Data Usage Policy

This Policy explains how data flows through the platform, who can access it, how it is protected, and what happens to it when an engagement ends. It is intended to give ARI customers a clear, practical view of how their information — and the information of their own end users — is used.

Two broad categories of data flow through the platform:

• ARI account data. Information ARI collects directly from customers to open, operate, and support their account — contact details, business details, brand assets, plan information, and billing records.
• End-user / customer data.Information that flows through the portals, websites, and apps ARI builds for its customers — such as the customer's own clients or members signing up, booking services, submitting forms, sending messages, or making payments.

The ARI customer owns and controls the data belonging to its own end users. ARI processes that data on the customer's behalf strictly to provide the Services. ARI does not use end-user data for its own independent marketing purposes.

Where applicable law uses controller / processor (or business / service provider) terminology, the ARI customer is the controller / business of its end-user data, and ARI acts as the processor / service provider.

Data is stored in managed, access-controlled cloud infrastructure. We use reasonable safeguards, including encryption in transit, role-based access controls, authentication requirements, activity logging, and regular platform updates. No system is perfectly secure, but we work continuously to protect the data entrusted to us.

The following parties may access data within an account:

• The account owner and any staff members the owner has invited, according to the roles the owner assigns.
• ARI administrators, on a limited basis, to build, maintain, troubleshoot, and support the account.
• Vetted service providers that operate underlying infrastructure, only to the extent required to run the platform.

ARI administrative access is limited to what is reasonably necessary and is subject to internal access controls.

Data may be used to deliver the Services (for example, to display bookings, route messages, generate invoices), to provide support, and to keep the platform reliable and secure. Aggregated and de-identified data may be used to improve the platform overall. We do not sell personal information.

Payment processing is handled through a secure third-party payment provider. ARI does not store full payment card numbers on its own servers. Limited transaction metadata (such as amounts, dates, and status) is retained for billing, accounting, and support purposes.

Customers may request an export of their data at any time. Upon account deactivation, data is retained in a preserved state so the account can be restored if the customer returns. Upon full termination, or upon a written deletion request, ARI will delete customer and end-user data within a reasonable timeframe, except where retention is required by law or for legitimate business records such as billing history.

Customers are responsible for handling their own end users' data lawfully. This includes providing appropriate privacy notices to their end users, obtaining any consents required in their jurisdiction, honoring end-user rights requests, and using the platform only for lawful purposes.

Customers are also responsible for managing access within their account — including which staff members they invite, what roles those staff members have, and removing access when someone leaves.

We may update this Policy from time to time. When we do, we will update the "Last updated" date above and, where appropriate, notify customers by email or through the portal.

A Rich Innovations, LLC
1363 Cypress Ave, Suite B
Melbourne, FL 32935
Email: april@arichinnovations.com
Phone: (407) 349-3979