Privacy Policy

Client Data Processed by AI Agents & Margin Alerts

When configuring custom agents or plumbing workflows, our systems interact with your designated business platforms strictly on a read-only or authorized action basis:

• Platforms Accessed: Project management tools (e.g., Function Point), accounting systems (e.g., QuickBooks Online), CRMs (e.g., HubSpot, Salesforce), and workforce intelligence platforms (e.g., TitaPro, DeskTrack).
• What the Agents Read: Project fee budgets, hours logged, employee cost rates, job milestone status, client contact details, and support ticket metadata necessary to compute margin health or route customer requests.
• Where Data is Stored: All client data resides within your own primary SaaS environments or dedicated private cloud infrastructure (e.g., your AWS/GCP tenancy or your own Make/n8n instance). We do not store financial records or client databases on public or unencrypted external servers.
• Who Sees It: Only authorized engineering personnel with active NDAs assigned to your project rollout see credentials. We never train foundation or public LLM models on your proprietary business numbers or customer data.
• How Access is Revoked: Access is provisioned via scoped API tokens or OAuth keys. You retain unilateral control to revoke API access directly in your Function Point, QuickBooks, or CRM settings at any time, instantly cutting all agent pipeline connections.

Sub-Processors & Technology Partners

To deliver voice agents, automated workflows, and front desk infrastructure, we partner with industry-leading enterprise providers under strict confidentiality:

• Voice Engine & Speech Synthesis: Synthflow AI, ElevenLabs, and Twilio (telephony carrier routing).
• Workflow Orchestration & Middleware: Make.com, n8n, and secure webhooks configured in client-isolated environments.
• Infrastructure & Operations: Amazon Web Services (AWS), Google Cloud Platform, and enterprise SMTP mail servers.

Data Retention

Website inquiries and lead records are retained for up to 24 months to manage ongoing commercial discussions, after which they are archived or permanently purged. Active client configuration records, prompt instructions, and project backups are retained for the duration of the engagement and securely deleted upon written request within 30 days of contract conclusion, excluding records mandated by US tax and corporate reporting statutes.

Your Privacy Rights (US, UK & EU)

Whether you are protected under the California Consumer Privacy Act (CCPA), the UK Data Protection Act / UK GDPR, or the European General Data Protection Regulation (EU GDPR), you hold clear legal rights regarding your personal information:

• Right to Access & Portability: You may request a complete export of personal information held about you.
• Right to Rectification & Erasure: You can request correction of inaccurate data or permanent deletion of your contact records ("Right to be Forgotten").
• Right to Object & Withdraw Consent: You have the absolute right to opt out of marketing communications or withdraw consent at any time without penalty.

To exercise any of these rights, please contact our data compliance desk at business.arya@aryavratinfotech.com. We respond to all verified statutory requests within 30 calendar days.