Privacy Policy

1. Who We Are

ARIA AI (“ARIA”, “we”, “us”) provides an AI-powered communication platform that helps businesses respond to clients on WhatsApp, Instagram, and Facebook, schedule appointments, and send reminders. This Privacy Policy explains what data we collect and how we use it.

Contact: yedichfama@gmail.com

2. Information We Collect

From business owners (our customers):

• Account info: name, email, password (hashed), phone, business name, industry
• Business config: services, prices, hours, booking URL, FAQs, AI tone preferences
• Payment info: handled by Stripe (we never see card numbers)
• Integration tokens: WhatsApp / Instagram / Facebook access tokens you authorize

From end-customers messaging your business:

• Name, phone number, email (if shared in chat)
• Message content (to generate AI replies and schedule appointments)
• Platform IDs (WhatsApp / Instagram / Facebook user identifiers)

3. How We Use Information

• Provide AI replies on your behalf to your clients
• Schedule and send appointment reminders
• Process payments and manage subscriptions
• Send transactional emails (welcome, reminders, password reset)
• Improve our AI quality (we do not sell your data)
• Comply with legal obligations

4. Third-Party Services

We use the following processors to deliver our service:

• Stripe — payment processing
• Anthropic — AI message generation (Claude API)
• Twilio — WhatsApp messaging
• Meta (Facebook & Instagram) — DM messaging
• Resend — transactional email
• Vercel — hosting
• Neon — database hosting

5. Data Retention

We retain account and conversation data for as long as your account is active. After cancellation, we keep data for 90 days for backup purposes, then permanently delete it. You may request immediate deletion at any time.

6. Your Rights (GDPR / CCPA)

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Opt out of marketing emails

Email us at yedichfama@gmail.com to exercise any of these rights.

7. Cookies

We use essential cookies for authentication (session tokens) and language preference. We do not use advertising or tracking cookies.

8. Security

All data is transmitted over HTTPS. Passwords are hashed with bcrypt. Database access is restricted to authenticated services. We follow industry-standard security practices.

9. Children's Privacy

ARIA is not intended for users under 16. We do not knowingly collect data from minors.

10. Changes

We may update this policy. We'll notify customers by email of significant changes at least 30 days before they take effect.

11. Contact

Questions about this policy? Email yedichfama@gmail.com.