Last updated: April 14, 2026
Introduction
Welcome to Auctor AI, Inc. d/b/a Auctor AI (“Auctor” or “we” or “us” or “our”). We understand that you value your personal privacy and take it seriously. This privacy policy outlines Auctor’s policies and practices regarding the collection, use, storage, and protection of your personal data. This privacy policy applies to information that we may collect from you or that you may provide when you visit our Website (https://getauctor.com) (our “Website”) or when you use the Auctor AI web application (our “App”) (collectively, our “Services”). It does not apply to information collected by any third parties, including through any application or content that may link to or be accessible from or on our Services.
Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is to not use our Services. By accessing or using our Services, you agree to the terms outlined in this policy. We are committed to maintaining the confidentiality and security of your information and will update this policy as necessary to reflect changes in our practices or regulatory requirements. Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
CCPA NOTICE: We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the CCPA have the same meaning when used in this Privacy Policy.
We have appointed a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with relevant regulations. If you have any questions or concerns about our data practices or wish to exercise your privacy rights, please contact our DPO:
• Name: Matthew Blackburn
• Email: matt@getauctor.com
The Types of Information We Collect and How We Collect It
We collect several types of information from and about users of our Services, including information:
• By which you may be personally identified, such as name, email address, phone number, audio and visual information, profile information, commercial information, and payment details (“personal information”);
• That is about you but individually does not identify you; and
• About your internet connection, the equipment you use to access our Services, and usage details, such as IP address, browser type, operating system, pages visited, and time spent on pages.
The personal information we collect about you may include the following, as categorized by CCPA:
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name and telephone number.
• Commercial information, such as records and history of products or services purchased or considered.
• Internet or other similar network activity, such as interactions with our Services.
• Sensory data, such as audio and visual information from recorded videos.
• Inferences drawn from other personal information, such as profile details reflecting personal preferences.
We collect this information:
• Directly from you when you provide it to us.
• Automatically as you navigate through the Services.
• From third parties, for example, our business partners.
Automatic Data Collection Technology Notice
As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
• Details of your visits to our Services, including traffic data, location logs, and other communication data and the resources that you access and use on the Services.
• Your search queries on the Services.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.
We may associate the information we collect with other personal information in other ways or receive it from third parties. It helps us to improve our Services and to deliver a better and more personalized service, including by enabling us to:
• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Services according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Services.
The technologies we use for this automatic data collection may include:
Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
Web Beacons. Pages of our Services may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Auctor, for example, to count users who have visited those pages and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
Third-Party Use of Automatic Data Collection Technologies
Some content or applications, including advertisements, on the Services are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies to collect information about you when you use our Services. The information they collect may be associated with your personal information, or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Choices About How We Use and Disclose Your Information below.
How We Use Your Data
We use the collected information to:
• Provide and Improve Services: Enhance platform functionality and user experience on our Services.
• Personalize Your Experience: Tailor our Services to better meet your needs.
• Communicate: Send important updates, newsletters, and respond to your inquiries.
• Security: Monitor and protect against unauthorized access and other security threats.
• Compliance: Adhere to legal obligations and protect our rights.
• Obligations: To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• Consent: For any other purpose with your consent or as otherwise described to you when collecting your personal information.
Disclosure of Your Information
We may disclose personal information that we collect or you provide as described in this privacy policy:
• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Auctor’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Auctor about our Services users is among the assets transferred.
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply agreements to which we are a party, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Auctor, our customers, or others.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information or for any other purpose with your consent.
We may disclose the following categories of personal information, as categorized by CCPA, to our service providers:
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
• Commercial information.
• Internet or other similar network activity.
• Sensory data.
• Inferences drawn from other personal information.
We do not sell or share your personal information, as such terms are defined by CCPA.
Choices About How We Use and Disclose Your Information
We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:
Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent.
Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your personal information with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by sending us an email with your request to matt@getauctor.com.
We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI's website.
Transferring Personal Data to the U.S.
Auctor AI is headquartered in the United States. By using our Services, you acknowledge that your personal information will be processed in the United States. We have implemented appropriate safeguards, including standard data protection clauses, to protect your data in accordance with GDPR and other relevant regulations.
Your Privacy Rights
United States
Depending on your state of residency, you may have certain rights related to your personal information, including:
• Access and Data Portability. You may confirm whether we process your personal information and access a copy of the personal information we process. To the extent feasible and required by state law, depending on your state, your personal information will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.
• Correction. You may request that we correct inaccuracies in your personal information that we maintain, taking into account the information's nature and processing purpose.
• Deletion. You may request that we delete personal information about you that we maintain, subject to certain exceptions under applicable law.
• Opt Out of Using Personal Information for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal information for these purposes.
• Limiting Sensitive Personal Information. If we use or disclose your sensitive personal information (as such term is defined by applicable law), you may request that we limit our use and disclosure to the permitted purposes set forth in applicable law.
Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of personal information processing, including "sales" of personal information as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.
The exact scope of these rights vary by state. Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information. In some instances, we may be required to verify your identity or your authority to make the request in order to process your request. There are also several exceptions where we may not have an obligation to fulfill your request.
To exercise any of these rights or appeal a decision regarding your request, please send us an email at founders@getauctor.com.
Non-Discrimination
We will not discriminate against you for exercising any of your state rights or data subject rights under other jurisdictions’ laws. Unless permitted by applicable law, we will not:
• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Europe and the United Kingdom
To the extent the processing of your personal information is subject to the European Union (“EU”) General Data Protection Regulation (“EU GDPR”) or UK General Data Protection Regulation (“UK GDPR”), the following terms apply in addition to the above Sections:
CONTROLLER
Auctor is the controller and responsible for the processing of personal information in connection with the Services described in this policy.
LEGAL BASIS AND LEGITIMATE INTEREST
Legal Basis
We will use your personal information when the law allows us to; most commonly, in the following circumstances:
• Where we need to perform a contract we are about to enter into or have entered into with you.
• To provide you with information, products, or services that you request from us.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.
• Where you have provided your consent. You have the right to withdraw consent to marketing at any time with effect for the future by contacting us.
Legitimate Interest
Where we collect, use, disclose and otherwise process your information based on legitimate interests, we rely on the legitimate interests as set forth below.
We use your personal information for the following business purposes and based on the following legitimate interests:
Business Purpose:
To register you as a new customer or potential customer
Legitimate Interest:
Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
Business Purpose:
To process and correctly deliver anything you order from us
Legitimate Interest:
Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
Business Purpose:
To manage our relationship with you, including notifying you of updated terms or privacy policies
Legitimate Interest:
Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
Business Purpose:
To inform you of products or services we believe might interest you
Legitimate Interest:
Marketing our products: We use your information as necessary to pursue our legitimate interests in marketing our products to you. For example, where permitted by digital marketing law, we may contact you by email to let you know of products you might be interested in.
Business Purpose:
To administer and protect our business and our Services (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
Legitimate Interest:
Providing, improving and developing our products: We use your information as necessary to pursue our legitimate interests in tailoring and improving our products. For example, we may send you a survey or questionnaire to understand your experience in purchasing from us.
Business Purpose:
To use data analytics to improve services/products/marketing/customer relationships and experiences
Legitimate Interest:
Providing, improving and developing our products: We use your information as necessary to pursue our legitimate interests in tailoring and improving our products. For example, we may send you a survey or questionnaire to understand your experience in purchasing from us.
Business Purpose:
To make suggestions and recommendations to you about goods or services that may be of interest to you
Legitimate Interest:
Marketing our products: We use your information as necessary to pursue our legitimate interests in marketing our products to you. For example, where permitted by digital marketing law, we may contact you by email to let you know of products you might be interested in.
Business Purpose:
To respond to any legal requests you may make
Legitimate Interest:
Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
Business Purpose:
To ensure we comply with applicable law
Legitimate Interest:
Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
Business Purpose:
As described to you when collecting your personal information.
Legitimate Interest:
Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
In particular, we rely on performance of a contract and/or our legitimate interests to:
• Receive end‑customer information from our business customers to provide the Services;
• Share necessary personal information with carriers, agents, customs brokers, final‑mile vendors, warehouse operators, insurers, IT/collaboration providers, and payment processors to perform the Services; and
• If applicable, enable those vendors to contact consignees/buyers to arrange delivery or collect amounts due (e.g., duties). Where applicable law requires consent (e.g., for certain direct contacts or marketing), we will obtain consent and you may withdraw it at any time.
CHANGE OF PURPOSE
Unless required or permitted by law, we will use your personal information only for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to receive an explanation of how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
OBLIGATION TO PROVIDE PERSONAL INFORMATION
You are neither legally nor contractually obliged to provide your personal information. However, if you do not provide certain personal information, we may not be able to provide our Services or respond to your requests.
YOUR LEGAL RIGHTS
If you are located in the EU/EEA or UK, to the extent provided for by law, you have the right:
• To access the personal information we maintain about you.
• To receive a copy of the information we process about you.
• To correct your personal information.
• To have your personal information erased.
• To object to or restrict how we process your personal information.
• To request your personal information be transferred to a third party in a structured, commonly used, machine-readable format, where technically feasible. Note that this right only applies to personal information for which you initially provided consent for us to use or where we used the personal information to perform a contract with or provide services to you.
• To withdraw any consent you may have given us to process your personal information with effect for the future. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
You have a general right to object, on grounds relating to your situation, if we process your personal information based on our legitimate interest. We will no longer process your personal information unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
You also have the right to lodge a complaint with a supervisory authority in your applicable Member State. In the UK, you have the right to lodge a complaint with the Information Commissioner’s Office.
