Privacy Policy

1. Overview

Arehté is operated by Kiana Stitt, a Tennessee-based sole proprietor ("Arehté," "we," "us," "our"). Arehté provides an AI-assisted business growth and operations platform. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have. By using Arehté, you agree to the practices described here.

This policy is designed to accurately reflect Arehté's actual data practices. We do not claim to collect or process information that the application does not actually use.

2. Information We Collect

Account information: Your name, email address, and role when you create an account.

Business profile data: Information about your business that you enter into the platform - business name, industry, website, products/services, target customers, goals, challenges, brand information, brand assets, and preferences.

Lead and CRM information: Information about prospects and leads you import or manage, including business names, contact details, industry, and notes. You are responsible for ensuring you have the right to store this information.

Uploaded files: Files you upload, including brand assets, logos, reference images, and media for content production. These are stored as file URLs. Reference material may be screened for provenance or similarity context without requiring you to prove ownership merely to use it as inspiration. Generated outputs may be quarantined and screened before they are released as usable assets.

Creator Protection data: Work, portfolio links, public social sources, protected-media inventory, findings, and evidence you add or authorize through Creator Protection are used for your protection workflow. For supported connected accounts such as Instagram Business, AREHTÉ may create a durable protected copy of supported public media so monthly monitoring can continue without scraping the platform or storing your OAuth credential. AREHTÉ does not intentionally place protected work into a shared creative library, use it to train models, or supply it as generation material for other customers. If a protection feature needs an outside processor, we limit that transfer to the protection task being performed.

AI prompts and outputs: The prompts generated by the platform from your business data and the AI-generated content, recommendations, and analysis produced in response.

Outreach information: Outreach messages generated and sent through the platform, including email content, recipients, and delivery status.

Connected-account information: OAuth connection data and basic account information when you connect a third-party service. Connection credentials are managed through Base44's connector infrastructure; Arehté stores connection status and account identifiers and does not ask for your third-party password.

Optional Opportunity Inbox data: If you separately enable Gmail opportunity monitoring, Arehté may process recent sender information, subject lines, dates, message identifiers, and short message snippets to identify potential bookings, quotes, partnerships, usage-rights requests, customer questions, and follow-ups. Arehté does not retain full email bodies for this feature.

Usage information: How you interact with the platform, including pages viewed, actions taken, and feature usage. This helps us improve the Service.

Communications preferences: Your voluntary marketing/value-email opt-in status, consent source and time, selected frequency, optional topic preferences, personalization choice, unsubscribe status, and suppression state. These records help us honor your choices and avoid sending marketing/value emails after you opt out.

Device and browser information: Basic browser and device information, collected automatically when you use the Service.

Analytics: Aggregated and anonymized usage analytics to understand feature adoption and improve the platform.

Payment information: Payment processing is handled by Base44 Payments (powered by Wix). Arehté receives confirmation of payment status and plan information, not your full payment card details.

Support communications: Communications you send to support, including support tickets, conversation transcripts, and any information you provide when requesting help.

Logs: System logs for security, debugging, and audit purposes, including audit logs of significant actions.

Legal acceptance records: Records of your acceptance of our Terms of Service, Privacy Policy, and AI Use & Automation Disclosure, including the version accepted, timestamp, and browser user agent.

3. How We Use Your Information

• To provide and operate the Arehté platform and its features.
• To generate AI-powered content, recommendations, and growth insights for your business.
• Where a connected social provider and the permissions you granted support publishing, to publish content you approved to that connected account on your behalf.
• Where you separately authorize the required Gmail send permission, to send outreach through that connected account only after your approval.
• When separately enabled, to identify and organize potential business opportunities in recent Gmail messages and prepare response text for your review.
• To send necessary service communications about your account, billing, security, requested work, and material service changes.
• If you explicitly opt in, to plan marketing/value emails such as business tips, free resources, educational content, and relevant product updates. If you separately enable personalization, we may use your saved business profile, plan, goals, and stated topic preferences to choose more relevant content. Automated promotional external delivery remains disabled until AREHTÉ completes its launch compliance review and intentionally activates an approved sending workflow.
• To analyze usage patterns and improve our services.
• To maintain security, prevent fraud, and keep audit records.
• To screen certain uploaded or generated images for public-web similarity signals so likely copies or derivatives can be withheld or reviewed before use. This screening does not determine legal copyright ownership, infringement, fair use, or licensing rights.
• To process payments and manage subscriptions.
• To provide customer support.
• To comply with legal obligations.

4. AI Providers

Arehté uses third-party AI model providers to generate content, recommendations, and analysis. When you use AI-powered features, your business data and prompts are sent to these providers to generate responses. The providers process this data as part of providing their AI services.

AREHTÉ does not intentionally use Creator Protection material to train models or generate work for other customers. Creator Protection records are kept separate from generation context unless you deliberately choose to use your own material as a reference for a specific request. Because other AREHTÉ features use third-party model and infrastructure providers, we do not make a broader platform-wide promise about every provider's training or retention practices until those terms are technically and contractually verified. We disclose material processors and limit data sent to the feature being used.

