Privacy Policy
Last Updated:
This Privacy Policy describes how Arata AI Inc., a Delaware corporation ("Arata AI," "we," "us"), collects, uses, and protects personal information in connection with the website at arataai.com (the "Site") and our cloud-based services (the "Services"). It applies to visitors to the Site, individuals who use the Services, and business contacts.
For personal information contained in data that our business customers submit to the Services ("Customer Data"), we act as a service provider / data processor on the customer's behalf. That processing is governed by our agreement with the customer (including any data processing addendum), and this Privacy Policy applies to it only to the extent it does not conflict with that agreement. If you are an end user of a customer's account, please direct privacy requests to that customer, and we will support them in responding.
Information We Collect
Information you provide. Account registration details (name, business email, organization, role); communications you send us (support requests, inquiries); and Customer Data you or your organization submit to the Services.
Information collected automatically. Log and usage data (IP address, browser and device information, pages viewed, actions taken in the Services, timestamps); and cookies or similar technologies used to operate the Site and Services, keep you signed in, and understand usage. You can control cookies through your browser settings.
Information from third parties. Business contact information from our customers (e.g., when an organization creates accounts for its personnel) and from service providers that support our sales and operations.
We do not intentionally collect sensitive personal information (such as health, financial account, or government-classified information) through the Site, and our Terms of Service restrict submitting such data to the Services without written agreement.
How We Use Information
We use personal information to: provide, operate, secure, and maintain the Site and Services; create and administer accounts; respond to inquiries and provide support; monitor for and investigate security incidents, fraud, and misuse; comply with legal obligations; enforce our Terms of Service; and communicate about the Services, including administrative and (where permitted) marketing messages, which you may opt out of at any time.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. Arata AI does not use Customer Data submitted by enterprise customers to train or fine-tune models for the benefit of third parties, except where the customer expressly opts in in writing or where data is aggregated and de-identified.
How We Share Information
We share personal information only with: service providers and subprocessors that support the delivery of the Services (including Microsoft Azure, our hosting provider), under contractual confidentiality and security obligations; professional advisors (lawyers, accountants, auditors) under confidentiality obligations; authorities or other parties where required by law, to protect rights and safety, or to enforce our agreements; and a successor entity in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.
Security
We maintain a written information security program aligned with the AICPA Trust Services Criteria for Security, Availability, and Confidentiality. Safeguards include encryption of data in transit and at rest, role-based access controls operating on a least-privilege basis, monitoring of key infrastructure components, personnel background checks and security training, and an incident management process. In the event of a security incident involving unauthorized access to personal information, we will notify affected parties without undue delay and in accordance with applicable law. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements, in accordance with our data retention policy. Customer Data is retained and deleted in accordance with our agreement with the customer; following termination, customers may request export of their Customer Data, after which it is deleted within a commercially reasonable period except where retention is required by law. Backups are maintained and aged out in accordance with our data backup policy.
International Transfers
The Services are hosted on Microsoft Azure in regions across the United States, Europe, and India, and personal information may be processed in these locations. Where required by applicable law, we implement appropriate safeguards for cross-border transfers, such as standard contractual clauses.
Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at privacy@arataai.com. We will verify your request and respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with a supervisory authority. If your personal information was submitted to the Services as part of Customer Data, we may redirect your request to the relevant customer.
Children
The Site and Services are intended for business use by individuals 18 and older. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last Updated" date, and where required by law we will provide additional notice.
Contact
Arata AI Inc.
69 Charlton Street, New York, NY 10014
privacy@arataai.com
© 2026 Arata AI Inc. All rights reserved.