Arbor privacy notice

What we store

• Account data. Email address with signup and last-login timestamps. Passwords are not stored — sign-in uses one-time email links (magic links).
• Session records. Server-side session entries tracking the browser user-agent and IP at sign-in, used so you can sign out of all devices.
• Subscription information. Current plan and status plus Stripe customer / subscription identifiers used for billing. Card details remain with Stripe; we never see them.
• Usage ledger. Monthly visibility-check counters and prepaid credit balance, with row-level entries for grants, debits and refunds. Visible on the Billing page.
• Company profiles you create. Sector, audience, products, competitors and key terms you enter (or that AI auto-fills from your homepage and you accept). Stored under your account; deleted on account deletion.
• Visibility runs. The buyer-intent prompts we generated for your profile, the raw answers Claude or GPT returned, and the analysis output (mentions, citations, sentiment, accuracy risk).
• Free-report submissions. Email, company domain and LinkedIn URL submitted via the public free-report form, plus the IP and user-agent of the submission, kept for anti-abuse review and the eventual report payload sent to that email.
• Operational logs. Request timing, error traces and webhook receipts kept only as long as needed for reconciliation.

What we don't do

• We do not sell your data.
• We do not share data with third parties beyond the service-delivery processors listed below.
• We do not read your visibility-run inputs or outputs except to operate the automation you asked for.

Third-party processors

• Anthropic — Claude models for visibility runs on Pro / Agency / Self-host.
• OpenAI — GPT-4o-mini / GPT-4o for Starter visibility runs, free reports and the AI auto-fill profile drafter.
• ElevenLabs — only if you choose to open Berta, our optional AI assistant, on a public Arbor page. The text or voice input you provide, generated replies, and technical conversation data are processed by ElevenLabs to deliver the conversation. ElevenLabs may record and store that conversation, as its widget terms describe. The assistant is not connected to your private Arbor account and cannot see your profiles, reports, or billing. Do not provide passwords, payment information, API keys, or confidential client content.
• Stripe — subscription checkout and prepaid credit packs.
• Brevo — magic-link sign-in, free-report delivery and drift-alert email.
• Slack — only when you configure a Slack incoming-webhook URL on a profile for drift alerts. We send to that URL; we do not read from it.
• Hosting — cloud infrastructure for the application and its Postgres database.

Optional measurement and advertising

We ask permission before loading optional Google Analytics and Google Ads tags. Until you choose, campaign parameters from the page address stay in this browser so a sign-in on the same device can keep them. They are stored on our server and sent to Google only if you allow optional tracking. If you allow it, we send a trial-activation event when the 14-day trial entitlement is created, and a purchase event when Stripe confirms the first payment of a cloud subscription. Renewals, credit packs, self-host licences, free reports, failed or abandoned checkouts and Stripe test charges are not sent as that purchase. A refund is sent as a refund, not as another purchase. We do not send your email address or name to Google Analytics. You may reject these tags and still use Arbor. Change your choice at any time with the Tracking preferences control in the lower corner of the page.

Your rights (GDPR / CCPA spirit)

• Delete. Email privacy@berta.one and we will delete your account and associated data.
• Export. Email the same address; we respond within 30 days with a JSON export of profiles, prompt sets, runs and snapshots.
• Update. Email is the account key; email privacy@berta.one if you need to migrate to a new address.

Contact

Privacy enquiries: privacy@berta.one. General support: arbor@berta.one.