AURALOPrivacy policy
Last updated 5 November 2026
Auralo is an internal tool run by NextGen Solutions (“we”) in New Zealand. Staff of NextGen Solutions and the businesses it manages use it to plan, write, approve and publish social media posts, reply to comments and reviews, and keep business listings up to date. Auralo isn't offered to the public. This policy explains what information Auralo handles and how, in line with the New Zealand Privacy Act 2020.
What we collect
- People who sign in: name, email address, sign-in records and the actions taken in Auralo (an audit log).
- Connected accounts: when a business connects Facebook, Instagram, LinkedIn, TikTok, Google Business Profile or YouTube, we store the access tokens the platform gives us (encrypted) and the account's name, ID and link.
- Business content: posts, articles, images, videos, brand settings and schedules that our staff create or upload.
- Platform data: for the businesses' own accounts only, the posts they published, numbers about those posts (such as likes, reach and clicks), follower counts, and comments and reviews left on them, including the commenter's or reviewer's public name and what they wrote.
How we use it
- To publish the businesses' posts, show their results, and let staff read and reply to comments and reviews.
- To keep the businesses' own listings and profiles accurate (for example, a Google Business Profile description or services).
- To suggest drafts, replies and plans using AI, based on the business's own content and results.
- To keep Auralo secure and to fix problems.
We don't sell personal information, use it for advertising, or build profiles of the people who comment on or review the businesses.
Google user data
When a business connects Google Business Profile or YouTube, Auralo uses Google user data only to provide the features the business sees in Auralo: posting to its own listing and channel, reading and replying to its own reviews, reading and updating its own listing details, and uploading its own videos. Auralo's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We don't transfer Google user data to others except as needed to provide these features, for security, or as required by law. We don't use it for advertising, and no person reads it except where the business asks us to, for security, or as required by law. Google user data is not used to train AI models.
Who we share it with
Auralo uses service providers to run, each under its own privacy and security terms:
- Vercel (hosting) and Supabase (database and file storage).
- Anthropic (AI writing and suggestions) and fal.ai (AI images), which receive only the content needed for the task.
- Resend (alert emails to staff).
- The social platforms and Google, when we publish or reply on the business's behalf.
Some of these providers store or process data outside New Zealand, including in Australia and the United States. We choose providers that protect information to a standard comparable to New Zealand law.
Keeping it safe
Access tokens are encrypted. Access to Auralo needs a staff sign-in, and each person sees only the businesses they work on. Connections can be removed at any time from Auralo or from the platform itself (for example, Google Account → Security → Third-party connections).
How long we keep it
We keep business content and results while the business uses Auralo. When an account is disconnected, we stop using its tokens and delete them. When a business stops using Auralo, we delete its data within 90 days unless we must keep it by law.
Your rights
You can ask to see or correct personal information we hold about you, or ask us to delete it, by emailing accounts@nextgensolutions.nz. We reply within 20 working days. If you're not happy with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Contact
NextGen Solutions, Christchurch, New Zealand · accounts@nextgensolutions.nz