Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Aurex ("Aurex," "we," "us," or "our") collects, uses, and discloses information when you use our website, dashboard, and API (together, the "Services").

Aurex provides sales tax calculation, classification, and filing infrastructure for merchants selling collectibles, precious metals, and other high-value goods. Our customers ("Merchants") integrate the Services into their own stores and checkout flows. As a result, we process two categories of information: information about Merchants and their team members, and transaction-level information Merchants submit to us on behalf of their own customers ("End Customers").

Information we collect

Account information. When you create an account or request a demo, we collect your name, work email address, company name, and any other information you choose to provide.

Transaction and catalog data. To calculate, classify, and file sales tax, Merchants submit data such as product descriptions, order line items, shipping and billing addresses, and transaction amounts through our API or dashboard. This data may include End Customer information (such as a shipping address) that Merchants are responsible for having a lawful basis to share with us.

Usage data. We automatically collect information about how you interact with the Services, including API request logs, IP address, browser type, pages visited, and timestamps.

Communications. If you contact us for support or sales, we retain the content of that communication.

How we use information

We use the information we collect to:

  • Calculate, classify, and file sales tax on behalf of Merchants
  • Operate, maintain, and improve the Services, including our AI-assisted product classification
  • Provide customer support and respond to inquiries
  • Send account, billing, and service-related communications
  • Send product updates or marketing communications, where permitted, which you may opt out of at any time
  • Monitor for fraud, abuse, and security incidents
  • Comply with our legal and regulatory obligations

How we share information

We do not sell personal information. We share information in the following circumstances:

  • Service providers. With vendors who help us operate the Services, such as cloud hosting, payment processing, email delivery, and analytics providers, under contractual confidentiality and data protection obligations.
  • Tax authorities and filing partners. Where a Merchant has engaged Aurex to file returns on their behalf, transaction data may be disclosed to state tax authorities or registered agents as required to complete a filing.
  • Legal requirements. Where required to comply with applicable law, regulation, legal process, or governmental request.
  • Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

Data retention

Because tax calculations must remain auditable, transaction records and the tax content used to produce them are retained as an append-only history for as long as the associated Merchant account is active, and for the period required by applicable tax and recordkeeping law thereafter. Corrections are recorded as new entries rather than by altering or deleting past records. Account and usage data is retained for as long as reasonably necessary for the purposes described above.

International transfers

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers of personal information.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. If you are an End Customer of a Merchant and wish to exercise these rights, please contact the Merchant directly, as they control the collection of your information; we will assist Merchants in responding to such requests. Merchants and their team members may exercise these rights by contacting us at the email address below.

Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at privacy@tryaurex.com.