1. Introduction
Arfiti ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including:
- Email address when you join our waitlist
- Company name and role (optional)
- Account information when you create an account
- Financial data you input into the system
- Communications with us (support requests, emails)
2.2 Automatically Collected Information
When you use our services, we automatically collect:
- Log data (IP address, browser type, pages visited, time spent)
- Device information (device type, operating system)
- Usage data (features used, actions taken)
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send you technical notices, updates, and support messages
- Respond to your comments and questions
- Send marketing communications (with your consent)
- Monitor and analyze trends, usage, and activities
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
4. Data Security
We implement appropriate technical and organizational security measures to protect your information:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest
- Access Controls: Role-based access control (RBAC) with entity-level permissions
- Audit Logging: 7-year immutable audit trail of all operations
- Infrastructure: SOC 2 Type II compliant hosting and security practices
- Database Security: Multi-tenant architecture with schema isolation
5. Data Sharing and Disclosure
We may share your information in the following circumstances:
- With your consent: When you authorize us to share specific information
- Service providers: Third-party vendors who perform services on our behalf (hosting, analytics, email delivery)
- Business transfers: In connection with a merger, acquisition, or sale of assets
- Legal requirements: When required by law or to protect our rights
- Aggregated data: Non-personally identifiable information for analytics and research
We will never sell your personal information to third parties.
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Financial data: 7 years (accounting standards and tax requirements)
- Audit logs: 7 years (SOX compliance)
- Account data: Duration of account plus 1 year
- Waitlist data: Until launch or upon request for deletion
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your information (subject to retention requirements)
- Portability: Request export of your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications
- Object: Object to certain processing of your information
To exercise these rights, contact us at privacy@arfiti.com.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and settings
- Understand how you use our services
- Improve our website performance
- Deliver relevant content and advertising
You can control cookies through your browser settings. Disabling cookies may limit certain features.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: