Privacy Policy

AridLogic, a division of AliJede Solutions LLC (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect through the AridLogic website at aridlogic.com, our invite-only client portal at portal.aridlogic.com, and related services, how we use it, and the choices you have. AliJede Solutions LLC is the legal entity responsible for these services. For questions, contact us at inquire@aridlogic.com.

This policy is provided for transparency and operational consistency. It is not a substitute for legal advice. If you need guidance for your specific situation, consult a qualified attorney.

Scope

This policy applies to information collected through our public marketing website (including contact and audit request forms, Stripe Checkout or invoice payments, and standard web technologies described below) and through our authenticated client portal at portal.aridlogic.com for invited clients. Authorized AridLogic staff use separate internal tools to operate the portal on your behalf; those tools are not open to the public.

The client portal is a convenience layer for project collaboration — deliverable reviews, document sharing, billing visibility, and in-portal messaging. Paid client engagements, deliverables, payment terms, and intellectual property are governed by your statement of work or other signed agreement with us, not solely by this policy or portal features.

Separate agreements govern paid client engagements and are provided at contract time.

Information we collect

Information you provide

We collect information you voluntarily submit, such as:

• Contact requests: name, email address, company name (optional), package interest, budget range (optional), and project details.
• Website audit requests: name, email address, website URL, and goals or context for the audit.
• Email and calendar correspondence: content of messages you send to us and related metadata (for example, your email address and timestamps).
• Payments: when you pay through Stripe Checkout or a Stripe invoice link, payment and billing details are processed by Stripe. We receive limited transaction metadata (for example, name, email, amount paid, and payment status) — not full card numbers.

Forms on this site are designed for business inquiries. Please do not submit sensitive categories of information (such as government IDs, health data, or payment card numbers) unless we explicitly request them through a secure channel as part of an engagement.

Client portal (authenticated users)

If you are invited to the client portal, we collect and process additional information to operate your account and project workspace, including:

• Account and authentication: email address, display name, profile information you provide, authentication events, and — if you choose Google sign-in — a Google account identifier supplied by Google OAuth. Access is invite-only; we do not offer open public registration on the portal.
• Project and deliverable data: project names, phases, milestone status, deliverable titles and versions, approval or revision requests, comments you post, and @mentions that trigger email notifications to other participants on the project.
• Files and document vault: deliverable files we publish for your review, and files you upload to the document vault (for example, PDF, PNG, JPG, SVG, or ZIP within published size limits). Files are stored in Supabase Storage with access controls tied to your project.
• AI assistant messages: chat messages you send in the portal AI assistant, stored per project, together with metadata needed to operate the feature (for example, timestamps and project association).
• Billing visibility: invoice metadata displayed in the portal (for example, invoice number, amount due, and status). When you manage payment methods or complete certain billing actions, you may be redirected to Stripe Customer Portal, where Stripe collects payment information under its own privacy policy.

Do not store production passwords, API secrets, or other credentials in the portal document vault unless we explicitly agree to a secure process as part of your engagement. We recommend sharing credentials through a dedicated password manager when needed.

Information collected automatically

When you visit our site, we and our service providers may collect certain technical information automatically, such as IP address, device type, browser type, general location derived from IP, pages viewed, referring URLs, and dates and times of access. We use PostHog for product analytics (for example, page views and form submission events in aggregate) and may use Vercel Analytics for performance metrics. We may use cookies and similar technologies as described in our Cookie Policy.

When you use the client portal, we similarly collect technical and usage information (for example, authentication events, pages viewed, deliverable interactions, and error diagnostics) through PostHog and Sentry to secure, operate, and improve the portal experience.

Staff access, impersonation, and audit logging

To operate, secure, and support the client portal, authorized AridLogic staff may access client accounts and project data through internal administrative tools. Access is limited to staff who need it for their role and is subject to multi-factor authentication and session controls.

View-as-client (impersonation) for support

In limited circumstances — for example, to reproduce a display issue or walk through portal state with you on a call — a senior authorized staff member may use a “view as client” feature that opens the portal as your account would appear. When this happens:

• A persistent banner is shown on every page indicating that staff are viewing the portal on your behalf.
• The session is short-lived (generally no more than 30 minutes) and ends when the staff member exits or the session expires.
• Staff in an impersonated session cannot submit deliverable approvals or revision decisions on your behalf, or complete invoice payments on your behalf. Those actions remain yours to perform in the portal.
• We use impersonation for support and troubleshooting — not to bypass your decisions or act without your knowledge.

Immutable audit log

We maintain an append-only audit log of significant staff actions in our internal systems, including when impersonation starts and stops. Typical logged fields include the staff actor, action type, affected resource, timestamp, and technical metadata such as IP address. Examples of logged actions include client record changes, deliverable publishing, impersonation sessions, invoice automation steps initiated by staff, and security-relevant events such as multi-factor authentication changes.

Audit log entries are designed to be immutable (they are not edited or deleted through normal application use) so we can investigate issues, meet contractual and legal obligations, and maintain accountability. Client portal users do not have access to the staff audit log; it is visible only to authorized staff through internal security tools.

How we use information

We use personal information to:

• Respond to inquiries, audit requests, and business development messages.
• Store form submissions and related operational records in our database (Supabase).
• Send transactional email such as confirmations and follow-ups related to your request (Resend).
• Process payments, issue receipts, and manage billing when you use Stripe Checkout or pay an invoice (Stripe).
• Operate, secure, maintain, and improve our website and internal processes.
• Understand aggregate usage trends through analytics (PostHog and, where enabled, Vercel Analytics).
• Comply with law, enforce our Terms of Service, and protect rights, safety, and property.
• Send operational messages related to your request (for example, confirming receipt or following up on scope). We do not sell your personal information.
• Operate the client portal: authenticate invited users, display project status, publish and review deliverables, facilitate comments and notifications, store project files, provide the in-portal AI assistant, and show billing information.
• Send portal-related email (for example, invites, deliverable notifications, @mention alerts, and invoice reminders) through our email provider.
• Record staff administrative actions and impersonation sessions in our immutable audit log for security, support, and accountability (as described above).

