Privacy Policy

The short version

• We never store your raw source data. Ara keeps your analyses, query logic and aggregated results. Your underlying data stays in your systems.
• Your content never trains AI models. Ours or anyone else’s.
• We never sell your information. No exceptions.
• You can export everything, anytime.
• Deleted means deleted. Workspace content is removed on offboarding, and backups are purged within 90 days.

The full policy below explains the details.

Questions? Email us at hello@araplatforms.com and a founder will answer.

1. Who we are

Ara Platforms ("Ara," "we," "us") provides a knowledge management platform for data and analytics teams. This policy explains what information we collect, how we use it, and the choices you have. It applies to araforteams.com and the Ara application.

2. Information we collect

Account information. Name, email address, password, organization name and team settings when you create an account.

Analytical content. The work you create or upload in Ara: analyses, notebooks, query logic, scripts, insights, reports and version history, along with the rationale and comments attached to them.

What we do not collect: your raw source data. Ara is built so that your underlying datasets never enter our systems. When your analyses reference data, Ara stores the query logic and the aggregated outputs, such as summary statistics and visualizations, not the source records they were computed from. Your data warehouse, databases and files remain entirely in your infrastructure.

Usage and device information. Log data such as IP address, browser type, pages viewed and feature interactions, collected automatically to operate and improve the service.

Payment information. Billing details are processed by our payment provider (Stripe). We do not store full card numbers.

3. How AI works in Ara

Ara uses AI to extract and structure insights from the analytical content you add, including generating confidence scores, identifying source cells and drafting report content. Here is how we handle your content in that process:

• Your content is processed by our AI provider solely to deliver these features to you.
• Your content is not used to train Ara’s models or any third parties’ models. (Confirm this against your model provider agreement before publishing.)
• Every AI-generated insight remains subject to human review. Nothing is published to your team’s library without a person approving it.

4. How we use your information

We use the information above to provide and improve the service, secure it, respond to support requests, process payments, send service notifications, and, with your consent, send occasional product updates.

We do not sell, rent or trade your personal information.

5. How we share information

Within your workspace. Content you add to a team workspace is visible to teammates according to the permissions your workspace sets. Workspaces are partitioned from one another.

Service providers. We use a small number of subprocessors to run Ara: cloud infrastructure and database hosting, an AI model provider for insight extraction, a payment processor, and email delivery. Each is bound by contract to protect your information and use it only to provide services to us. A current subprocessor list is available on request.

Legal requirements. We may disclose information if required by law or valid legal process, or to protect the rights and safety of our users.

Business transfers. If Ara is acquired or merges, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a different policy.

6. Security

We protect your information with encryption in transit (TLS) and at rest (AES-256), role-based access controls, partitioned workspaces, and hosting on established cloud infrastructure.

Because Ara never ingests your raw source data, the most sensitive layer of your data estate is never exposed to us at all.

No system is perfectly secure, and we will notify affected customers promptly if a security incident involves their information.

7. Data retention and deletion

Active accounts. We retain your information while your account is active.

Offboarding. When your organization ends its use of Ara, workspace content is deleted from active systems within [30] days of contract termination and removed from backups within 90 days.

Individual deletion. You may request deletion of your account and personal information at any time by contacting us. Personal information is deleted within 30 days except where retention is required by law.

Export. You can export your content at any time. We will never hold your knowledge hostage.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or port your personal information, to object to processing, and to withdraw consent. This includes rights under the GDPR for those in the EEA, UK and Switzerland, and under the CCPA for California residents, who also have the right to non-discrimination for exercising them.

We do not sell personal information as defined by the CCPA.

To exercise any right, email hello@araplatforms.com. We respond within 30 days, and you may also lodge a complaint with your local supervisory authority.

9. International transfers

Your information may be processed in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.

10. Teams and administrators

Workspace administrators can manage member access and permissions, view audit history, and export or delete workspace data. If your organization has a separate agreement with Ara, including a Data Processing Agreement, that agreement governs where it differs from this policy.

A DPA is available on request at hello@araplatforms.com.

11. Children

Ara is not directed to anyone under 16, and we do not knowingly collect their information.

12. Changes to this policy

If we make material changes, we will update the effective date, post the new policy here, and email account owners. Continued use after changes take effect constitutes acceptance.

13. Contact

Ara Platforms · hello@araplatforms.com