1. Who We Are

ARIA is an AI personal assistant operated by Darren Jansen, based in Australia. We are committed to handling your personal information responsibly and in compliance with applicable privacy law.

Contact: support@aria.ai

2. What Data We Collect

We collect the following categories of personal information:

• Account data: email address, display name, and password (stored as a one-way hash — never readable)
• Conversation content: messages you send to ARIA and ARIA's responses
• Usage logs: timestamps and endpoint names of API requests (no message content stored in logs)
• Subscription and billing data: managed by Stripe — we do not store card numbers
• Communication data: if you use ARIA's voice calling feature, call records are stored via Twilio

3. Why We Collect It

We collect your data to:

• Provide the ARIA service (authentication, conversation, memory)
• Process payments and manage your subscription
• Improve ARIA's performance and accuracy (collective learning — you can opt out in settings)
• Ensure the security of the platform

4. Third-Party Processors

We use the following sub-processors to deliver the service. Each has its own privacy policy. Each processor is engaged under a Data Processing Agreement (DPA) as required by GDPR Art. 28.

Processor	Purpose	Privacy Policy
Stripe	Payment processing	stripe.com/privacy
OpenAI	AI processing (model inference)	openai.com/privacy
Twilio	Voice call infrastructure	twilio.com/privacy

5. Data Retention

Data	Retention Period	Notes
Account data	Until erasure request	Deleted when you request account deletion
Conversation history	Until erasure request	Deleted by right-to-erasure request
Usage logs (request_log)	72 hours	Purged automatically every night
Billing records	7 years minimum	Required by Australian tax law
Password reset tokens	1 hour	Expire automatically and are ignored after expiry

Session conversation data may take up to 24 hours to be fully purged following an erasure request.

6. Your Rights

Depending on your jurisdiction, you have the right to:

• Access: Export all your data at any time from your account settings
• Rectification: Update your name and email from your profile
• Erasure: Delete your account and all associated data from account settings
• Portability: Download a ZIP of your data (conversations, facts, directive)
• Opt-out: Disable collective learning from your account settings

To exercise any right, use the in-app tools or email us at support@aria.ai.

7. Cookies

ARIA uses a single session cookie that is strictly necessary to keep you logged in. This cookie is functional and does not require consent under applicable ePrivacy rules. We do not use advertising cookies or third-party tracking cookies.

8. Security

We protect your data using industry-standard measures: bcrypt password hashing, HTTPS in transit, and server-side session management. We will notify you within 72 hours of becoming aware of a breach affecting your personal data, as required by GDPR Art. 33.

9. Changes to This Policy

We will notify you of material changes to this policy via email. Continued use of ARIA after notification constitutes acceptance.

10. Contact

For privacy enquiries: support@aria.ai

Governing law: Australian Privacy Act 1988 and Australian Privacy Principles. For EU/UK customers, GDPR and UK GDPR also apply.

Also see: Terms of Service

← Back to ARIA