1. Introduction
Ar-ti-fi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including:
- Email address when you join our waitlist
- Company name and role (optional)
- Account information when you create an account
- Financial data you input into the system
- Communications with us (support requests, emails)
2.2 Automatically Collected Information
When you use our services, we automatically collect:
- Log data (IP address, browser type, pages visited, time spent)
- Device information (device type, operating system)
- Usage data (features used, actions taken)
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send you technical notices, updates, and support messages
- Respond to your comments and questions
- Send marketing communications (with your consent)
- Monitor and analyze trends, usage, and activities
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
4. AI Data Processing
Our platform uses artificial intelligence (including third-party AI services such as Anthropic's Claude) to process your financial data. When you use Ar-ti-fi:
- Data sent to AI providers: Financial data, transaction details, and queries are sent to AI services for processing. We use API-level integrations where your data is not used to train AI models.
- Data retention by AI providers: AI providers may temporarily retain data for processing purposes in accordance with their own data processing agreements. We require all AI providers to maintain enterprise-grade data handling practices.
- No training on your data: Your financial data is never used to train or improve AI models. API-based processing ensures your data remains confidential.
- Conversation logs: Interactions between you and AI assistants through our platform may be logged for debugging, quality assurance, and audit purposes.
5. Data Security
We implement appropriate technical and organizational security measures to protect your information:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest
- Access Controls: Role-based access control (RBAC) with entity-level permissions
- Audit Logging: 7-year immutable audit trail of all operations
- Infrastructure: SOC 2 Type II compliant hosting and security practices
- Database Security: Multi-tenant architecture with schema isolation
6. Data Sharing and Disclosure
We may share your information in the following circumstances:
- With your consent: When you authorize us to share specific information
- Service providers: Third-party vendors who perform services on our behalf (hosting, analytics, email delivery)
- Business transfers: In connection with a merger, acquisition, or sale of assets
- Legal requirements: When required by law or to protect our rights
- Aggregated data: Non-personally identifiable information for analytics and research
We will never sell your personal information to third parties.
7. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Financial data: 7 years (accounting standards and tax requirements)
- Audit logs: 7 years (SOX compliance)
- Account data: Duration of account plus 1 year
- Waitlist data: Until launch or upon request for deletion
8. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your information (subject to retention requirements)
- Portability: Request export of your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications
- Object: Object to certain processing of your information
To exercise these rights, contact us at privacy@ar-ti-fi.com.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and settings
- Understand how you use our services
- Improve our website performance
- Deliver relevant content and advertising
You can control cookies through your browser settings. Disabling cookies may limit certain features.
9.1 Visitor Identification and Analytics Partners
We use third-party services to understand which businesses are interested in our product and to improve our website. These partners include:
- RB2B: Identifies the company associated with website visitors (US visitors only).
- IPinfo: Provides company, network, and geographic data based on IP address.
- PostHog: Captures product analytics and session behavior to improve the website.
- Google Analytics 4: Aggregate website traffic and engagement metrics.
- Vercel Analytics: Privacy-friendly traffic measurement.
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.
You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.
We do not store raw IP addresses associated with website visits. IP addresses are hashed with a private salt before persistence, so visit records cannot be reverse-mapped to a specific IP.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.
11. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
- Email: privacy@ar-ti-fi.com
- Website: ar-ti-fi.com