Privacy Policy

Last updated: October 11, 2026

1. Who we are

AURUM is operated by Ramos Capital Ventures LLC, a Florida limited liability company. In this Privacy Policy, "AURUM," "we," "us" and "our" mean Ramos Capital Ventures LLC. "You" means anyone whose information we handle, including guests, people who join our waitlist, and businesses that apply to work with us.

This policy covers the AURUM iPhone app, the web app at https://joinaurum.co/app, and the website at https://joinaurum.co. We call these the "Service."

AURUM is offered in the United States only, and only to people 21 or older.

Questions or requests about your privacy: support@joinaurum.co.

2. The short version

We collect what we need to book your table, verify your age and identity, take payment and keep the Service safe.
We do not sell your personal information. We do not share it for advertising. We do not run ads.
We do not use third-party analytics or tracking tools in the app or on the website.
We do not collect your precise location.
We never receive or store your ID image or your selfie. Stripe handles identity verification and keeps those images under its own policy.
We never see or store your card number. Stripe processes payments.
The venue you book with sees what it needs to host your table. Door staff see your name, verification status and age, never your date of birth.
You can delete your account in the app.

3. Information we collect

Information you give us when you use the app or web app

Account details: your name, email address and mobile number.
Password: optional. If you set one, we store it only in hashed form, which means we cannot read it.
Profile photo: optional.
City: the city you choose to browse.
Bookings: the venue, night and table you choose, the bottles you pick, your party size, and the people you add to a split table.
Consents: your confirmation that you are 21 or older, your consent to biometric identity verification, and your acceptance of our Terms at checkout. We record each one with the date and time.
Support messages: anything you send to support@joinaurum.co.

Information we receive from Stripe

From Stripe Identity: whether your identity verification succeeded, your verified legal name and your date of birth. Section 4 explains this in detail.
From Stripe payments: records of your payments and refunds, such as amounts, dates and status. We do not receive your full card number.

Information created when you use the Service

Booking and payment records: amounts, payment status, refund records and the time you check in at the venue.
Sign-in sessions: when you sign in, we create a session that lasts up to 90 days. We store session tokens only in hashed form.
Sign-in codes: we store the one-time codes we send you only in hashed form.
Push notification token: if you allow notifications in the iPhone app, Apple gives us a device token so we can send notifications to that device.
Technical data: your IP address and basic request data, such as the time of a request, the page or feature requested, and your browser or app version. We use this for security, fraud prevention and to limit abuse.

Information other people give us about you

Split tables: if a friend adds you to a split table, they give us your name and your email address or mobile number, so we can send you your payment link.
Guest lists: a promoter may give us your name to put you on a venue's guest list.

Information we collect on the website from people who are not users yet

Waitlist: your first name, email address, Instagram handle if you choose to give it, and which form you used.
Venue and hospitality group applications: business name, city, capacity, and the contact person's name, phone number and email address.

4. Identity verification and biometric data

Why we verify. AURUM is for adults 21 and older, and venues need to know that the people at their tables are who they say they are. Before you can reserve a table, you verify your identity through Stripe Identity, a service of Stripe, Inc. ("Stripe").

How it works.

Before verification starts, we show you a full-screen consent notice with a checkbox. Verification cannot start unless you tick the box. We record your consent with the date and time.
Stripe asks you to photograph your government-issued ID and take a selfie.
Stripe checks that the ID is genuine and compares your selfie with the photo on the ID. To do this, Stripe creates a scan of your face geometry from each image. Laws in some states call this a "biometric identifier" or "biometric information." We call it "biometric data" in this policy.

What Stripe holds and what we hold.

Stripe holds your ID image, your selfie, and any biometric data made from them. Stripe processes them as our service provider and also under its own privacy policy, at https://stripe.com/privacy.
We do not receive, see or store your ID image, your selfie or any biometric data.
We hold only the result of the verification, your verified legal name and your date of birth. These are not biometric data.

Purpose. Biometric data is used only to confirm that you are the person shown on your ID, that your ID is genuine, and that you meet the minimum age, and to prevent fraud. It is not used for any other purpose.

No sale or profit. We do not sell, lease, trade or otherwise profit from biometric data. We do not disclose it to anyone other than Stripe, which performs the verification for us, unless you consent, the law requires it, or a valid warrant or subpoena requires it.

Retention and destruction. We will direct Stripe to permanently delete your ID image, your selfie and any biometric data made from them by the earliest of:

30 days after you delete your AURUM account.
One year after your last booking or sign-in.
Three years after the verification.

These limits are shorter than or equal to those required by the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act and Washington's biometric identifier law. Stripe may also keep some information for a period required by law under its own policy.

Your written consent. By ticking the consent box on the verification screen, you confirm that you have read this Section 4, and you give your written consent and release, by electronic signature, for Stripe, acting for us, to collect, use and store your ID image, your selfie and biometric data made from them for the purpose and for the period described in this section. This applies to residents of every state, including Illinois, Texas and Washington. You do not have to consent, but you cannot reserve a table without verifying.

Door staff and venues see your name, whether you are verified, and your age on the night. They never see your date of birth, your ID image or your selfie.

5. Information about other people you give us

When you split a table, you give us each friend's name and their email address or mobile number. Please give us this information only for people who have agreed to it.

We use it only to send that person their payment link and messages about the booking. We do not use it for marketing, and we do not add them to any mailing list. If they want, they can ask us to delete their information by emailing support@joinaurum.co.

The same applies to names a promoter adds to a guest list. We use them only to run the guest list for that venue and night.

6. How we use information

We use personal information to:

Create and run your account, and sign you in.
Verify your identity and age.
Show you venues, nights, floor plans and prices.
Make, manage and confirm bookings, including split tables.
Take payments, transfer the venue's share to the venue, and process refunds.
Send you sign-in codes, confirmations, receipts, payment links and notices about your bookings.
Let venues and door staff host your table and check you in.
Answer your support requests.
Prevent fraud, resale and abuse, limit excessive requests, protect the security of the Service, and respond to chargebacks.
Keep records that prove consents were given, and meet our tax, accounting and legal duties.
Send launch and early access news to people on our waitlist, who can unsubscribe at any time.
Review applications from venues and hospitality groups.
Fix problems and improve the Service, using only the information described in this policy.

We do not use your information for advertising, and we do not build profiles of you for marketing.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We share personal information only as follows.

Service providers. These companies help us run the Service. They may use your information only to provide their services to us, except where they also act under their own policies as described below.

Stripe: payments, payouts to venues through Stripe Connect, and identity verification through Stripe Identity. Stripe also acts under its own privacy policy for some of this processing, such as fraud prevention and identity verification.
Resend: sends our emails, such as sign-in codes, confirmations, receipts and refund notices.
Twilio: sends our text messages.
Render: hosts our application and database in the United States.
Cloudflare: provides network security and delivers the website and app traffic.
Apple: delivers push notifications and runs the App Store.
Google Fonts: our website loads its typeface from Google, which receives your IP address when the page loads.

Venues and promoters. We share booking information with the venue you book and, if a promoter brought you, with that promoter. Section 8 explains exactly what they see.

Card networks and banks. If you dispute a charge, we may share booking, consent, verification status and check-in records with Stripe, the card network and the banks involved, so the dispute can be decided.

Legal and safety reasons. We may share information if we believe in good faith that the law, a court order, a subpoena or a government request requires it, or that it is needed to protect the rights, safety or property of you, other guests, venues, our team or the public, or to prevent fraud.

Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that deal. The new owner must honor this policy for the information it receives, or give you notice and a choice.

With your direction. We share information when you ask us to, for example when you add a friend to a split table.

8. What venues and promoters see

The venue for your booking sees: the names of the guests on the booking, your party, the table, the bottles chosen, payment status, verification status, and each guest's age on the night.

Door staff see: your name, whether you are verified, and your age. Never your date of birth.

A promoter sees: the guests that promoter brought.

Venues and promoters never receive: your ID image, your selfie, your date of birth or your card details.

Venues are independent businesses. They use what they see to host your table and to run their door, and they are responsible for how they handle it under their own policies and the law.

9. Text messages

If you give us your mobile number and agree to receive texts, we send one-time verification codes and messages about your own bookings, such as a confirmation, a change or a cancellation. We do not send marketing texts. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. If you opt out, you will verify by email instead. Consent to receive texts is not a condition of any purchase.

Mobile numbers and text-message consent are never shared with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third party, except with Twilio, our text message provider, only to deliver the messages you asked for.

10. Emails and notifications

Emails about your account and bookings are part of the Service, and you cannot opt out of them while you have an account. These include sign-in codes, confirmations, receipts, split-payment links, refunds and cancellations.

If you joined our waitlist, we may send you launch and early access announcements. Every one of those emails has an unsubscribe link, or you can email support@joinaurum.co.

If you allow push notifications in the iPhone app, you can turn them off at any time in your iPhone's settings.

11. Cookies, local storage and tracking

The web app stores a session token in your browser's local storage so you stay signed in. If you clear it, you will be signed out.
We do not use advertising cookies.
We do not use third-party analytics, tracking pixels or tracking scripts in the app or on the website.
We do not track you across other companies' apps or websites.
Cloudflare, which protects our website, may set strictly necessary security cookies to detect and block abusive traffic.
Our website loads its typeface from Google Fonts. Your browser sends your IP address to Google when it does this.

Because we do not sell or share personal information for advertising, there is nothing to opt out of through a "Do Not Track" signal or Global Privacy Control. We still honor those signals as a request not to sell or share, which we do not do anyway.

12. How long we keep information

We keep personal information only as long as we need it for the reasons in this policy. Our schedule is:

Account details (name, email, mobile number, password hash, profile photo, city): while your account is open. When you delete your account, we remove them within 30 days.
Verified legal name, date of birth and verification result: while your account is open. When you delete your account, we remove your date of birth within 30 days. The verification result and the name on a booking stay with that booking record.
ID images, selfies and biometric data: we never hold these. Section 4 explains when we direct Stripe to delete them.
Booking, payment, refund and check-in records: seven years after the night of the booking, for tax, accounting, chargeback and legal purposes. This applies even if you delete your account.
Consent records (age confirmation, biometric consent, acceptance of the Terms): seven years after the later of your last booking or the date your account closes, as proof the consent was given. This applies even if you delete your account.
Contact details of friends added to a split table: the friend's name stays with the booking record. Their email address or mobile number is deleted 90 days after the night, unless they become an AURUM user.
Names on promoter guest lists: 12 months after the night.
Sign-in sessions: up to 90 days, or until you sign out.
Sign-in codes: until the code is used or expires.
Push notification tokens: until you turn off notifications, sign out or delete your account.
IP addresses and security logs: 90 days, unless we need them longer to investigate a specific security or fraud problem.
Support emails: three years after your last message.
Waitlist entries: until 12 months after we launch in your city, or until you unsubscribe, whichever comes first.
Venue and hospitality group applications: two years after our last contact with the applicant, unless the business signs up with us.
Backups: our database backups allow recovery for up to seven days. Deleted information may remain in backups until they roll over.

We may keep information longer if the law requires it, or if it is needed for an open dispute, investigation or legal claim, but only until that matter ends.

13. How we protect information

We use reasonable safeguards designed to protect personal information. These include:

Encryption of data in transit between your device and our servers.
Storing passwords, session tokens and sign-in codes only in hashed form.
Limiting access to personal information to team members who need it to do their jobs.
Database backups with point-in-time recovery for seven days.
Rate limits and security logs to detect and block abuse.

No system is completely secure, and we cannot guarantee the security of your information. If we learn of a breach that affects your personal information, we will notify you as the law requires.

14. Your choices and rights

Wherever you live in the United States, you can ask us to:

Access: tell you what personal information we hold about you and give you a copy.
Correct: fix information that is wrong. You can update most account details in the app.
Delete: delete your personal information, subject to the records we must keep under Section 12.
Stop emails: unsubscribe from waitlist emails using the link in any of them.
Stop texts: reply STOP to any text.
Stop notifications: turn off push notifications in your iPhone's settings.

To make a request, email support@joinaurum.co from the email address on your account, or tell us that address. We will verify your request by confirming you control that email address or mobile number. We may ask for more information if we need it to protect your account. We will respond within 45 days. If we need more time, we will tell you why, and we will not take more than 90 days in total.

You may use an authorized agent to make a request. We will ask the agent for proof that you authorized them, and we may ask you to confirm your identity directly.

We will not treat you differently, charge you a different price or give you a lower quality of service for using these rights.

15. Deleting your account

You can delete your account in the app at any time from your account screen. You can also email support@joinaurum.co.

You cannot delete your account while you have an upcoming booking. Cancel it, or wait until the night has passed.

When you delete your account, we remove your personal details and anonymise your account. We keep booking, payment, refund and consent records for the periods in Section 12, because we need them for tax, chargebacks and proof of consent. We also direct Stripe to delete your verification images and biometric data as Section 4 explains.

16. State privacy rights

Several states, including California, Colorado, Connecticut, Virginia, Texas and others, have privacy laws that give residents specific rights. Most of these laws apply only to businesses above certain size or revenue levels. We are a small company and may not be required to follow them. We choose to honor the access, correction and deletion rights in Section 14 for everyone in the United States.

To be clear about what these laws ask businesses to disclose:

We do not sell personal information, and we have not done so in the past 12 months.
We do not share personal information for cross-context behavioral advertising or targeted advertising, and we do not use it for profiling that produces legal or similarly significant effects.
Sensitive information: we use your verified legal name, date of birth and verification result, and Stripe uses biometric data for us, only to verify your identity and age and to prevent fraud. We do not use sensitive information to infer characteristics about you.
The categories of personal information we collect, where it comes from, why we use it and who receives it are described in Sections 3 to 8.

Appeals. If we deny your request, you can appeal by replying to our decision or emailing support@joinaurum.co with the subject line "Privacy appeal." We will respond within 45 days. If you are not satisfied, you may contact your state attorney general.

17. Children

AURUM is only for people 21 and older. We do not knowingly collect personal information from anyone under 21, including children under 13. If we learn that someone under 21 has created an account, we will close it and delete their personal information, except for the consent and transaction records we must keep under Section 12. If you believe someone under 21 has given us information, email support@joinaurum.co.

18. Changes to this policy

We may update this policy. If we make a material change, we will tell you by email and by a notice in the app at least 30 days before the change takes effect, and we will update the "Last updated" date at the top. If the change would let us use personal information we already hold in a materially different way, we will ask for your consent where the law requires it.

19. Contact us

Ramos Capital Ventures LLC, operating AURUM

12675 S Dixie Hwy #2035, Miami, FL 33156

Email: support@joinaurum.co

Website: https://joinaurum.co