Privacy

Arbor privacy notice

Last updated: 2026-05-05

Arbor is operated by Rondanini Publishing Ltd. This notice describes what we collect when you use the service, the reasons for collection, and the routes for data deletion or export. The aim is transparency and brevity.

What we store

Account data. Email address with signup and last-login timestamps. Passwords are not stored — sign-in uses one-time email links (magic links).
Session records. Server-side session entries tracking the browser user-agent and IP at sign-in, used so you can sign out of all devices.
Subscription information. Current plan and status plus Stripe customer / subscription identifiers used for billing. Card details remain with Stripe; we never see them.
Usage ledger. Monthly visibility-check counters and prepaid credit balance, with row-level entries for grants, debits and refunds. Visible on the Billing page.
Company profiles you create. Sector, audience, products, competitors and key terms you enter (or that AI auto-fills from your homepage and you accept). Stored under your account; deleted on account deletion.
Visibility runs. The buyer-intent prompts we generated for your profile, the raw answers Claude or GPT returned, and the analysis output (mentions, citations, sentiment, accuracy risk).
Free-report submissions. Email, company domain and LinkedIn URL submitted via the public free-report form, plus the IP and user-agent of the submission, kept for anti-abuse review and the eventual report payload sent to that email.
Operational logs. Request timing, error traces and webhook receipts kept only as long as needed for reconciliation.

What we don't do

We do not sell your data.
We do not share data with third parties beyond the service-delivery processors listed below.
We do not read your visibility-run inputs or outputs except to operate the automation you asked for.

Third-party processors

Anthropic — Claude models for visibility runs on Pro / Agency / Self-host.
OpenAI — GPT-4o-mini / GPT-4o for Starter visibility runs, free reports and the AI auto-fill profile drafter.
Stripe — subscription checkout and prepaid credit packs.
Brevo — magic-link sign-in, free-report delivery and drift-alert email.
Slack — only when you configure a Slack incoming-webhook URL on a profile for drift alerts. We send to that URL; we do not read from it.
Hosting — cloud infrastructure for the application and its Postgres database.

Your rights (GDPR / CCPA spirit)

Delete. Email privacy@berta.one and we will delete your account and associated data.
Export. Email the same address; we respond within 30 days with a JSON export of profiles, prompt sets, runs and snapshots.
Update. Email is the account key; email privacy@berta.one if you need to migrate to a new address.

Contact

Privacy enquiries: privacy@berta.one. General support: arbor@berta.one.