Privacy Policy

1. Overview

This Privacy Policy applies to the ARF public sandbox API, demo website, and pilot signup process. The core engine is proprietary and access‑controlled – this policy does not apply to data processed under separate written agreements. We do not sell your personal data.

2. Data We Collect

Account Information

• Email address
• Account credentials

API and Usage Data (sandbox)

• API keys
• Mock evaluation requests and responses
• Timestamps, IP addresses, endpoints

Technical Data

• Browser and device information
• Log files

Payment Data

• None – paid tiers are handled via separate written agreements, not through this site.

3. How We Collect Data

Through signup forms, API usage, cookies, and analytics (Vercel Analytics).

4. Purpose of Processing

To provide the sandbox, enforce rate limits, improve the service, and send critical updates.

5. Legal Basis (GDPR)

Contractual necessity (sandbox), legitimate interests (security, improvement), and consent (optional newsletters).

6. Data Sharing

We share data with:

• Vercel – hosting and analytics
• Hugging Face – demo hosting (mock data only)
• GitHub – repository links
• Slack – community (no data shared unless you click)

7. Data Retention

• Sandbox usage logs: 30 days
• Pilot signup data: up to 12 months (if you later enter a written agreement)
• Account data: retained while your account is active
• API keys: retained until you request deletion

8. Your Rights

Access, correction, deletion, portability, objection. Contact juan@arf-ai.com.

9. Security Measures

HTTPS encryption, access controls, logging.

10. Cookies

Essential cookies for authentication and analytics. No advertising cookies.

11. International Transfers

Data may be processed in the US; we rely on Standard Contractual Clauses.

12. Children’s Privacy

Not intended for under 16.

13. Changes to This Policy

We may update it; continued use constitutes acceptance.

14. Contact

juan@arf-ai.com