1. Introduction & Service Operator
Aupero is a modern workspace and branded portal platform designed to streamline collaboration between digital agencies, creative studios, consultancies, and their clients.
Data Controller & Operator Identification:
Aupero is operated and maintained by Aupero Software SARL, a Togolese company and startup (NIF: 1002053591) located at Zossimé–Nanégbé, Lomé, Togo.
For any privacy inquiries, data subject rights requests, or questions regarding this Privacy Policy, our legal contact is: [email protected].
We believe that business software should respect your privacy. We practice data minimization: we collect only what is strictly necessary to deliver a reliable workspace, manage projects, and facilitate seamless client collaboration.
2. Information We Collect
Depending on how you use Aupero, we collect the following categories of information:
A. Account & Authentication Information
When you register for an account, we collect your full name, email address, and authentication credentials. We use industry-standard cryptographic hashing for passwords; we never store passwords in plaintext. If you authenticate via Google OAuth, we receive your basic profile name and email address as authorized by you.
B. Organization & Workspace Data
Workspace names, branding configuration (logos and portal settings), team member email addresses, assigned roles (owner, admin, member), and workspace invitations.
C. Client & Project Information
Client contact profiles (client names, email addresses), project titles, descriptions, status, start dates, and due dates. Project milestones, sequencing, progress indicators, notes, and visibility preferences.
D. Intake Forms & Responses
Custom intake forms created by your organization, along with submitted client responses. Supported field types include short text, long text, numbers, email addresses, phone numbers, single-select options, multi-select checkboxes, file attachments, and dates.
E. Project Discussions & Activity
Comments, replies, user mentions, and file attachments exchanged in project discussions. Aupero generates activity records when milestones are updated, assets are uploaded, forms are submitted, or clients are invited. (Conversations are strictly project-bound; Aupero does not provide unrestricted direct messaging).
F. Uploaded Files & Assets
Files you and your clients upload to the workspace (such as images, PDF deliverables, ZIP archives, video drafts, and documents). Uploaded files may contain personal, business, or confidential information. Organizations are responsible for ensuring they possess the necessary rights and consents to upload and share these assets.
G. Billing Information
Subscription and payment processing is handled through our payment provider, Dodo Payments. Aupero does not collect, handle, or store full credit card numbers or card verification values (CVV). We receive only the necessary billing metadata from Dodo Payments (such as customer identifier, plan tier, transaction status, and billing cycle dates) to manage your workspace subscription.
H. Technical & Operational Logs
Standard technical logs reasonably necessary to operate, secure, and troubleshoot our cloud infrastructure (such as HTTP request timestamps, response codes, User-Agent strings, and error diagnostics). We do not perform intrusive device fingerprinting.
I. Connected Cloud Storage (Google Drive)
If you choose to connect Google Drive, Aupero receives an OAuth authorization token. We interact only with the specific files or folders that you authorize or select within the integration. Aupero does not access or inspect your broader Google account.
3. Why We Process Information
We process your information for legitimate business and contractual purposes:
- Service Delivery & Operation: Creating and managing your account, provisioning workspaces, enabling role-based permissions, and hosting the client portal.
- Project Collaboration: Displaying milestones, organizing asset deliverables, facilitating discussions, and publishing intake forms.
- Communications: Sending essential transactional notifications, including email verification, password reset links, client portal invitations, and milestone alerts.
- Billing Management: Processing subscription plans, managing 7-day trials, and synchronizing billing status via Dodo Payments.
- Security & Abuse Prevention: Protecting accounts against unauthorized access, safeguarding infrastructure against attacks, and enforcing our Terms of Service.
- Legal Compliance: Complying with applicable legal obligations, tax accounting, and responding to lawful requests from competent authorities.
4. Zero Sale & Zero AI Training Guarantees
- We Do NOT Sell Personal Information: Aupero has never sold, rented, or traded personal data, and we will never sell customer or client information to data brokers, marketers, or advertisers.
- We Do NOT Train AI Models on Your Data: Aupero does not use your uploaded files, project descriptions, client conversations, or form responses to train, fine-tune, or develop artificial intelligence or machine learning models. There is currently no AI processing functionality in Aupero.
- No Cross-Site Ad Tracking: We do not embed third-party advertising trackers or invasive session recording scripts.
5. User Content & Customer Responsibility
In the context of the data processed within Aupero, an important distinction exists between Aupero’s role and your organization’s role:
- Aupero’s Role: We provide the cloud infrastructure and software tools for organizations to manage, store, and share project assets and collaborate with clients.
