Privacy policy

Information you share

When you create an account, we use your name, email address and account identifier. Supabase handles authentication and password storage. If you sign in with Google or Facebook, we receive the identity information you authorise, such as your name, email address, profile image and provider identifier. We do not receive your Google or Facebook password.

Saved creations include your bracelet’s name, materials, arrangement, size and cord choice. When you make a wish or buy a bracelet, we also collect the contact and delivery details you provide. Orders include the design, price, payment status and fulfilment information.

How we use it

We use this information to sign you in, keep your creations, send account and wish emails, process payments, prepare and deliver orders, answer your requests and protect the service against abuse.

Google account information is used to identify your account and provide the features you request. We do not sell that information or use it for personalised advertising. Google sign-in requests your basic identity, email address and profile information.

Saved creations and shared wishes

Your saved creations are available through your account. When you activate and share a wish, anyone with its link can see the bracelet, its name and its price, and can buy it for you. Avoid putting private information in a creation’s name.

Your wish delivery address and recipient contact details are not included on the public wish page or shown to the gift buyer. Aurêve’s authorised fulfilment staff use those details to deliver the bracelet. You can close a wish or replace its link from your account; this cannot remove copies someone has already shared elsewhere.

Services that help us run Aurêve

We use Supabase for accounts and data storage, Railway for website hosting, and Cloudflare for domain services. Google and Meta process social sign-in according to their own privacy policies when those sign-in options are enabled. Resend processes the addresses and message content needed to deliver account emails and, when enabled, wish emails.

Stripe processes checkout and payment information under its own privacy policy. Aurêve does not store full card numbers or card security codes. Delivery providers receive the information needed to deliver an order. These providers may process information outside Singapore.

Cookies, drafts and security

We use cookies for sign-in sessions and browser storage to keep an unfinished bracelet on your device. Clearing browser storage can remove an unsaved draft. The website and its providers also process technical information, such as IP addresses and request logs, for operation, troubleshooting and abuse prevention.

Customer information is restricted to the accounts and staff who need it for the relevant task. Keep your account and wish links secure, especially on shared devices.

Keeping and deleting information

We keep information while it is needed to provide the service and for relevant business or legal purposes. Order, payment and fulfilment records may need to be retained after an account is closed. Backups and service-provider records may remain until their normal retention periods end.

You can request access to or correction of your information, withdraw consent, or ask us to delete your account by emailing hello@aureve.sg. We may need to verify that the account belongs to you. Withdrawing information needed for an account, wish or order may prevent us from providing that service. See how to request account or data deletion.

Changes to this policy

We will publish changes on this page with an updated date.