Privacy designed around confidential product work.
This notice explains what Aurea Engineering collects through this website and Concept Lab, why we use it, where service providers are involved, and the choices available to you.
We intentionally separate a private browser-only scan from optional account, AI, and payment features so you can decide what leaves your device.
What stays local, what is stored, and what is transmitted
The free local scan
The standard Concept Lab assessment runs in your browser. It reads your typed answers and, for supported images, measures basic qualities such as pixel dimensions, brightness, and contrast. The original image and those answers are not sent to Aurea merely because you run the local scan.
Customer accounts and saved projects
If you create an account, Aurea stores your name, email address, a securely hashed password, saved intake text, generated report data, optional AI report data, and project timestamps. Saved projects do not contain the original uploaded image. Passwords are not stored in readable form.
Optional AI visual screening
AI screening is off by default. Before any transmission, you must sign in and select a specific consent statement. Your browser re-encodes the selected image to remove embedded metadata and reduce its size; Aurea’s server independently decodes and re-encodes the upload before transmission. The resulting metadata-free copy and the relevant intake text are sent to OpenAI for one analysis. Aurea sets the API request not to store the response for later retrieval and does not save the transmitted image. The structured analysis can be stored with your project if you save it.
Payments
Paid report checkout is hosted by Stripe. Stripe handles payment-card details; Aurea’s website does not receive or store your complete card number. Aurea records limited order information needed for fulfillment and account history, such as the product ordered, payment status, amount, customer email, project reference, and Stripe session reference.
Information is used for the service you request
Aurea uses submitted information to operate accounts, save projects, provide requested analyses and paid reports, prevent abuse, maintain security, respond to inquiries, reconcile payments, and comply with legal or accounting duties. We do not sell Concept Lab project information.
Saved project text remains available until you delete the project or request account deletion, subject to backups and obligations that may require limited retention. Payment and business records may be retained as needed for accounting, dispute handling, fraud prevention, or legal compliance. Security logs are kept only as reasonably necessary to protect the service.
Service providers process information on Aurea’s behalf for specific functions, including DreamHost for website hosting, Stripe for checkout and payment processing, and OpenAI only when you expressly request AI visual screening. Their handling is also governed by their applicable terms and privacy practices.
Practical protections and your choices
Concept Lab uses encrypted HTTPS transport, secure and HTTP-only session cookies, same-origin and anti-forgery controls, input validation, password hashing, rate limits, prepared database queries, restricted storage outside the public website directory, signed Stripe webhooks, and server-side API credentials. No internet service can guarantee absolute security, so avoid submitting export-controlled, classified, regulated, or exceptionally sensitive information without first arranging an appropriate agreement and transfer method with Aurea.
You may export or delete individual saved projects in your workspace. To request access, correction, account deletion, or other privacy assistance, email Info@aureaengineering.com. Aurea may need to verify the request before acting.
Concept Lab uses an essential account session cookie when you sign in. The site may also receive ordinary hosting logs such as IP address, user agent, requested path, and time. This notice will be updated when material practices change; the effective date above identifies the current version.
Establish the right boundary before sharing the design.
Contact Aurea to discuss an NDA, secure transfer method, or a project-specific data requirement.