5. Third-Party Integrations

Arehté offers optional integrations with third-party platforms. When you connect a third-party account, you authorize that platform to share access with Arehté through its own OAuth process. We only request the permissions necessary for the features you use.

Current integrations include:

• Google (Gmail): Current app-level access is read-only for supported inbox/opportunity workflows. Sending from a connected Gmail account is available only where the required send permission has been separately authorized for that account and the customer approves the external send.
• Meta / Facebook Pages: Currently connected for approved Page access, engagement/insight retrieval, and Page-post management within the granted scopes.
• Instagram Business: Connected for authorized business-account access within the granted scopes. Creator Protection may use the connected account to build and refresh the customer's protected-media inventory instead of scraping pasted Instagram profile URLs.
• LinkedIn: Currently connected for authorized member profile identity and posting within the granted scopes.
• TikTok: The connector is currently disconnected. Where reconnected, the available integration is limited to profile/statistics/video-list access and does not support publishing.
• Google Search Console: A connector is present, but the currently verified grant does not include Search Console performance-data permission. Search-performance features remain unavailable until the required permission is granted and verified.

Each platform has its own terms and privacy policy. Arehté does not control and is not responsible for how third-party platforms handle your data once published or accessed. You can disconnect any integration at any time.

6. Service Providers and Processors

We use service providers and processors that help us operate Arehté, including:

• Cloud infrastructure and hosting providers.
• AI model providers for content generation and analysis.
• Payment processors (Base44 Payments / Wix).
• Email delivery services.
• Analytics services.
• Authentication services.
• File storage services.
• Google Cloud Vision Web Detection, when production-enabled: for image web-similarity screening. A secure image URL may be sent to Google for matching-image and related web-result analysis. AREHTÉ treats the result as a risk/review signal, not a legal copyright determination.

Each provider is bound by their own obligations regarding data protection. We share only the information necessary to provide the relevant service.

7. Data Sharing

We do not sell your personal information. We share data only as necessary to operate the platform - with the third-party platforms you connect, with service providers that help us run Arehté, and as required by law. We do not share your data for advertising purposes with third parties.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. Certain records - including audit logs, legal acceptance records, and billing records - may be retained after account deletion for security, accounting, fraud prevention, or legal purposes.

Uploaded content: Files you upload are retained while your account is active and may be deleted when you delete the associated content or close your account. Image-rights screening records may retain the screened URL, match counts, source-page references, risk decision, and any rights attestation as security and audit evidence.

AI-generated content: AI outputs are retained as deliverables in your workspace until you delete them or close your account.

OAuth connection data: Connection credentials are managed by the connector platform while an integration is active. Disconnecting revokes Arehté's connection; retention or deletion of provider-side records remains subject to the connector platform and provider policies.

Opportunity Inbox: Saved opportunity records use a 30-day default retention setting and contain a short excerpt rather than the full email. You may disable monitoring, disconnect Gmail, or delete all saved Opportunity Inbox records from the dashboard. Deleting these records does not delete the original email from Gmail.

Audit records: Audit logs and approval records are retained for a reasonable period after account deletion for security and legal evidence purposes.

Communications consent and suppression records: We may retain the minimum record needed to document your consent history and continue honoring an unsubscribe, complaint, hard-bounce, or other suppression after you opt out. This does not authorize future marketing.

9. Your Rights

You can:

• Access and review your personal information through your account settings.
• Correct inaccurate information by updating your profile.
• Request deletion of your account and associated data.
• Disconnect any third-party integration at any time.
• Opt out of marketing/value emails at any time using the unsubscribe link in those messages or your dashboard email preferences. Necessary service communications are managed separately.

To request account deletion, use Privacy & Security in your dashboard or visit /account-deletion for a public deletion-request route that remains available without the app installed. We will verify and process your request within a reasonable period. Certain records - including audit logs, legal acceptance records, and billing records - may be retained after account deletion for security, accounting, fraud prevention, or legal purposes, as described in Section 8. We will confirm receipt of your request and provide a status update when the process is complete.

10. Security

We take reasonable measures to protect your data, including encrypted transmission (TLS), access controls, row-level security to isolate customer data, and admin-only access to sensitive operations. No system is perfectly secure, and we cannot guarantee absolute security of your information. See our Security & Data Handling Statement for more details.

11. Cookies and Analytics

Arehté uses essential cookies and similar technologies to maintain your session and provide the Service. We use Base44's built-in platform analytics to understand usage patterns and improve the platform. The current application does not use third-party advertising or analytics trackers (such as Google Analytics, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, or Microsoft Clarity). You can manage cookie preferences through your browser settings.

12. Children's Privacy

Arehté is a business platform and is not intended for use by individuals under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us.

13. International Processing

Your information may be processed in countries other than your own, including the United States, where our servers and service providers are located. By using Arehté, you consent to this international processing. We take reasonable steps to ensure appropriate safeguards are in place for international data transfers.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a revised date and, where appropriate, by email or in-app notification.

15. Contact

If you have questions about this Privacy Policy or your data, please contact us through the in-app support assistant or support channels. Arehté is operated by Kiana Stitt in Tennessee.