Aries Reach separates our responsibilities from yours, explains how Personal Data moves through the service and turns privacy principles into governed enterprise practice.
Our legal role depends on whose purpose is being served. The distinction determines who answers a request, sets retention and provides the primary notice.
We determine why and how Personal Data is used for websites, demos, sales, account administration, billing coordination, service security, support and our legal obligations.
An enterprise customer determines the purpose for stakeholder feedback, recordings, claims and operational context. Aries AI processes that data under the Agreement, documented instructions and DPA.
The exact data depends on the Customer’s configuration, channels, integrations and deployment model. Collection should remain relevant to a defined and lawful purpose.
Business contact details, account identifiers, roles, permissions and authentication information.
Organization, subscription, billing coordination, support history and commercial correspondence.
Text, voice, transcripts, ratings, claims, topics, sentiment, attachments and Customer-configured context.
IP address, browser and device information, session identifiers, activity logs and diagnostic events.
Billing status, invoice details, transaction references and limited payment metadata.
Information shared through forms, meetings, support tickets, email, surveys and events.
Identifiers and records received from Customer-approved CRM, ticketing, identity and connected systems.
Depending on the activity, Aries AI relies on contract, steps requested before contract, legal obligations, consent where required, or legitimate interests assessed against individual rights. For Customer Data, the Customer determines the applicable lawful basis.
From users, prospective customers, support contacts and stakeholders.
From authorized administrators, integrations and Customer-configured journeys.
From browsers, devices, security logs, feature use and diagnostics.
From partners, service providers and lawful sources where relevant.
Depending on configuration, Reach may perform transcription, language detection, translation, classification, topic and sentiment analysis, summarization, materiality indicators, routing recommendations, trend detection and report generation.
Privacy is reflected in how Reach collects, processes, secures, shares, retains and deletes Personal Data.
Personal Data is used for stated, legitimate purposes and Customer instructions.
Collection and access are limited to what is relevant for the configured service.
Aries AI does not sell Personal Data for monetary consideration.
Customer Data is not used for cross-context behavioral advertising.
AI outputs support human-led decisions and require appropriate review.
Technical and organizational measures are aligned to risk and deployment.
Retention and deletion follow purpose, contract, configuration and legal requirements.
Verified access, correction, deletion and other qualifying requests are supported.
Aries AI may disclose Personal Data only as reasonably necessary for the purposes in the policy. International transfers follow the deployment design, Agreement and applicable law, using an approved safeguard where required.
Rights depend on location and applicable law. We may request information reasonably necessary to verify identity, authority and request scope.
Email a verified privacy requestReach is not directed to children for independent account creation. A Customer using Reach in a context involving minors is responsible for a lawful basis, appropriate notices, required authorization, limited collection and suitable safeguards.
Customer-selected identity, CRM, ticketing, messaging, analytics or payment services may process data under their own terms. Aries AI applies the Agreement and DPA where it operates an integration as the Customer’s processor.
EEA and UK individuals may contact a competent supervisory authority. California and comparable US state rights may include access, correction, deletion, portability and qualifying opt-outs.
The policy reflects core GDPR transparency, purpose-limitation, minimization, storage-limitation, security and accountability principles, while recognizing that exact obligations depend on jurisdiction, processing role and context.
Download the enterprise policy, review controller–processor terms or contact Aries AI about a verified request.
