Privacy Policy

ArdaBot, Inc. (“ArdaBot,” “we,” “us,” or “our”) is a Delaware C corporation. This Privacy Policy covers two distinct products: the account-based Arda website, mobile application, command-line interface, and related AI-agent services (collectively, the “Arda Service”), and the Arda Translate iOS app. Their data practices are different and are described separately below.

The account, billing, cloud AI, messaging, and agent-conversation practices described for the Arda Service do not apply to Arda Translate. By accessing or using either product, you agree to the applicable portions of this Privacy Policy.

Arda Translate (iOS App)

Arda Translate is a separate, on-device conversation translator. It does not require an account, subscription, or payment; it has no ads or tracking; and it is designed not to collect conversation audio or transcript text.

On-device speech and translation

When you hold a push-to-talk button, Arda Translate uses the microphone and Apple's on-device speech-recognition technology to create text on your device. Translation is performed by an on-device model. Arda Translate does not upload conversation audio, recognized speech, or translated text to ArdaBot or to a cloud translation service.

Model and language downloads

Initial setup downloads the translation model from ArdaBot's content-delivery infrastructure. Apple may also download speech-recognition assets for languages you select. Model hosts and content-delivery providers necessarily receive ordinary connection information, such as an IP address, User-Agent, requested file, and request time, to deliver and secure those downloads. The download requests do not contain conversation audio or transcript text. ArdaBot does not use this connection information for advertising or to build user profiles.

Information stored on your device

The app stores the downloaded translation model, selected languages, app settings, and transient conversation state locally on your device. Deleting Arda Translate removes data stored in the app's container. iOS may manage Apple-provided speech assets separately through system storage.

Support

If you contact support, we receive the information you choose to include in your message. Do not include private conversation content unless it is necessary for us to help you. Support communications are handled as described in the rights, retention, and contact sections below.

1. Arda Service Information We Collect

a. Information You Provide

• Account information: phone number, email address, or Telegram username when you sign up or link an authentication method.
• Payment information: billing details processed through Stripe. We do not store your full credit card number on our servers.
• Conversations: messages you send to and receive from your AI agent instance.
• Support communications: information you provide when contacting us for help.

b. Information Collected Automatically

• Usage data: instance activity timestamps, feature usage, and interaction patterns with the Service.
• Device and connection data: IP address, browser type, operating system, and device identifiers.
• Log data: server logs including request timestamps, endpoints accessed, and error information.

c. Information from Third Parties

• Authentication providers: identity information from Privy (our authentication provider) when you sign in via email, phone, or passkey.
• Messaging platforms: message metadata from Twilio (SMS) and Telegram when you interact with your agent through those channels.

2. How We Use Arda Service Information

We use Arda Service information to:

• Provide, maintain, and improve the Service.
• Authenticate your identity and manage your account.
• Process payments and manage your billing and credits.
• Deliver messages between you and your AI agent instance across channels (web, SMS, Telegram, CLI).
• Provision and manage your agent infrastructure (Kubernetes pods).
• Monitor for abuse, enforce rate limits, and ensure service security.
• Send transactional communications (e.g., account verification, billing receipts).
• Respond to your support requests.
• Comply with legal obligations.

3. How We Protect Your Information

We implement industry-standard security measures to protect your data, including:

• Encryption at rest: sensitive personal information (such as phone numbers) is encrypted using AES-256-GCM before storage.
• Blind indexing: we use HMAC-SHA-256 blind indexes for database lookups on encrypted fields, so plaintext values are never stored in queryable form.
• Encryption in transit: all communications between you and the Service are encrypted using TLS.
• Infrastructure isolation: each user’s AI agent runs in an isolated Kubernetes pod with dedicated storage.
• Pod data encryption at rest: all data stored within your pod environment is encrypted at rest.

4. Arda Service Third-Party Providers

We share information with the following categories of service providers who process data on our behalf:

• Authentication: Privy — manages user sign-in and identity verification.
• Payments: Stripe — processes payment transactions and manages subscriptions.
• Messaging: Twilio — delivers SMS messages; Telegram — delivers Telegram messages.
• AI inference: Vercel — provides the AI gateway that routes inference requests; Anthropic — provides the large language models that power your AI agent. Messages you send to your agent may be transmitted to these providers for processing. Each provider’s own privacy policy governs their handling of this data.
• Infrastructure: DigitalOcean — hosts our servers, databases, and pod environments. All pod data is encrypted at rest.

These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

5. Arda Service Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Conversation data and any files you store are kept within your isolated agent pod (encrypted at rest) and persist as long as your instance exists. If you delete your account, we will delete or anonymize your personal information within 30 days, including destruction of your pod and its associated storage, except where retention is required by law or for legitimate business purposes (such as billing records).

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Export your data in a portable format.
• Opt out of certain data processing activities.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@ardabot.ai. We will respond to your request within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell your personal information.

8. International Data Transfers

Our Arda Service servers are located in the United States. If you access the Arda Service from outside the United States, your information will be transferred to and processed in the United States. Arda Translate conversations are processed on your device; only model-download connection information and support communications, if any, are processed by remote providers as described above.

9. Children’s Privacy

The account-based Arda Service is not intended for individuals under the age of 18. Arda Translate is not directed to children under 13 and does not create accounts or knowingly collect conversation content. If we learn that we have collected personal information from a child, we will delete it as required by applicable law.

10. Cookies and Similar Technologies

The Arda Service uses essential cookies to maintain your authentication session (e.g., the arda_app_jwt cookie). We do not use third-party advertising or tracking cookies. Arda Translate does not use web cookies, advertising identifiers, or tracking technologies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new effective date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: