All personal data is stored securely behind encrypted firewall networks and restricted access protocols.

6. Third-Party Processors

We use GDPR-compliant infrastructure providers to handle underlying operational frameworks, including:

AI Model Providers (e.g., OpenAI)

Telephony Infrastructure (e.g., Twilio / LeadConnector)

Payment Processors (e.g., Stripe)

7. User Rights (Unsubscribe & Update Info)

Under GDPR and related global data frameworks, you have user rights to request access, correction, limitation, updating of your info, or complete deletion of your data from our systems.

Contact: For data inquiries or deletion requests, contact [email protected].