AURA Invites — Privacy Policy

AI Ops, LLC ("Company," "we," "us," or "our") operates the Aura Invites platform. We provide marketing automation and patient reactivation services for MedSpa businesses. For questions about this policy, contact us at privacy@aurainvites.com.

We collect information you provide directly to us, including:

• Name and business name when you contact us or sign up for our services
• Email address and phone number submitted through our contact forms or intake process
• Business information such as your MedSpa name, location, and patient list data you provide for campaign purposes
• Communications you send to us via email or contact forms

We use the information we collect to:

• Respond to your inquiries and provide our services
• Onboard you as a client and operate your reactivation campaigns
• Send you service-related communications and reporting
• Send marketing text messages when you have separately opted in to receive them
• Improve our platform and services
• Comply with applicable legal obligations

If you engage AURA Invites for reactivation services, you may provide us with contact information belonging to your patients. You represent that you have the right to share this data with us and that you have obtained any required consents. We process this data solely to perform the services you have engaged us for. We do not sell or rent patient data. We may disclose data to service providers acting on our behalf solely as necessary to provide the services, as described in Section 5.

We do not sell your personal information. We may share information with:

• Service providers who assist us in operating our business, such as SMS and email delivery providers, solely as necessary to provide services on our behalf. These providers are not permitted to use mobile information, SMS opt-in data, or SMS consent for their own marketing or promotional purposes.
• Professional advisors such as lawyers and accountants, under confidentiality obligations
• Law enforcement or government authorities when required by law

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy, or as required by law. When a client relationship ends, we will delete or return client data upon written request.

If you are a California resident, you have the right to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)

To exercise these rights, contact us at privacy@aurainvites.com.

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will post the updated policy on our website with a revised effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

AI Ops, LLC

Email: privacy@aurainvites.com

Website: aurainvites.com

If you separately opt in to receive marketing text messages from AI Ops, LLC regarding Aura Invites, we may send recurring promotional or marketing messages to the mobile number you provide. Message frequency varies. Message and data rates may apply. You may reply STOP at any time to unsubscribe or HELP for assistance.

SMS consent is not a condition of purchasing or using our products or services, and it is separate from your acceptance of our Terms of Service or this Privacy Policy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be sold, rented, transferred, or shared with third parties or affiliates for their own marketing or promotional purposes. Information may be provided to service providers acting on our behalf solely as necessary to deliver the messaging service.