سياسة الخصوصية

Last updated: September 8, 2026

This privacy policy explains how AURGA CO., LIMITED ("AURGA", "we", "us") handles personal data across:

- AURGA websites, including the online store at www.aurga.com (the "Website");
- AURGA mobile applications distributed on Google Play and the Apple App Store, including Vibe Terminal and AURGA Viewer: Wireless Display (the "Apps").

Product-specific practices are described in the dedicated parts of this document. By using the Website or the Apps you agree to this privacy policy as published at https://www.aurga.com/policies/privacy-policy.

PART I - CONTROLLER AND GENERAL PROVISIONS

1. Owner and Data Controller

AURGA CO., LIMITED - UNIT 1022A, BEVERLEY COMMERCIAL CENTRE, 87-105 CHATHAM ROAD SOUTH, TSIM SHA TSUI, KOWLOON HONG KONG
Owner contact email: supports@aurga.com

2. Types of Data collected

Depending on which service you use, AURGA may collect, by itself or through third parties: contact details (first name, last name, email address, phone number, physical address, country, state, county, city, ZIP/postal code); billing-related details (company name, VAT number, profession, website); account data (username, User ID); order and purchase history on the Website; usage data and trackers on the Website (as described in Part II); and, for users of AURGA Viewer: Wireless Display who register an AURGA-hosted account, the email address and account and connection data described in Part III. Vibe Terminal operates without AURGA collecting personal data.

Complete details on each type of personal data are provided in the dedicated sections below. Personal data may be freely provided by you, or, in the case of usage data and trackers, collected automatically when using the Website.

Unless specified otherwise, all data requested by AURGA is mandatory and failure to provide it may make it impossible for AURGA to provide the relevant service. Where AURGA specifically states that some data is not mandatory, you are free not to provide it without consequences to the availability or functioning of the service.

You are responsible for any third-party personal data obtained, published or shared through AURGA's services and confirm that you have the third party's consent to provide the data to the Owner.

3. Mode and place of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the data.

Processing is carried out using computers and/or IT-enabled tools, following organizational procedures strictly related to the purposes indicated. In addition to the Owner, in some cases the data may be accessible to certain persons in charge involved with the operation of AURGA (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processors. The updated list of these parties may be requested from the Owner at any time.

The data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on your location, data transfers may involve transferring your data to a country other than your own (for example, the United States, where several third-party services referenced in Part II process data). You are entitled to learn about the legal basis of transfers of data outside the European Union and about the security measures taken by the Owner to safeguard your data, using the contact information in section 1.

4. Legal basis of processing

The Owner may process personal data relating to users if one of the following applies:

- Users have given their consent for one or more specific purposes. Note: under some legislations the Owner may be allowed to process personal data until the user objects to such processing ("opt-out"), without having to rely on consent or any other of the following legal bases. This, however, does not apply whenever the processing of personal data is subject to European data protection law;
- provision of data is necessary for the performance of an agreement with the user and/or any pre-contractual obligations thereof;
- processing is necessary for compliance with a legal obligation to which the Owner is subject;
- processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;
- processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

5. Retention time

Personal data shall be processed and stored for as long as required by the purpose for which it was collected.

Therefore:

- Personal data collected for purposes related to the performance of a contract between the Owner and the user shall be retained until such contract has been fully performed;
- Personal data collected for the purposes of the Owner's legitimate interests shall be retained as long as needed to fulfill such purposes;
- The Owner may be allowed to retain personal data for a longer period whenever the user has given consent to such processing, as long as such consent is not withdrawn, or whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, personal data shall be deleted. Consequently, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

6. Security

The Apps protect locally stored secrets with Android's and iOS' hardware-backed encryption and encrypt all traffic to the user's own servers. The Owner takes appropriate technical and organizational measures to safeguard information it processes. However, no method of transmission or storage is completely secure, and AURGA cannot guarantee absolute security.

