Privacy Notice for onMyTerms (United States)
Effective: 3 October 2026
This notice is for residents of the United States. It is not a finding that Aulara currently meets the revenue or volume thresholds of the California Consumer Privacy Act. Those thresholds, as adjusted, include annual gross revenue above 26.625 million US dollars, or personal information of 100,000 or more consumers or households. If a threshold is met, this notice is the baseline. Until then, Aulara honors the same rights for US residents as a voluntary commitment.
1. Who we are
Aulara UG (haftungsbeschränkt), Durlacher Str. 6, 10715 Berlin, Germany, manages onMyTerms. Contact: hello@aulara.de, phone +49 30 22436842.
2. Two roles
For the business customer's account, and for confirmations of Aulara's own documents, Aulara decides the purposes and means.
For consent records of that customer's end users, the customer decides the purposes. Aulara processes that information as a service provider on the customer's instructions and does not sell it or use it for Aulara's own advertising.
3. Categories we collect
- Identifiers: name, email address, phone number, company name, domain.
- Professional information: job title.
- Commercial information: plan settings and confirmation records.
- Internet or network activity, depending on how the confirmation arrives:
- A confirmation in the browser stores the IP address, a hash of that IP address, the user agent, and, when we can determine it, a country derived from the IP address or from the host. We do not collect precise geolocation.
- A confirmation through an email link stores a hash of the IP address and the user agent. We do not store the IP address itself on that path.
- A confirmation sent by the customer's server stores no end-user IP address and no browser.
- A customer's confirmation of a document version stores a hash of the IP address of that confirmation, not the IP address itself.
- Customer content: the text of documents the customer uploads.
- Error logs kept by the host.
We do not ask for Social Security numbers, precise geolocation, or government identifiers. We do not knowingly collect personal information from children under 16.
4. Purposes
We use this information to provide the account, store document versions, record confirmations, secure the service, send transactional email, and meet legal duties. We do not sell personal information. We do not share it for cross-context behavioral advertising.
5. Sources and recipients
We collect account data from the customer. Consent data is collected from the end user through the customer's deployment of onMyTerms, or from the customer when the customer confirms Aulara's own documents.
Recipients are infrastructure providers that host the application, the database, object storage, and transactional email. They may be outside the United States and outside the European Union. A list with name, country, and transfer safeguard is available from hello@aulara.de. This notice does not claim that every system is located in the European Union.
6. Retention
We keep account data for the contract and any legal retention period. Consent records follow the retention period the customer sets. Defaults are 730 days for consent records and 1,095 days for related user records. After that period we anonymize the IP address, the hash, the user agent, and the country. The time and the document version remain.
7. Rights of US residents
A US resident may ask Aulara to:
- confirm whether we process personal information and to disclose the categories and specific pieces we hold as a business;
- correct inaccurate personal information;
- delete personal information, subject to a legal exception;
- opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of;
- not be discriminated against for exercising these rights;
- appeal a refusal.
Send the request to hello@aulara.de. We will verify the request with the email address on the account. An authorized agent may submit a request with proof of authority.
Requests about an end user's consent record should go to the business customer first. Aulara will assist that customer.
8. Notice at collection
At or before collection, the categories are those in section 3, the purposes are those in section 4, we do not sell or share, and retention is described in section 6.