Aurum

Privacy Policy

Last updated: 23 September 2026

Applies to the Aurum web application and the Aurum Android application.

1. Who controls your data

Aurum is a business tool sold to jewellery retailers. It is multi-tenant: each retailer has its own isolated workspace.

The jewellery retailer you are a customer or employee of is the data controller. They decide what is recorded and why.
Aurum, operated by Kothari IT Services Private Limited (“we”, trading as Advinova) runs the software as a data processor on their behalf.

If you are a customer of a jewellery shop and want your details corrected or removed, contact that shop — they control your record. If you are a member of shop staff, your employer administers your account.

Contact: info@advinova.com

2. What Aurum collects, and why

2.1 Customer information (entered by shop staff)

Name, phone number, optionally email, address or area, birthday and anniversary, family relationships, purchase history, enquiries, and appointment or visit records.

Purpose: to run the shop’s customer relationship management — recognising a returning customer, following up an enquiry, recording a sale, and honouring loyalty or savings-scheme commitments.

A note on phone numbers. A phone number in Aurum is treated as potentially shared within a family. It is not a unique identifier for one person.

2.2 Staff information

Name, employee code, role, branch, login email, attendance, and performance attribution — which employee generated or closed which enquiry or sale.

Purpose: access control, accountability, and the shop’s own performance reporting.

2.3 Camera and photographs

Aurum takes photographs of jewellery items — at repair intake, at gift distribution, and against orders. Purpose: evidence of the condition and weight of a customer’s item when it was handed over, which is what settles a later dispute.

There are two ways a photograph is taken, and they differ in what they access:

Your phone’s own camera app. Most photo steps hand off to the camera or gallery app you already use. Aurum receives only the picture you choose.
An in-app camera. Some steps open a camera preview inside Aurum itself, so the photo can be taken without leaving the screen. This is why the Android app asks for camera permission. The preview runs only while that screen is open, and a photograph is saved only when you press the shutter.

Images are stored in a private Amazon S3 bucket (Mumbai, ap-south-1) and are served only through short-lived signed links to authorised staff.

2.4 Microphone — and what happens to what you say

Aurum has a voice-to-text button on some text fields, so staff can dictate a note instead of typing it. This is why the Android app asks for microphone permission.

Aurum never records, stores or transmits audio. Speech is transcribed by the speech service built into your browser or device — on Android that is Google’s. Your speech is sent to that service, and only the resulting text is returned to Aurum and saved. No audio file is ever created, uploaded or kept.

The microphone is opened only while you are holding the voice-to-text button, and closed as soon as you release it. It is never opened in the background.

2.5 Location — please read this carefully

Aurum can collect precise location, in two separate and independent ways. Both are features a retailer switches on; neither is on by default.

Showroom lock (geofencing). When a retailer enables it, certain actions — such as recording a sale or marking attendance — work only while the member of staff is physically at their branch. Your device’s location is read at the moment you perform such an action, checked against the branch’s coordinates, and used to allow or refuse that action. Refusals are recorded in an audit log.
Live team location. When enabled, the app reports a member of staff’s location approximately every 30 seconds while the app is open, so their manager can see the team’s current positions on a map.

Both apply to shop staff, not to customers. Aurum never collects the location of a shop’s customers. Neither collects location when the app is closed or in the background — location reporting stops when the app is not in the foreground.

If you are a member of staff, your employer decides whether these are switched on. This is workplace monitoring, and depending on where you are it may carry its own notice obligations for your employer.

2.6 Financial records

Sale amounts, discounts, advances, instalments toward savings schemes, loyalty points and metal rates.

Aurum does not process payments. It contains no payment gateway and never holds, moves or takes custody of money. It records transactions that happened elsewhere, the way a ledger does.

2.7 Activity and technical records

An immutable audit log of significant actions — who changed what, and when — including the IP address of the request, plus standard server logs. Purpose: security and accountability. See section 6: the audit log is deliberately permanent.

