Privacy Policy

1. Scope

This Privacy Policy applies to Aramin Technology websites, applications, SaaS platforms, admin panels, dashboards, APIs, AI tools, automation products, customer portals, and related services that link to or reference this policy.

It also applies when you contact us, request a proposal, subscribe to updates, use a product account, connect an integration, or interact with services operated by us.

This policy does not apply to third-party websites, platforms, or services that we do not control, even if they are linked from our services.

2. Our Role

Depending on the service, Aramin Technology may act as a data controller or as a data processor.

When we act as a processor, the customer is responsible for having the required legal basis, notices, permissions, and instructions for the personal information they submit to the service.

3. Information We Collect

The exact information we collect depends on the service you use and how you interact with it. It may include:

• Identity and contact information, such as name, email address, phone number, company name, job title, and country.
• Account information, such as login credentials, account preferences, workspace details, roles, permissions, and authentication events.
• Billing and transaction information, such as plan details, invoices, payment status, tax details, and billing address. Payment card details are usually processed by payment providers and not stored directly by us.
• Customer content, such as messages, prompts, files, documents, database records, form submissions, support tickets, workflow data, API payloads, and outputs generated by a service.
• Technical information, such as IP address, device type, browser type, operating system, log data, timestamps, cookie identifiers, session data, referral URLs, and approximate location derived from IP address.
• Usage information, such as pages visited, features used, actions performed, API usage, error logs, performance metrics, and product analytics.
• Integration data, such as data received from systems you connect to our services, including messaging platforms, CRM tools, payment systems, hosting panels, databases, calendars, email services, cloud providers, and automation platforms.
• Communication information, such as emails, chat messages, call notes, feedback, survey responses, and support conversations.

4. How We Use Information

We use personal information to operate, secure, support, and improve our services, including to:

• Provide websites, apps, dashboards, APIs, integrations, automation workflows, and customer support.
• Create and manage accounts, authenticate users, assign roles, and prevent unauthorized access.
• Process orders, invoices, subscriptions, renewals, payments, and service notices.
• Respond to inquiries, provide proposals, troubleshoot issues, and communicate about projects or accounts.
• Monitor service health, debug errors, prevent abuse, detect fraud, and protect systems and users.
• Improve user experience, product reliability, performance, and business workflows.
• Send administrative, security, legal, and operational notices.
• Send marketing communications where permitted by law and where you have not opted out.
• Comply with legal obligations, enforce contracts, resolve disputes, and protect legal rights.

5. Legal Bases for Processing

Where privacy laws require a legal basis for processing, we rely on one or more of the following:

• Contract performance, when processing is needed to provide a service, manage an account, or fulfill a customer agreement.
• Legitimate interests, such as securing services, improving products, preventing abuse, maintaining records, and communicating with business contacts.
• Consent, where required for optional cookies, marketing, certain integrations, or specific data uses.
• Legal obligations, when processing is needed for tax, accounting, compliance, law enforcement, or regulatory requirements.
• Vital or public interests, only where applicable under relevant law.

6. AI, Automation, and Customer Content

Some Aramin Technology services may use artificial intelligence, automation, natural language processing, OCR, data extraction, chatbots, agents, or integrations with third-party AI providers.

When you use AI or automation features, inputs and outputs may include prompts, instructions, messages, documents, images, files, database records, metadata, or generated responses. We process this information to provide the requested feature, operate the workflow, maintain security, troubleshoot errors, and improve service reliability.

• Do not submit sensitive personal information, confidential business data, health data, government IDs, financial data, passwords, secrets, or regulated data unless the relevant service and contract explicitly allow it.
• We may use third-party infrastructure, model providers, hosting providers, or API services to process AI and automation requests.
• We do not intentionally use customer content to train public foundation models unless the customer has clearly agreed, enabled a feature that permits it, or the data has been aggregated or de-identified in a way that no longer identifies a person or customer.
• Customers using our tools to automate messages, support, sales, hiring, operations, or decision workflows are responsible for reviewing outputs and complying with laws that apply to their use case.

7. Sharing and Service Providers

We do not sell personal information as a standalone business. We may share information when needed to operate services, comply with law, or protect rights.

We may share information with:

• Hosting, cloud infrastructure, database, storage, backup, CDN, domain, and security providers.
• Payment processors, accounting providers, invoicing tools, and tax compliance providers.
• Email, messaging, notification, CRM, helpdesk, analytics, monitoring, and logging providers.
• AI model providers, automation providers, API partners, and integration services used to deliver requested features.
• Professional advisers, such as lawyers, accountants, auditors, insurers, and consultants.
• Authorities, regulators, courts, or law enforcement where required by law or where disclosure is reasonably necessary to protect rights, safety, security, or prevent fraud.
• Business transfer parties if we are involved in a merger, acquisition, financing, reorganization, asset sale, or similar business transaction.

When we use service providers, we require them to process personal information only for permitted purposes and to apply appropriate confidentiality and security safeguards.

8. Cookies and Similar Technologies

Our websites and products may use cookies, local storage, pixels, device identifiers, and similar technologies to keep services working, remember preferences, secure sessions, analyze usage, and improve performance.

Some cookies are necessary for the service to function. Optional analytics or marketing cookies may be subject to consent requirements depending on your location and the service you use. You can usually control cookies through your browser settings, but disabling certain cookies may affect product functionality.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

Retention periods depend on the type of data, the service, contract terms, legal requirements, security needs, backup cycles, dispute resolution, and operational requirements. In general:

• Account and billing records may be kept while your account is active and for a reasonable period afterward for tax, accounting, audit, and legal purposes.
• Customer content may be retained according to the product settings, customer contract, deletion request, or backup lifecycle.
• Security logs and technical records may be retained for a limited period to protect systems, investigate incidents, and maintain service integrity.
• Marketing records may be retained until you unsubscribe or ask us to delete them, unless we need to keep suppression records to honor your opt-out.

10. Security

We use reasonable technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

These safeguards may include access controls, authentication, encryption in transit, secure configuration, monitoring, backups, logging, least-privilege permissions, and internal security practices. No online service can guarantee absolute security, so users and customers must also protect their credentials, devices, integrations, API keys, and account permissions.

11. Your Privacy Rights

Depending on your location and the applicable law, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how your personal information is processed.

If your information is processed by us on behalf of one of our customers, we may direct your request to that customer because they control the data. We will support customers with privacy requests as required by contract and applicable law.

To exercise privacy rights, contact us using the details at the end of this policy. We may need to verify your identity and may refuse or limit requests where permitted by law, such as where information must be retained for legal, security, or contractual reasons.

12. Children's Privacy

Our services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under the age required by applicable law. If you believe a child has provided personal information to us, please contact us so we can review and take appropriate action.

13. International Transfers

Aramin Technology may operate globally and may process information in countries other than your country of residence. These countries may have data protection laws that differ from those in your location.

Where required, we use appropriate safeguards for international transfers, such as contractual commitments, data processing agreements, security controls, and transfer mechanisms recognized by applicable privacy laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, security practices, or business operations. When we make changes, we will update the effective date above. If changes are material, we may provide additional notice through the service, website, email, or other appropriate channels.

15. Contact Us

If you have questions about this Privacy Policy, privacy requests, data processing, or security, contact Aramin Technology through the relevant product support channel or our contact page.