If you wish to exercise any of the rights available to you or to obtain any other information under applicable law, such as a copy of a legitimate interests balancing test, please contact us by sending an email to matt@getauctor.com.
Canada
Personal Information Protection and Electronic Documents Act
If you are located in Canada, you may be provided with certain rights pursuant to the Personal Information Protection and Electronic Documents Act (“PIPEDA”), including:
• The right to be informed of the purposes for processing your personal information.
• The right to withdraw consent for processing your personal information at any time, subject to certain legal or contractual restrictions and reasonable notice.
• The right to correct inaccuracies in the personal information that we maintain about you.
• The right to acquire information about our privacy policies and practices.
• The right to access your personal information, subject to certain exceptions.
• The right to address a challenge concerning compliance with PIPEDA principles to our Data Protection Officer.
To exercise any applicable PIPEDA rights, please submit a request by emailing us at founders@getauctor.com. We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact matt@getauctor.com.
If you make a PIPEDA rights request, we will inform you whether or not we hold personal information about you. We may request additional information from you in order to verify your request. We will respond to your request within a reasonable time and at minimal or no cost to you. If we are able to facilitate your request, we will provide such information in a form that is generally understandable. In responding to your request, we will attempt to be as specific as possible. If we are unable to respond to your request, we will inform you of that decision. If you are unsatisfied with how we have handled your request, you may file a complaint with the Office of the Privacy Commissioner.
Other Provincial Privacy Laws
If you are a resident of Quebec, Alberta, or British Columbia, you may be afforded certain rights under the Privacy Act (Law 25), Alberta Personal Information Protection Act (“Alberta PIPA”), or the British Columbia Personal Information Protection Act (“BC PIPA”), respectively. Under these laws, you may be provided with the following rights:
• The right to access the personal information we maintain about you, and the right to have such information communicated to you in a structured, commonly-used technological format.
• The right to rectify inaccuracies in the personal information we maintain about you.
• The right to be informed of the purposes for which information is collected and the means by which information is collected.
• The right to withdraw consent for processing of the information collected.
• The right to have personal information de-indexed, in certain circumstances (i.e., “the right to be forgotten”).
• The right to file a complaint with an appropriate regulatory authority.
The exact nature and scope of these rights vary by province. To exercise any applicable Canadian provincial privacy rights, please submit a request by emailing us at founders@getauctor.com.
We may request additional information from you in order to verify your identity and facilitate your request. If we are unable to complete your request, we will notify you in writing. If you are dissatisfied with our decision regarding your request, you may contact your local Privacy Commissioner’s Office.
We may transfer your personal information outside of Canada. In such cases, we will employ reasonable data security measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, or disclosure. If you have any questions regarding how we handle cross-border data transfers, please contact our DPO at matt@getauctor.com.
Mexico
If you are a resident of Mexico, you may be provided certain privacy rights under the Federal Law on Protection of Personal Data Held by Individuals (“LFPDPPP”). These rights (“ARCO Rights”) include:
• The right of access, which allows you to request details about which categories of personal data are being processed.
• The right of rectification, which includes the right to correct inaccuracies in the personal information we maintain about you.
• The right of cancellation, which allows you to delete personal data that we maintain about you, if the grounds and purposes for processing no longer apply.
• The right of objection, which allows you to object to the processing of your data, including processing by automated means, when such processing produces significant effects.
To exercise any applicable LFPDPPP rights, please submit a request by emailing us at founders@getauctor.com. We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact matt@getauctor.com.
In submitting a request, please ensure that you clearly identify the specific right to be invoked. Only you or a legal representative may submit a request. We may request additional information from you in order to evaluate and facilitate your request, including for verification purposes. We endeavor to respond substantively to requests within 20 business days of receipt. We reserve the right to deny your request for a number of reasons. For example, we may deny your request, in whole or in part, for the following reasons:
• If we are unable to verify the identity of the data subject or legal representative.
• If we do not hold personal data about the data subject.
• If complying with the request would harm the rights of a third party.
• If complying with the request would be contrary to a legal impediment or resolution from a competent authority.
• If the request has already been carried out.
If we deny your request, we will communicate such decision to you, as well as the reasons for the denial, within 20 business days.
If you believe that your rights have been violated, you may file a data protection request with the Ministry of Anti-Corruption and Good Governance within fifteen (15) days of receipt of our response. If you have any questions regarding our policies and practices, you may contact our DPO at founders@getauctor.com.
Data Storage and Retention
We retain your data only for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law. When data is no longer needed, we ensure its secure deletion using secure data-wiping methods.
Children’s Data
Auctor AI does not knowingly collect information from children under the age of 13. If we become aware that we have collected personal information from a child without parental consent, we will take steps to remove such information from our servers. If you believe that we have collected personal information from your child under the age of 13, please contact us at founders@getauctor.com.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: founders@getauctor.com
Postal Address: 426 W 14th St, Floor 2, New York, NY 10014