7. Your rights

Users may exercise certain rights regarding their data processed by the Owner, in particular the right to:

- Withdraw consent at any time, where processing is based on consent;
- Object to processing of their data where processing is carried out on a legal basis other than consent (further details below);
- Access their data: learn if data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the data undergoing processing;
- Verify and seek rectification of inaccurate data;
- Restrict the processing of their data in certain circumstances;
- Have their personal data deleted or otherwise removed in certain circumstances;
- Receive their data and have it transferred to another controller in a structured, commonly used, machine readable format, where technically feasible (data portability);
- Lodge a complaint with their competent data protection authority.

If you are a California resident, you additionally have the right to know what personal information is collected about you, the right to request deletion of your personal information, and the right to opt out of any "sale" or "sharing" of personal information as defined under the CCPA/CPRA. AURGA does not sell personal information in the ordinary course. Requests may be sent to supports@aurga.com.

Any request to exercise these rights can be directed to the Owner through the contact details provided in section 1. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

8. Children

The Website and the Apps are not directed at children under the age of 13, and AURGA does not knowingly collect personal data from children.

9. System logs and maintenance

For operation and maintenance purposes, AURGA and any third-party services may collect files that record interaction with the Website or the Apps (system logs) or use other personal data (such as the IP address) for this purpose.

10. Legal action and disclosures

The user's personal data may be used for legal purposes by the Owner in court or in the stages leading to possible legal action arising from improper use of AURGA's services. The user declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

11. How "Do Not Track" requests are handled

AURGA does not support "Do Not Track" requests. To determine whether any of the third-party services it uses honor "Do Not Track" requests, please read their privacy policies.

12. Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the top. Should the changes affect processing activities performed on the basis of the user's consent, the Owner shall collect new consent where required.

PART II - WEBSITE AND ONLINE STORE (www.aurga.com)

13. Overview

The Website is an online storefront. When you browse the Website, place an order, create an account, subscribe to the newsletter or contact AURGA, data is collected as described in this Part. The Website uses cookies and similar trackers to provide the service and, where you consent, for the advertising and analytics purposes described below; the use of trackers serves the purposes described in this policy and in the Cookie Policy.

14. Purchases, accounts and contacting AURGA

- Orders and accounts: to process orders, AURGA collects the details you provide at checkout or when creating an account, such as name, email address, phone number, shipping/billing address, and order history. Payments are processed by third-party payment providers under their own privacy policies; AURGA does not store full payment card numbers.
- Contact form: by filling in the contact form, you authorize AURGA to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form's header.
- Mailing list or newsletter: by registering on the mailing list or for the newsletter, your email address will be added to the contact list of those who may receive email messages containing commercial or promotional information concerning AURGA. Your email address might also be added to this list as a result of signing up to the Website or after making a purchase.

15. Third-party services used on the Website

The Website uses third-party services whose processing of data is described below. In addition to any opt-out feature offered by these services, users may opt out of certain advertising features through applicable device or browser settings, or by visiting the Network Advertising Initiative opt-out page or Youronlinechoices. Place of processing for all services below: United States, unless noted otherwise.

Advertising and remarketing:
- Facebook Audience Network (Meta Platforms, Inc.) - mobile advertising. Data: trackers, advertising identifiers (Google Advertiser ID or IDFA), usage data. Opt-out via device ad settings or Facebook ad settings.
- Facebook Lookalike Audience, Facebook Custom Audience and Facebook Remarketing (Meta Platforms, Inc.) - behavioral targeting and remarketing. Data: trackers, usage data, email address (Custom Audience). Opt-out via Facebook's ad settings.
- ShareThis (ShareThis Inc.) - social sharing widget and behavioral targeting. Data: trackers, usage data.
- Google Ad Manager, Google AdSense, Google Ad Manager Audience Extension and Google Ads Remarketing (Google LLC) - advertising, including the DoubleClick cookie. Data: trackers, usage data. Opt-out via Google Ads Settings.