Client portal AI assistant

The portal includes an AI assistant powered by Anthropic. When you use it, your messages are stored per project so you can continue conversations and so we can support quality and abuse prevention.

The assistant answers using approved project context only — for example, statement-of-work summaries, current phase information, and staff-approved snippets we add to the project context pack. Client-uploaded vault files are not included in AI context unless our staff explicitly approves them for that purpose.

AridLogic AI is a project-support tool. It is not legal, financial, tax, or professional advice. Confirm important decisions with your project lead. A similar disclaimer is shown in the portal chat interface.

We do not use your portal content to train our own models. When we send prompts to Anthropic’s API, processing is governed by our agreement with Anthropic and their privacy terms. We do not authorize use of your client data for model training without your explicit consent.

Stripe Customer Portal

For certain billing actions in the client portal (for example, updating a payment method), we may redirect you to Stripe Customer Portal. Stripe processes payment card and billing details directly. We receive limited status and metadata needed to reconcile invoices and subscriptions. Stripe’s privacy practices are described in the Stripe Privacy Policy.

Legal bases (EEA, UK, and similar regions)

Where applicable privacy laws require a “legal basis,” we rely on one or more of the following: your consent (for example, submitting a contact or audit form after reading our consent notice, or non-essential cookies where required); performance of steps you request before entering a contract; our legitimate interests in operating and securing our business and website, provided those interests are not overridden by your rights; and compliance with legal obligations.

How we share information

We do not sell your personal information. We may share information with service providers who process data on our behalf under appropriate safeguards, including:

• Hosting and infrastructure (Vercel) to serve the site and related assets.
• Database and file storage (Supabase) to store form submissions, audit requests, portal accounts, project data, deliverables, document vault files, AI chat messages, and related operational records under access controls and row-level security.
• Email delivery (Resend) to send confirmations, follow-ups, portal invites, deliverable and mention notifications, invoice reminders, and other operational messages.
• Payments (Stripe) to process Checkout sessions, invoices, Customer Portal sessions, and related billing events. Stripe’s privacy policy governs payment card data they collect directly.
• AI processing (Anthropic) to generate in-portal assistant responses from approved project context when you use the AI chat feature.
• Error monitoring (Sentry) to diagnose portal and application errors, including technical metadata about the request that failed.
• Analytics (PostHog, and where enabled, Vercel Analytics) to measure aggregate site and portal usage and performance.
• Authentication (Supabase Auth, and Google when you choose Google sign-in) to verify portal users. Google’s privacy policy applies to information Google processes when you authenticate with your Google account.
• Bot protection (Cloudflare Turnstile, when enabled on forms) to reduce spam and automated abuse.

We may also disclose information if required by law, legal process, or government request, or to protect the rights, privacy, safety, or property of AliJede Solutions LLC, our users, or the public.

Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. The periods below are our general guidelines and may vary based on your agreement with us, legal holds, disputes, or backup cycles. When data is no longer needed, we take reasonable steps to delete or de-identify it.

• Marketing inquiries and audit requests (no paid engagement): typically up to 24 months from your last interaction, so we can respond to follow-ups and measure interest.
• Client portal data (account profile, project and deliverable records, comments, document vault files, and AI assistant messages): for the life of your engagement, then generally up to 36 months after the engagement ends or your last portal activity — whichever is later — unless your statement of work or law requires longer retention.
• Billing and payment records (invoice metadata, transaction references, and related correspondence): generally up to 7 years for tax, accounting, and audit purposes.
• Staff audit log (including impersonation start/stop and administrative actions): generally up to 36 months, or longer if required for an investigation, legal obligation, or active dispute.
• Technical logs and backups (error diagnostics, security logs, database backups): retained on rolling schedules appropriate to the service; deleted copies may persist in backups for a limited period before rotation.

You may request deletion of personal information where applicable, subject to the exceptions in the “Your privacy rights” section below, any active statement of work, and records we must keep for legal, accounting, or security reasons (including audit log entries tied to an investigation).

A summary of this retention schedule is also displayed in our internal Security center for staff reference. Automated deletion jobs for every category are not required for routine operations at our current scale; we review retention when engagements end or when you submit a privacy request.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including access controls on the client portal, multi-factor authentication for staff, row-level security in our database, and the immutable audit log described above. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your privacy rights and choices

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information, to receive a portable copy, or to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights that apply to you, email inquire@aridlogic.com with “Privacy request” in the subject line. We may need to verify your identity before responding.

California residents: If the California Consumer Privacy Act (CCPA) applies, you may have additional rights regarding personal information, including the right to know, delete, and opt out of certain sharing (we do not sell personal information as defined by the CCPA). You may designate an authorized agent where permitted by law.

International visitors

We are based in the United States. If you access our site from other regions, your information may be processed in the United States or other countries where we or our service providers operate. Those countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for cross-border transfers.

Children

Our services are directed to businesses and adults. We do not knowingly collect personal information from children under 13 (or the age required by local law). If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.

Third-party links

Our site may link to third-party websites or services we do not control. This policy does not apply to those third parties. Review their privacy policies before providing information.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the site after changes become effective constitutes your acknowledgment of the revised policy, to the extent permitted by law.

Contact

AridLogic, a division of AliJede Solutions LLC
Attention: Privacy
Email: inquire@aridlogic.com

Related documents: Terms of Service, Cookie Policy, Accessibility.