Privacy Policy

Arithmis, LLC ("Arithmis," "we," "our," or "us") operates the Arithmis CPG operating system platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide directly:

• Account registration information (name, email address, password)
• Brand and organization information you enter into the platform
• Business data you upload or create (purchase orders, invoices, production records, inventory, deductions, and similar operational data)
• Application and contact form submissions
• Communications with us via email or support channels

Information collected automatically:

• Log data (IP address, browser type, pages visited, timestamps)
• Usage data (features used, actions taken within the platform)
• Device information (operating system, browser version)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate users and secure accounts
• Process and fulfill your requests within the platform
• Send transactional communications (account confirmations, security alerts)
• Respond to inquiries and provide support
• Analyze usage patterns to improve platform functionality
• Comply with legal obligations

3. Your Business Data

Your data is yours. All business data you enter into Arithmis — purchase orders, invoices, deductions, inventory, production records, and all other operational data — belongs to your organization. We do not sell, share, or use your business data for any purpose other than providing you the Service.

No AI training on your data. Your business data is never used to train, fine-tune, or improve any artificial intelligence or machine learning model, including the AI features within Arithmis.

No staff access. Arithmis staff do not access your business data except when you explicitly request support and provide consent, or when required by law.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers: We use third-party providers (including Supabase for database infrastructure, and Stripe for payment processing) who process data on our behalf under strict confidentiality obligations.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and subject to a different privacy policy.
• With your consent: We may share information in other circumstances with your explicit consent.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and row-level security controls that ensure each organization's data is logically isolated from other organizations. We are actively pursuing SOC 2 Type II certification.

No method of transmission over the internet or electronic storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal or compliance reasons. Your business data will be deleted within 30 days of account closure upon request.

7. Your Rights

Depending on your location, you may have the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your personal information
• Portability: request your data in a machine-readable format
• Objection: object to certain types of processing

To exercise these rights, contact us at privacy@arithmis.org.

8. Cookies

We use essential session cookies to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date, and where appropriate, by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Arithmis, LLC
privacy@arithmis.org