This policy explains what information Ari collects, how we use it, and the choices you have. Ari is operated by Saulutions ("we", "our", "us"), based in Alberta, Canada. You can reach us at [email protected].
1. What we collect
- Messages. The content of your conversations with Ari — including text, images, voice notes, and files you send — so Ari can respond and remember context.
- Channel identifiers. The phone number, Discord user id, or other handle of the channels you pair, used to route messages to your account.
- Account email. If you sign up on the web, we store your email address to sign you in and send sign-in codes. Google sign-in shares only your name and email.
- Profile details. Information you give Ari, such as your name, timezone, and preferences.
- Connected-integration data. If you connect a third-party service (such as Google, Notion, or Todoist), Ari accesses and stores only the data needed to fulfill what you ask Ari to do with that service.
- Billing data. Handled by our payment processor (Stripe). We store a customer identifier and subscription status — never your full card number.
- Technical data. Limited logs needed to operate and secure the Service (IP address, request timestamps, error traces).
- Site analytics. We measure how visitors use this site with our own first-party analytics: no third parties, no session recordings, no selling or sharing. Page visits and taps on the chat buttons are counted so we know which links bring people in. How long a page stayed open, how far it was scrolled, and whether the chat buttons came into view are deleted after 30 days and are not measured at all if your browser sends Global Privacy Control or Do Not Track. None of these records store an IP address or a browser identifier.
2. How we use it
We use your information to provide Ari, remember what matters to you, process payments, prevent abuse, debug issues, and improve the Service. We do not sell your personal information, we do not run advertising trackers, and we do not load third-party analytics on this site.
3. AI model use
To generate Ari's replies, your messages are sent to AI model providers under agreements that prohibit them from using your conversations to train their general-purpose models. Some of those providers may be located in the United States, the European Union, or other regions, including jurisdictions whose data protection laws differ from your own.
4. Who we share information with
We share information only with the categories of service providers needed to run Ari:
- AI model providers that generate responses.
- Our payment processor (Stripe).
- Messaging-channel operators for the channels you choose to use (for example, iMessage, Discord, or Telegram).
- Integrations you choose to connect (such as Google, Notion, or Todoist).
- Infrastructure providers for hosting, content delivery, and email delivery.
These providers may use the data only to perform their service for us. We may also disclose information where required by law, to enforce our Terms, or to protect the safety of users.
5. Google user data
When you connect a Google account, Ari requests access to the Google services you chose to connect, plus basic Google profile information (your name, email address, and profile picture) to identify which account is linked:
- Google Calendar. Read your calendars and create, change, or cancel events.
- Gmail. Search and read your mail, and draft, send, or organize messages (labels, archiving, trash).
- Google Tasks. Read and update your task lists.
- Google Drive. Find, open, create, save, and share your files.
A small number of accounts still hold an older, broader Google connection created before Ari split Google access up by service. That older connection additionally covers Google Contacts (reading and updating your contacts) and read-only access to Google Photos. It can be disconnected the same way as any other, and reconnecting grants only the per-service access listed above.
Ari uses that access to carry out the requests you make in your own conversation, and to run the scheduled features you turn on — for example the morning brief, which reads the day's calendar events and the number of unread messages in your inbox, and the calendar-change notifications you asked to receive.
Content that a Google API returns — an event, an email, a file — becomes part of your conversation. That means it is stored with your message history (section 7) and sent to the AI model providers that generate Ari's replies (section 3), which are under agreements prohibiting them from training their general-purpose models on it.
Google user data is never sold, never used for advertising, and never used to train generalized AI models. It is disclosed to no one except as needed to provide these features to you, with your explicit consent, where required for security or by law, or to a service provider bound by equivalent restrictions. Ari's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect any Google connection at any time from your settings page, which deletes the stored tokens. You can also revoke access directly at myaccount.google.com/permissions.
6. Where your data is processed
Ari is hosted in Canada. Your data may be processed in Canada, the United States, the European Union, or other regions where our service providers operate. Data protection laws in those regions may differ from your own. By using Ari, you understand this and consent to the transfer.
7. Data retention and deletion
We keep your data while your account is active. When you delete your account, we anonymize or remove your personal data within 30 days, except where we must retain limited records — billing records for tax law (typically up to 7 years), abuse/safety logs (up to 12 months), and routine backups (up to 90 days before rotation). You can request a copy of your data or its deletion at any time by emailing [email protected].
8. Security and incidents
We protect your data with encryption in transit, restricted access, and isolation between accounts. No system is perfectly secure, but we treat your conversations as private and design accordingly. If we become aware of a security incident affecting your personal data, we will notify you and any relevant regulators without undue delay, as required by law.
9. Your rights
- Ask for a copy of your data, or for your account and its data to be deleted, at any time by emailing [email protected]. We delete your account within 30 days of confirming the request.
- Disconnect any third-party integration you connected.
- Stop messaging Ari at any time.
- Ask us to correct information that is inaccurate.
Depending on where you live, you may have additional rights under local law — including the right to access, correct, port, restrict, or object to processing, withdraw consent, or lodge a complaint with a data-protection authority. For residents of the European Economic Area, the United Kingdom, and Switzerland, our legal bases for processing are: performing our contract with you (providing the Service), legitimate interests (operating, securing, and improving the Service), and consent (where you give it, such as for connected integrations). For California residents, see also our notices regarding rights to know, delete, and limit sharing under the CCPA/CPRA — we do not sell or share personal information for cross-context behavioral advertising.
For residents of Canada, our handling of personal information is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Alberta's Personal Information Protection Act (PIPA), British Columbia's Personal Information Protection Act, and Quebec's Act respecting the protection of personal information in the private sector (Law 25). You have the right to file a complaint with the Office of the Privacy Commissioner of Canada or your provincial regulator. If you are a Quebec resident: Ari uses automated processing of your messages to generate replies, store memories, and prioritize content — these are routine product features and do not produce legal or similarly significant decisions about you, but you can ask us about them at any time. Our privacy contact in Canada is [email protected].
To exercise any of these rights, email us at [email protected].
10. Cookies
We use only the cookies needed to keep you signed in and to keep the site functional. No advertising or analytics cookies.
11. Children
Ari is not directed to anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has used Ari, contact us and we will remove the account.
12. Changes
We may update this policy; the date above will change. If we make a material change, we will surface it in the Service or notify you by email at least 14 days before it takes effect.
13. Contact
Privacy questions: [email protected]. See also our Terms of Service.