Privacy Policy

Last updated: April 10, 2026

1. Overview

Aurox ("we", "us", "our") is an AI-powered 3D modeling assistant for Rhinoceros 3D. This Privacy Policy explains how we collect, use, and protect information when you use the Aurox plugin, website, and related services.

2. Information We Collect

2a. Telemetry Data (Opt-In Only)

Aurox can collect anonymized usage telemetry to improve the AI assistant. Telemetry is off by default and requires explicit opt-in via a first-run consent dialog. When opted in, we collect:

  • Tool success rates and error patterns
  • Conversation turn counts and session duration
  • Grasshopper component usage statistics

2b. What We Do NOT Collect

  • File paths, file contents, or model geometry
  • Email addresses or personal information (via telemetry)
  • API keys or authentication credentials
  • Code or script content
  • Screenshots or viewport captures

2c. Account Information

If you create an account for the hosted subscription service (coming soon), we collect the email address you provide for authentication and billing purposes only.

2d. Website Analytics

Our website may use privacy-respecting analytics to understand traffic patterns. No personal data or cross-site tracking is involved.

3. How Data is Identified

All telemetry data is identified only by a SHA-256 hash of a locally generated installation ID. This hash cannot be reversed to identify you. File paths and email addresses are redacted before transmission by our anonymizer pipeline.

4. How We Use Your Data

  • Product improvement: Aggregated telemetry helps us identify common failures and improve AI accuracy
  • Technique generation: Failure patterns may be used to create new techniques (modeling best-practice rules) that improve the AI for all users
  • Weekly digests: Aggregated metrics are compiled into internal reports for development priorities

5. Data Storage and Security

Telemetry data is stored in a Supabase database with row-level security. Data is transmitted over HTTPS. We do not sell, share, or provide telemetry data to third parties.

6. Your Controls

  • First-run dialog: Asks for consent before any telemetry is sent
  • Settings > Telemetry: Toggle telemetry on or off at any time
  • "Delete Telemetry" button: In Settings, removes all your stored data from our servers
  • Permanent disable: Uncheck the opt-in box in Settings. No data is sent while telemetry is disabled.

7. Third-Party Services

Aurox integrates with the following third-party services depending on your configuration:

  • Anthropic (Claude API): Your prompts are sent to Anthropic for AI processing. See Anthropic's Privacy Policy.
  • OpenAI (BYOK mode): If you configure an OpenAI-compatible provider, prompts are sent to that provider under their terms.
  • Supabase: Anonymized telemetry storage. See Supabase Privacy Policy.
  • Railway: Backend hosting. See Railway Privacy Policy.

8. Data Retention

Telemetry data is retained for product improvement purposes. You may request deletion at any time using the in-app "Delete Telemetry" button or by contacting us. Account data is retained while your account is active and deleted upon request.

9. Children's Privacy

Aurox is not directed at children under 13. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of Aurox after changes constitutes acceptance.

11. Contact

For privacy questions, data deletion requests, or concerns: