Legal

Privacy Notice

This notice covers artifinance.io and the ARIA sandbox at app.artifinance.io. It describes what we collect, why, who we share it with, and how you can see, correct, export or delete it. It is written in plain language, not as a substitute for advice from your own counsel.

What we collect

What we do not do

Who we share it with

We use a small number of subprocessors to run the product. Each only sees what it needs to do its job:

We do not have a signed Data Processing Agreement template published yet for enterprise procurement review — if your organisation needs one before proceeding, email us and we'll get one to you.

Retention and deletion

Sandbox and account data is kept for as long as your workspace is active. You can ask us to access, correct, export, or permanently delete your data at any time by emailing hello@artifinance.io with the workspace or account details. We aim to acknowledge every request within 5 business days and to complete a straightforward deletion request within 30 days.

Your rights

If you are in India, the Digital Personal Data Protection Act, 2023 gives you rights to access, correct and erase your personal data, and to withdraw consent. If you are in the EU/EEA or UK, the GDPR gives you equivalent rights, including data portability. Either way, the same email address above is how you exercise them.

Security

Sensitive personal fields (for example HR identifiers) are encrypted at the field level; the underlying cloud storage is encrypted at rest by our hosting provider. Access inside the product is role-based and every change to a ledger is hash-chained so it can be reconstructed and reviewed.

Changes to this notice

If this notice changes materially, we'll update the date at the top of this page. Contact us if you'd like to be notified directly.