Privacy Policy

1. Introduction

This Privacy Policy describes how Aria.ai (“we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you use our AI chat platform (“the Platform”). By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

• Account information: email address, name, and authentication credentials (hashed)
• Chat data: your conversations, prompts, and messages sent through the Platform
• Usage data: model selections, feature usage, session activity, and interaction patterns
• Payment information: transaction records and credit balances (payment processing is handled by third-party providers)
• Technical data: IP addresses, browser type, device information, and access logs

3. Data Hosting and Storage Location

All data collected and stored by Aria.ai is hosted on infrastructure located in the United States of America. Your account data, chat history, usage logs, and all other information we process resides on servers within the United States.

Data transfers from the European Economic Area (EEA), United Kingdom, or other jurisdictions to the United States are made on the basis of Standard Contractual Clauses (SCCs) as approved by the European Commission, or other lawful transfer mechanisms where applicable.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform
• Manage your account and authenticate your identity
• Process payments and manage credit balances
• Route your prompts and messages to the appropriate AI providers
• Monitor and improve Platform performance and reliability
• Communicate with you about the Platform, including updates and security notices
• Enforce our Terms & Conditions and protect against misuse
• Comply with legal obligations

We process your personal data on the following legal bases:

• Performance of a contract — processing your account information, chat data, and payments is necessary to provide the service you requested
• Legitimate interests — processing usage and technical data to maintain platform security, prevent abuse, and improve reliability
• Legal obligation — retaining financial records and responding to lawful requests

5. Third-Party AI Providers — Your Data

Aria.ai routes your prompts and messages to third-party AI providers to generate responses. When you use the Platform, your messages, prompts, and related context are transmitted to the AI provider associated with the model you have selected.

6. Data Sharing

We do not sell your personal information. We may share your data with:

• Third-party AI providers: as described in Section 5, when you use the Platform to interact with AI models
• Payment processors: to process transactions
• Infrastructure providers: who host and operate our servers in the United States
• Law enforcement: when required by law, legal process, or government request

7. Data Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You acknowledge that you provide your data at your own risk.

8. Data Retention

We retain your data, including chat history, for as long as your account is active or as needed to provide the Platform. Upon account deletion, we will delete your personal data within a reasonable timeframe, except where retention is required by law or for legitimate business purposes such as fraud prevention and financial record-keeping. Note that data already transmitted to third-party AI providers is subject to their own retention policies, over which Aria.ai has no control.

9. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data (“right to be forgotten”)
• Portability — receive your data in a structured, machine-readable format
• Restriction — request that we limit how we process your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. Please note that we cannot modify or delete data that has already been transmitted to third-party AI providers.

If you are located in the EEA or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection supervisory authority (such as your national Data Protection Authority or, for UK residents, the Information Commissioner's Office at ico.org.uk).

10. Cookies and Analytics

We use cookies and similar technologies for the following purposes:

• Essential cookies — session management and authentication. These are necessary for the Platform to function and are set automatically.
• Analytics cookies — usage statistics collected via Umami, a privacy-respecting analytics tool. These are only activated after you provide explicit consent via our cookie banner.

You may withdraw analytics consent at any time by clearing your browser's local storage for this site, or by declining via the cookie banner on your next visit.

11. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes to how we process your personal data, we will notify you by email or prominent in-app notice at least 14 days before the change takes effect. Non-material changes (such as clarifications or formatting updates) are effective upon posting. Your continued use of the Platform after a material change takes effect constitutes acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].