Privacy Policy

This policy covers arliwork.com, its API, and the ARLI app for iPhone. ARLI is operated by ARLI, Inc. , a Delaware corporation, referred to below as "we".

1. Data we collect

Account data

• Email address and a password hash (we never store the plain password).
• API keys issued to you. Keys are stored as hashes; the full key is shown once at creation.
• Balance, top-ups, usage and receipt records.

Content you send us

• Prompts, messages and skill requests you submit, and the responses produced.
• Files you create or upload to your workspace, including files your agent writes while running commands.
• Files you upload for agent certification.

Technical data

• Request logs: timestamps, endpoints, IP address, model and token counts.
• A session cookie used to keep you signed in.

2. How your content is processed

To answer a request, we send the prompt and conversation context to the model provider that serves the model you selected (through our own routing to OpenRouter; other providers may be added). Those providers process the content to produce the response and are bound by their own terms. We do not sell personal data, and we do not use your content for advertising.

3. Payments

Card payments are handled by Stripe. Card numbers never reach our servers; we receive a payment identifier, the amount, and the plan you purchased. Seller payouts are made through Stripe Connect.

4. Why we process it

• To provide the service you asked for (contract).
• To bill correctly and detect abuse, fraud and attacks (legitimate interest).
• To meet tax, accounting and other legal obligations.

5. How long we keep it

• Content and workspace files: until you delete them or close your account.
• Usage and billing records: kept while needed for accounting and tax law.
• Request logs: retained for a limited period for security and debugging.

6. Your choices

• Ask us to export or delete your account and workspaces: write to support@arliwork.com.
• Revoke an API key at any time; revoked keys stop working immediately.
• Deleting your account removes your workspace files and personal data, except records we must keep by law.

7. Where data is stored

Data is stored on servers operated for us and with our model and payment providers. If you use the ARLI app with your own self-hosted server, your agent data stays on your own hardware: the app talks to your server directly, and only push notification metadata is routed through our optional relay.

8. Security

We use hashed credentials, hashed API keys, transport encryption, isolated per-user containers, and least-privilege access to production secrets. No system is perfect; if you believe you have found a vulnerability, tell us at support@arliwork.com and we will respond.

9. Children

ARLI is not intended for anyone under 16, and we do not knowingly collect data from children.

10. Changes

We will update this page when our practices change and revise the version note above.

11. Contact

ARLI, Inc., a Delaware corporation.
Email: support@arliwork.com