Home / Privacy policy

Legal

Privacy policy

Last updated: September 14, 2026.

Data controller

Aurora Global Group, LLC (EIN 38-4314026), with registered office at 1209 Mountain Road Pl NE, Ste H, Albuquerque, NM 87110, USA, and operations in Barcelona (Spain). Privacy contact: info@auroraglobalgroup.com.

What data we process and why

  • Contact form: name, email, company, and the message content, for the sole purpose of replying to your inquiry and following up on it commercially.
  • WhatsApp: if you message us on WhatsApp, we process your number and your messages to handle the conversation (the service is provided by Meta under its own terms).
  • AI visibility checker: URL, email, company, and pseudonymized IP; details in its own section.
  • Site usage metrics: only if you accept analytics cookies (see the Cookie policy).

Legal basis

The basis for processing is the implementation of pre-contractual measures at your request (Art. 6(1)(b) GDPR) when replying to your inquiry, and your consent (Art. 6(1)(a) GDPR) for non-essential cookies.

Recipients and processors

Form submissions are stored on the website's hosting server, managed by Arsys Internet, S.L.U., with infrastructure in the European Union, and in Aurora's own CRM, hosted on that same server; email is handled with Google Workspace (Google Ireland Ltd.). Both providers act as data processors with GDPR safeguards. We do not sell or share your data with third parties.

Data retention

Contact data is kept for as long as the relationship or commercial conversation lasts and, afterward, for the applicable legal limitation periods.

Visit and AI-crawler analytics

We measure what is visited on this site, including visits by artificial-intelligence crawlers and agents, using Arrivl (Aura GTM, Inc., United States), which acts as our processor under a data processing agreement with the European Commission's standard contractual clauses. No cookies or browser identifiers are used for this: the data comes from the server log, after the page has been served to you.

For each request we send the requested URL, the date and time, the response code, the bytes served, the declared browser or crawler, and the referring page. The IP address is truncated: we replace its last block with a zero, so it does not identify a specific device. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in understanding how the site is used and cited. Data is kept for 24 months on Amazon Web Services servers in the United States and Japan; the provider may rely on OpenAI and Anthropic to classify traffic, without using the data to train models. You can object by writing to info@auroraglobalgroup.com.

AI visibility checker

The free AI visibility checker (and its Spanish version) processes the following data:

  • The URL you check. Used to run the six checks and show you the result. Legal basis: your request (Art. 6(1)(b) GDPR).
  • Your email and, if you enter it, your company. Used to send you the report by email, give you a link to view it online, notify the info@auroraglobalgroup.com mailbox, and record your request in Aurora's own CRM so we can reply if you answer the email. Legal basis: your request for the report, which you confirm with the box "I agree to receive the report by email" (Art. 6(1)(b) GDPR). Without that box, no report is sent.
  • Commercial information about GEO. Only if you tick the optional box "I'd like to receive information about GEO from Aurora Global Group". Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 21 of the Spanish LSSI-CE). If you don't tick it, we send you nothing commercial, now or later.
  • Your IP address. Stored pseudonymized (a hash, not the IP in clear text) to enforce the limit of 5 checks per hour and keep the tool from being used as a mass scanner. Legal basis: legitimate interest in protecting the service (Art. 6(1)(f) GDPR).
  • Analytics. Only if you accept analytics cookies, Google Analytics receives the domain checked, the score, the language, and whether you gave an email; never the email itself. See the Cookie policy.

Where it is stored. On the website's server, managed by Arsys Internet, S.L.U. (European Union): a log of each check with the URL, the score, the result of each check, your email and company if you give them, the language, the pseudonymized IP, and which boxes you ticked, plus a copy of the result for the report link. If you give an email, also in Aurora's own CRM, hosted on that same server, and in the notice to the info@auroraglobalgroup.com mailbox (Google Workspace). The report email is sent from the Arsys server.

How long. Rate-limit entries for your IP are deleted after two hours. The copy of the result is deleted after 24 hours if you gave no email, and after 180 days if you did (that is how long the report link works). The check log is kept for 24 months and then deleted. The CRM record is kept for as long as our relationship with you lasts.

Unsubscribing and erasure. To stop receiving commercial information, reply to any email with the word "unsubscribe" or write to info@auroraglobalgroup.com. To have your data erased from the check log, the report copy, and the CRM, write to that same address.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to info@auroraglobalgroup.com. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).