Privacy Policy

1. Who We Are

AURA OPERATIONS LTD ("Shok-IS", "we", "our", "us") is a company registered in England and Wales (No. 17037746), with its registered office at 128 City Road, London, EC1V 2NX. We operate the Shok-IS API platform and associated services.

We act as a data controller for personal data collected through our website and account registration. For data processed through the API on behalf of our customers, we act as a data processor.

2. Data We Collect

Account Data

When you create an account, we collect your name, work email address, company name, and billing information. Billing data is processed and stored directly by Stripe, Inc. and is subject to their privacy policy.

Usage Data

We automatically collect API request logs, error rates, latency metrics, and feature usage patterns. This data is used for service improvement and is retained for 365 days on Enterprise plans and 30 days on Standard plans.

Technical Data

IP addresses, browser user-agent strings, authentication timestamps, and workspace configuration data are collected for security and fraud prevention purposes.

3. How We Use Your Data

• Providing, maintaining, and improving the Shok-IS platform
• Processing payments and managing your subscription
• Sending transactional emails (invoices, API alerts, security notifications)
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations under UK and EU law
• Communicating product updates (you may opt out at any time)

4. Legal Basis for Processing

Under UK GDPR and EU GDPR, we process your personal data on the following legal bases:

• Contract performance — to provide the services you have subscribed to
• Legitimate interests — for security monitoring, fraud prevention, and service improvement
• Legal obligation — to comply with applicable UK and EU laws
• Consent — for marketing communications (withdrawable at any time)

5. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe, Inc. — payment processing (PCI DSS Level 1 certified)
• Amazon Web Services — cloud infrastructure (eu-west-2 London primary)
• Datadog, Inc. — infrastructure monitoring (aggregated, non-personal metrics only)
• Legal authorities — when required by law, court order, or regulatory request

6. Data Retention

We retain personal data for as long as your account is active. Upon account closure, personal data is deleted within 90 days except where retention is required by law. API request logs are retained per your plan's log retention period. Audit logs on Enterprise plans are retained for 365 days.

7. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Restriction — limit how we process your data in certain circumstances
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at contact@shok-intelligence.com. We will respond within 30 days.

8. International Data Transfers

Your data is processed primarily in the United Kingdom (eu-west-2, AWS London). Where data is transferred to the United States (for Stripe payment processing), such transfers are governed by the EU-US Data Privacy Framework and Standard Contractual Clauses approved by the UK Information Commissioner's Office.

9. Contact Us

For privacy-related enquiries, contact our Data Protection Officer at:

Email: contact@shok-intelligence.com
Post: Data Protection Officer, AURA OPERATIONS LTD, 128 City Road, London, EC1V 2NX
ICO Registration: ZB[XXXXXX]

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.