2.8 What Aurum does not collect

No audio recordings or video. No contacts, SMS or call logs. No advertising identifiers. No third-party analytics or advertising software. No tracking across other apps or websites. Aurum shows no advertisements.

3. Who your data is shared with

Aurum shares data with the processors below, and only to deliver features the retailer has switched on. Your data is never sold, and never used for advertising.

Recipient	What is shared	When
Amazon Web Services (Mumbai)	Application data and photographs	Always — AWS hosts Aurum
Google	Speech audio, for transcription only	Only when you use the voice-to-text button
Meta Platforms (WhatsApp Business)	Customer name and phone number	Only if the retailer enables WhatsApp messaging
Telegram	Staff notification text	Only if the retailer enables Telegram alerts
Anthropic	Enquiry text, for optional AI assistance	Only if the retailer enables the AI feature
Swarna HRMS	Employee codes, sale amounts, activity counts	Only if the retailer enables HRMS sync

Aurum may also disclose data where required by law.

4. Where data is stored, and how it is protected

Data is stored in India (AWS ap-south-1, Mumbai). All traffic uses HTTPS; the Android app refuses unencrypted connections entirely.

Each retailer’s data is isolated at the database level by PostgreSQL Row-Level Security, and the application refuses to serve traffic at all if that protection is not verifiably active. Access within a workspace is restricted by role. Passwords are stored hashed and are never recoverable. Databases are backed up nightly to encrypted storage.

The Android app blocks screenshots and screen recording, and blanks its preview in the app switcher.

5. How long data is kept

Data is retained for as long as the retailer maintains their Aurum workspace. Deleting a record performs a soft delete — it is hidden from everyday use and can be restored from a recycle bin for a period, then removed from normal operation. When a workspace’s data is purged, stored photographs are deleted from S3 along with the records.

5b. Account and data deletion

Accounts cannot be created from inside Aurum. A jewellery retailer creates accounts for their own staff, and a platform administrator creates the retailer’s workspace. There is no public sign-up.

To have an account or a record removed:

If you are shop staff — ask your employer. They administer your account and can deactivate or remove it from the Employees screen.
If you are a customer of a jewellery shop — ask that shop. They control your record and can delete it; deleted records go to a recycle bin before being removed for good.
If you cannot reach them, or you want the whole workspace removed — write to info@advinova.com. We operate the software on the retailer’s behalf, so we will pass the request to them as the controller, and act on it where the request is ours to act on.

When a workspace is deleted, its records and its stored photographs are removed together. One thing is deliberately kept, and it is set out in the next section: the audit log.

What is deleted, what is kept, and for how long:

Customer and staff records — kept while the retailer’s workspace is active. A deleted record moves to a recycle bin, where it stays until somebody removes it permanently; there is no automatic expiry, so a record deleted in error can be restored.
Photographs (visit proof, review proof) — deleted automatically 183 days after they are taken, from our file storage as well as the database. This happens on its own, whether or not anyone asks.
The audit log — kept permanently, by design. See the next section.

6. Your rights, and one limitation we state plainly

Contact the jewellery retailer whose workspace holds your data to access, correct or request deletion of it. For staff accounts, contact your employer; accounts cannot be created by individuals and are administered by the retailer. You may also write to us at info@advinova.com and we will pass the request to the controller.

The audit log is permanent by design. It records who did what and when, and is deliberately immutable — that is the point of an audit log. Deleting a customer or employee record does not erase the historical audit entries referencing that action. A deletion request will be honoured for the operational record; the accountability trail remains.

7. Children

Aurum is a workplace tool for jewellery retail staff. It is not directed at children and is not intended for anyone under 18.

8. Changes

Material changes will be reflected on this page with an updated date at the top.

Kothari IT Services Private Limited (trading as Advinova)
B, House No. 1001, Gagan Unnati, Near Iskon Temple, Kondhwa Lh,
Pune City, Maharashtra – 411048, India
info@advinova.com · Sign in to Aurum