Analytics:
- Google Analytics and Google Analytics with anonymized IP (Google LLC) -web analytics; the anonymized-IP integration shortens IP addresses within the EU/EEA. Data: trackers, usage data.
- User ID extension for Google Analytics (Google LLC) - associates activity across sessions without allowing Google to personally identify the user. Data: trackers.
- Facebook Ads conversion tracking / Facebook pixel and Facebook Analytics for Apps (Meta Platforms, Inc.) - ad conversion analytics. Data: trackers, usage data.
- Google Ads conversion tracking (Google LLC). Data: trackers, usage data.
- YouTube Analytics and Reporting API (Google LLC). Data: usage data, user ID, username.

Content, social networks, chat, forms and site operation:
- YouTube Data API, YouTube IFrame Player and YouTube video widgets (Google LLC) - video content display. Data: trackers, usage data, user ID, username.
- Facebook Like button and social widgets; Facebook Messenger Customer Chat and Facebook lead ads (Meta Platforms, Inc.) - social interaction, live chat support and lead forms. Data: trackers, usage data, data communicated while using the service; lead forms also process email address, first name and last name.
- Facebook Authentication/OAuth, Google OAuth and YouTube OAuth (Google LLC; Meta Platforms, Inc.) - registration and authentication. Data: various types of data as specified in each service's privacy policy.
- Google reCAPTCHA (Google LLC) - spam protection. Data: trackers, usage data.
- Google Tag Manager (Google LLC) - tag management. Data: usage data.

Further information about each service is available in the corresponding privacy policy linked from the provider's website.

PART III - MOBILE APPLICATIONS (GOOGLE PLAY AND APPLE APP STORE)

16. Apps covered

This Part covers AURGA's mobile applications distributed on Google Play and the Apple App Store: Vibe Terminal and AURGA Viewer: Wireless Display. The Apps include no advertising SDKs and no third-party analytics or tracking SDKs, and AURGA does not sell or share personal data collected through the Apps for advertising purposes. Sections 19-23 apply to both Apps unless stated otherwise.

17. Vibe Terminal: data handling

The App connects only to servers you configure, over encrypted connections. AURGA operates no account system for the App and does not collect personal data through it, as of the last-updated date above. Section 23 describes data practices that features introduced in future versions may involve.

These servers are operated by you or by parties you choose. AURGA is not the controller of the data processed on those servers; how that data is handled is determined by the operator of each server.

18. AURGA Viewer: Wireless Display: data handling

Two connection modes determine where data is processed:

- Direct mode: data exchanged between your device and your own server or device (video, audio and input) is transmitted only between those endpoints. AURGA does not collect it.

- AURGA-hosted mode (requires an account registered with an email address): connection services operated by AURGA or its hosting providers are involved, and AURGA processes the following data:

  - Account data: the email address you register, authentication credentials (stored only in hashed form) and basic account information. Purpose: providing and securing the account and preventing fraud and abuse. Legal basis: performance of a contract with you.
  - Connection data: to establish and maintain connections between your devices and your AURGA products, AURGA-operated services process connection metadata such as device identifiers, session times and routing information. Purpose: delivering the connectivity the App provides.
  - Transmitted content: the video, audio and input data exchanged while using the service is transmitted through AURGA-operated infrastructure solely in order to deliver it between your devices. It is not used for any other purpose, such as profiling, analysis or advertising.

Account deletion: you can permanently delete your AURGA account at any time from the account settings on the Website (www.aurga.com). Deletion removes your account data - email address, credentials and account settings - from AURGA's systems, except where retention of specific records is required by law. You can also stop using AURGA-hosted mode at any time by switching to direct-mode connections.

19. Device permissions and their purposes

Vibe Terminal:
- Internet: to connect to the servers you configure;
- Microphone: only used while you actively use the voice input feature;
- Camera: only used while you scan a QR code to add a server; camera frames are processed on the device to decode the barcode and are not stored or transmitted;
- Biometrics: to support the optional App lock, performed by the operating system;
- Vibrate: for interface feedback.

AURGA Viewer requests the permissions its connection features require, such as network access, local-network discovery and, where applicable, notifications. On iOS, equivalent permissions are requested for the same purposes.

20. Subscriptions and in-app purchases

Subscriptions, where offered in the Apps, are sold and processed by the applicable store: Google Play (Google LLC) on Android, and the Apple App Store (Apple Inc.) on iOS. When you subscribe:

- Payment information is handled by the store under its own terms and privacy policy (Google Play terms and privacy policy; Apple's media services terms and privacy policy). AURGA does not receive or store your payment details.
- The App queries the store on your device to determine whether a subscription is active. This communication occurs between your device and the store operator as described in that store's privacy policy.

21. Data AURGA may receive in connection with the Apps

Through Vibe Terminal, AURGA does not collect personal data. Through AURGA Viewer, AURGA processes the account, connection and transmitted-content data described in section 18, for users who register and use AURGA-hosted mode. In addition, if you contact AURGA (for example by emailing supports@aurga.com), AURGA will process the information you provide solely to respond to your request, in accordance with Part I.

22. Retention and deletion in the Apps

Data stored on your device (server lists, preferences) is retained until you delete it in the App, or until you uninstall the App or clear its data, and you can exercise your rights directly in the App or through your device settings. AURGA Viewer accounts are retained until you delete them as described in section 18. Connection data processed by AURGA-operated services is retained only as long as needed to provide and secure the connectivity, and in aggregated or shorter form for security and abuse prevention where permitted.

23. Future features

Vibe Terminal currently operates as described above without AURGA collecting personal data through it. To keep this policy accurate as the Apps evolve, this section describes how data may be handled by features that AURGA may introduce in future versions. When any such feature is introduced:

- this Part will be updated to describe the data collected, the purposes and the legal basis, before or at the time the feature becomes available;
- where consent is required, it will be requested before collection begins and may be withdrawn at any time;
- store disclosures such as the Data safety form (Google Play) and the App Privacy information (Apple App Store) will be updated accordingly.

Categories that future features may involve, if and when you choose to use them:

- Optional accounts: creating an account (for example to manage subscriptions across devices) would involve the identifier you register (such as an email address or phone number), authentication credentials stored only in hashed form, and account profile data. Purposes: providing and securing the account, subscription and license management, and preventing fraud and abuse. Such features are optional; connecting to your own servers continues to work without an account unless stated otherwise at the time the feature is introduced.
- Subscription and license validation: validating a subscription tied to your account or device (for example to enable premium features or enforce device limits) may involve transmitting your account identifier and a device-derived identifier to services operated by AURGA for that purpose.
- Diagnostics and usage data: crash reports, performance measurements and feature usage statistics, collected with your consent where required and with the ability to opt out in App settings.
- Communications: if you opt in, service announcements (for example subscription expiry reminders) sent to your registered contact address.
- Service providers: any processing carried out on AURGA's behalf (cloud hosting, analytics, payment or messaging providers) is performed under data processing agreements, and the relevant services will be disclosed in this Part.

Nothing in this section means that any of this data is collected as of today; each category applies only from the date this policy is updated to introduce the corresponding feature.

PART IV - DEFINITIONS AND LEGAL REFERENCES

24. Definitions

- "Personal Data" (or Data): any information that directly, indirectly, or in connection with other information - including a personal identification number - allows for the identification or identifiability of a natural person.
- "Usage Data": information collected automatically through the Website or the Apps (or third-party services employed therein), which can include: IP addresses or domain names, URI addresses, the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer, the country of origin, the features of the browser and the operating system utilized by the user, and similar parameters.
- "User": the individual using AURGA's services who, unless otherwise specified, coincides with the Data Subject.
- "Data Subject": the natural person to whom the Personal Data refers.
- "Data Processor" (or Data Supervisor): the natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.
- "Data Controller" (or Owner): the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing, including the security measures concerning the operation and use of the services. The Data Controller, unless otherwise specified, is the Owner of AURGA.
- "Tracker": any technology - e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of users, for example by accessing or storing information on the user's device.

25. Legal references

This privacy statement is prepared with reference to provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation) and, for California residents, the California Consumer Privacy Act as amended by the CPRA.

This privacy policy relates to the AURGA Website and Apps, unless stated otherwise within this document.

Contact: supports@aurga.com