Privacy Policy

Information we collect

We collect the following categories of information:

• Account & contact details — name, work email, company, and role when you request a demo, become a design partner, or create an account.
• Job application details — name, email, answers about office attendance and visa sponsorship, profile or portfolio link, note, and any resume you upload when you apply for a role.
• Connected account data — when you authorize Arda to work on a client account, we access the CMS content, analytics, search, and reporting data needed to perform audits, prepare fixes, and generate reports.
• Usage data — how you interact with our website and product, including log data, device and browser information, and approximate location derived from IP address.
• Cookies — small files used to keep you signed in and to understand aggregate usage. See “Cookies” below.

How we use information

• To provide, operate, and improve the Arda service.
• To perform the delivery work you request on connected accounts, subject to your approval.
• To communicate with you about your account, demos, support, and product updates.
• To review job applications and communicate with candidates.
• To secure the service, prevent abuse, and meet legal obligations.

We do not sell your personal information, and we do not use your connected account data to train third-party AI models.

The code, content, and other work Arda generates for you belongs to you, not to us; our Terms & Conditions set out that ownership in full. We use that work only to provide, maintain, and secure the service for you.

How we share information

We share information only as needed to run the service:

• Service providers — hosting, infrastructure, email, CRM, and analytics vendors, and the AI model providers that power the service, which process data on our behalf under contract.
• Integrations you authorize — the CMS, analytics, and reporting tools you connect, only as directed by you.
• Legal & safety — when required by law or to protect the rights, property, or safety of Arda, our customers, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

Data retention

We keep personal and account data for as long as your account is active or as needed to provide the service, then delete or de-identify it within a reasonable period, unless a longer retention is required by law. You can ask us to delete your account data at any time by emailing hello@ardainc.com.

We keep application details while reviewing your candidacy and as needed for hiring records or legal obligations, then delete them. You can ask us about or request deletion of your application by emailing hello@ardainc.com.

Security

We use administrative, technical, and organizational safeguards designed to protect your information, including:

• Encryption of data in transit.
• Access to connected accounts only through the permissions you grant. You can revoke that access at any time, from the connected platform or by contacting us.
• An approval step before any change reaches a connected account, and a record of the changes you approve.
• Access to customer data limited to the team members who need it to provide and support the service.

If we become aware of a security incident that affects your personal information, we will notify you without undue delay and as required by law. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If you believe you have found a security vulnerability in Arda, please report it to hello@ardainc.com with enough detail for us to reproduce it. We ask that you give us a reasonable time to fix the issue before disclosing it publicly, and that you do not access or change other customers’ data while testing.

International transfers

Arda is based in the United States. We process information in the United States and in the other countries where our service providers operate. Where the law requires it, we put appropriate safeguards in place for these transfers, such as the European Commission’s Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at hello@ardainc.com.

Cookies

We use essential cookies to run the site and product. These keep the site working, remember your theme, store your cookie choice, and record the country your visit came from so we know which privacy rules apply to you. They cannot be turned off.

Beyond those, we use two optional categories, and you can accept one without the other. Analytics cookies (Google Analytics and PostHog) tell us which pages people read and where they leave. Marketing cookies (Meta Pixel, Apollo and Gojiberry) let us measure our ad campaigns and see which companies visit the site.

If you are in the EEA, the UK, or Switzerland, none of the optional cookies load until you accept them. Elsewhere they load by default, and you can turn them off at any time. We also honour the Global Privacy Control signal: if your browser sends it, we treat that as a refusal of all optional cookies and never ask.

You can change your choice whenever you like through the “Cookie preferences” link in the footer of any page. You can also control cookies through your browser settings, though disabling some may affect how the site works.

Children

Arda is a business service and is not directed to children under 16. We do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

Contact us

Questions about this policy or your data? Reach us at hello@ardainc.com.