- Customer Responsibility: Your organization decides what data, files, and personal information are uploaded to your workspace. Your organization is responsible for ensuring that you have a lawful basis to collect, upload, and process any personal data contained within your projects, client briefs, and uploaded assets.
- Access Governance: Your administrators decide who is invited to your workspace and which clients receive portal access. You should only grant access to individuals who are authorized to review the relevant project information.
Users retain full ownership of their User Content. Aupero holds only the limited operational license necessary to host and deliver the Service on your behalf.
6. Third-Party Service Providers
We partner with select third-party service providers to deliver specialized infrastructure components:
Dodo Payments (Billing & Payments)
Processes subscriptions, recurring billing, invoices, and secure payment transactions. Payment card details are handled directly by Dodo Payments under their PCI-compliant standards.
Umami (Privacy-Focused Product Analytics)
We utilize self-hosted Umami analytics to understand aggregate product usage and monitor funnel health. Umami is built on a strict Non-PII contract: it does not use tracking cookies, does not collect personal identifiers (such as names, emails, or user IDs), does not track users across websites, and records only anonymized, high-level categorical events.
Google Drive (Optional Storage Integration)
If an organization enables Google Drive integration, information is exchanged via OAuth solely to access the files or folders explicitly authorized by the user.
Cloud Hosting, Database & Email Delivery
We use reputable cloud hosting, managed PostgreSQL database, and transactional email delivery providers to run our servers and deliver notification messages.
Notice: Aupero may introduce additional third-party integrations in the future (such as Microsoft OneDrive or alternative cloud storage providers). When you choose to connect an integration, the applicable permissions and information exchanged with that provider will be disclosed as part of the integration experience.
7. Data Retention & Deletion
We retain your account information, workspace data, and User Content for as long as your account and organization remain active, or as needed to provide you with the Service.
You may request account and workspace deletion at any time by contacting us at [email protected]. When requested, active records and files are deleted or anonymized from our production databases.
Please note that certain information may be retained where strictly necessary to comply with legal, tax, or accounting obligations, resolve disputes, or prevent fraud. Furthermore, residual copies stored in encrypted disaster-recovery backups will persist for a limited period until automatically overwritten according to our standard backup rotation cycles.
8. Security Measures
Aupero employs appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and accidental loss. These measures include:
- Encrypted transport (HTTPS/TLS) for all data in transit across the public internet.
- Cryptographic hashing of authentication passwords and secure session cookie flags.
- Role-based access controls ensuring workspace isolation between organizations.
- Restricted operational access to production databases and server environments.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information using commercially reasonable safeguards, we cannot guarantee absolute security.
9. International Data Processing
Aupero is operated by Aupero Software SARL from Togo (a Togolese company and startup). To deliver our web application globally, we utilize server infrastructure, cloud database providers, and payment processors located in multiple jurisdictions, including the European Union, the United States, and other countries.
If you access Aupero from outside Togo, your information will be transferred to, processed, and stored in countries whose data protection laws may differ from those of your home country. By using Aupero, you consent to this transfer and processing in accordance with this Privacy Policy.
10. Your Privacy Rights
Depending on where you reside and the data protection laws that apply to you (such as in the European Economic Area, the United Kingdom, or various African and global jurisdictions), you may have certain rights regarding your personal data, which may include:
- Access: The right to request confirmation and a copy of the personal information we hold about you.
- Rectification: The right to update or correct inaccurate or incomplete information.
- Erasure: The right to request the deletion of your personal data under certain conditions.
- Restriction: The right to request that we restrict the processing of your data in certain circumstances.
- Data Portability: The right to receive your personal information in a structured, commonly used format.
- Objection: The right to object to processing based on legitimate interests.
- Withdrawal of Consent: The right to withdraw consent at any time where processing is based on your consent.
To exercise any applicable rights, please contact our legal officer at [email protected]. We will respond to your request within the timeframe required by applicable law.
12. Children’s Privacy
Aupero is a commercial platform built exclusively for business entities, agencies, and adult professionals. The Service is not directed toward children, and we do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with personal information, please notify us at [email protected] so we can promptly delete it.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our legal obligations, product functionality, or data handling practices.
When changes are made, we will update the “Last updated” date at the top of this page. For significant material changes, we will provide additional notice, such as by sending an email notification or posting a notice within the application.
We encourage you to periodically review this Privacy Policy to stay informed about our data protection commitments.
14. Contact Information
If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our designated legal representative:
