Arrow Algo Privacy Policy
Arrow Algo Ltd (“Arrow Algo”, “we”, “our” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights in relation to it.
Arrow Algo operates a global platform available to users worldwide, except in jurisdictions subject to international sanctions. We do not specifically target users in any particular country or region. We recognise that users in various jurisdictions — including the European Union and the United Kingdom — may use our Services, and we respect applicable data protection laws accordingly.
This Privacy Policy covers our treatment of personally identifiable information gathered when you access or use our Services. It does not cover the practices of entities we do not own or control.
We may revise this Privacy Policy from time to time. The most current version will always be available at arrowalgo.com/privacy/.
1. Who We Are
Arrow Algo Ltd is an Oman-based company and the data controller responsible for your Personal Data collected through the Services.
Contact: info@arrowalgo.com
2. Definitions
In this Privacy Policy:
- “Services” means all services provided by Arrow Algo, including the website, platform, desktop and mobile applications, AI Chat, and any other services we provide from time to time.
- “Personal Data” means any information relating to an identified or identifiable natural person.
- “AI Chat” means the AI-powered conversational feature available within the Services.
3. Data We Collect
We may collect the following categories of Personal Data:
Identity and account data: full name, username, password (stored securely), country of residence, email address, and corporate details where applicable.
Usage data: how you access and use our Services, interactions with other users, content you upload, and your activity within the platform.
Communications data: emails, customer support messages, social media messages, and job applications.
Location and device data: IP address, GPS or derived location data, device type, operating system, browser type, and device identifiers.
AI Chat data: queries, inputs, and other data you submit through the AI Chat feature (“AI Chat Data”), including conversation history and prompts.
Analytics data: page views, referral URLs, session durations, and similar behavioural data collected via Google Analytics.
We do not knowingly collect Personal Data from anyone under the age of 18. If you believe a minor has provided us with their data, please contact us immediately and we will take steps to delete it.
4. How We Collect Personal Data
We collect Personal Data when you:
- Create an account or use the Services
- Authorise single sign-on via Google or Coinbase
- Contact us by email or through the Services
- Use the AI Chat feature
- Interact with us on social media or community platforms
- Correspond with our support team
We also collect data automatically through cookies and similar technologies (see Section 9).
If you voluntarily share Personal Data in our community channels (Discord, Telegram), this is done at your own discretion and is not actively collected by us.
5. How We Use Your Personal Data
We use your Personal Data to:
- Provide, operate, and maintain the Services
- Manage your account and customer relationship
- Improve, test, and develop our Services
- Operate and improve the AI Chat feature
- Send you service-related communications
- Deliver marketing communications where you have opted in, or where we have a legitimate interest to do so
- Detect and prevent fraud and misuse
- Comply with legal and regulatory obligations
- Analyse usage trends and generate aggregated statistics
6. AI Chat Data
The AI Chat feature is primarily powered by Anthropic, and on occasion by OpenAI. When you use AI Chat:
- Your prompts and conversation data are transmitted to the relevant AI provider for processing.
- Your prompts and conversation history are stored on our own servers.
- AI Chat Data is used to operate and improve the feature.
- We retain AI Chat Data for up to five (5) years from the date of collection.
- Anthropic and OpenAI process your data under their own terms and privacy policies. We share only the data necessary for the AI to respond to your queries.
- We do not sell AI Chat Data to third parties.
Where AI Chat Data is shared with third-party AI providers, this is done under contractual arrangements that include data protection obligations.
7. Sharing Your Personal Data
We may share your Personal Data with:
Email marketing: Mailjet, for sending marketing and service communications.
Analytics: Google Analytics and Microsoft Clarity, for understanding how users interact with the Services. Microsoft Clarity may record session activity including mouse movements and clicks to help us improve usability.
AI providers: Anthropic (primary) and OpenAI (occasional), for operating the AI Chat feature, under strict data protection arrangements.
Marketing platforms: We use Facebook, X (formerly Twitter), TikTok, and Instagram for marketing purposes. We do not share your personal data directly with these platforms unless you interact with our content on those platforms, in which case their own privacy policies apply.
Authorities: Government and law enforcement agencies, where required by applicable law.
Arrow Algo entities and affiliates.
Business transfers: In connection with a merger, acquisition, asset sale, or other corporate transaction. We will notify you if this occurs.
We do not sell your Personal Data.
8. Data Retention
We retain your Personal Data for as long as necessary for the purposes described in this policy. The following periods apply:
| Category | Retention Period |
|---|---|
| Account and identity data | Duration of account + 7 years |
| AI Chat prompts and conversation data | 5 years from date of collection |
| Analytics data | 26 months |
| Marketing preferences and communications | Until you unsubscribe, plus 3 years |
| Legal and regulatory records | At least 7 years |
Where a shorter or longer retention period is required by law or regulation, we will retain data accordingly.
9. Cookies
We use cookies and similar technologies to operate and improve the Services.
What are cookies? Cookies are small files placed on your device by websites you visit. They may be session cookies (deleted when you close your browser) or persistent cookies (retained for a set period).
Cookies we use:
- Google Analytics cookies — used to measure how users interact with the Services, including session tracking and usage statistics. These include both session and persistent cookies.
Third-party cookies: Third parties such as Google may place cookies on your device when you use the Services. These are governed by those third parties’ own cookie policies.
Your choices: You can restrict, block, or delete cookies through your browser settings. Restricting cookies may affect the functionality of the Services. Where required by law, we will seek your consent before placing non-essential cookies.
10. Legal Basis for Processing
Where data protection law requires us to identify a legal basis for processing your Personal Data, we rely on the following:
- Contract performance — processing necessary to provide the Services you have requested.
- Legitimate interests — processing for analytics, fraud prevention, security, and improving our Services, where these interests are not overridden by your rights and freedoms.
- Legal obligation — processing required to comply with applicable laws and regulations.
- Consent — for direct marketing where required by law. You may withdraw consent at any time by contacting us or using unsubscribe links in our emails.
11. Your Rights
Depending on where you are located, you may have rights under applicable data protection law, including the right to:
- Access your Personal Data
- Correct inaccurate or incomplete data
- Request deletion of your data (subject to our legal retention obligations)
- Restrict or object to certain processing
- Data portability
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at info@arrowalgo.com. We will verify your identity using your registered email address and, where necessary for higher-risk requests, may ask for additional reasonable verification. We will respond within the timeframe required by applicable law.
12. Data Security
We take reasonable technical and organisational measures to protect your Personal Data against unauthorised access, loss, disclosure, alteration, or destruction. These include secure server infrastructure and access controls.
No system is completely secure. If you have reason to believe your data has been compromised, please contact us immediately at info@arrowalgo.com.
13. International Data Transfers
Arrow Algo operates globally. Your Personal Data may be transferred to and processed in countries outside your own, including Oman and countries where our service providers operate. Where required by applicable law, we take steps to ensure that appropriate protections are in place to safeguard your Personal Data during international transfers.
14. Sanctioned Jurisdictions
The Services are not available to users in jurisdictions subject to international sanctions. By using the Services, you confirm that you are not located in, or acting on behalf of a person or entity in, a sanctioned jurisdiction.
15. Community Channels
Arrow Algo maintains communities on Discord and Telegram. Any Personal Data you share in these channels is shared voluntarily at your own discretion. Processing of data within those platforms is subject to their own privacy policies. We do not actively collect Personal Data from these channels unless you have directly provided it to us.
16. Social Media
If you follow or interact with Arrow Algo on Facebook, X (formerly Twitter), TikTok, or Instagram, your data is processed in accordance with the privacy policies of those platforms. Arrow Algo will not use your social media profiles to send you direct advertising.
17. Third-Party Links and Content
The Services may contain links to or embedded content from third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.
18. Children
The Services are not available to anyone under the age of 18. We do not knowingly collect Personal Data from minors. If you are a parent or guardian and believe a minor has provided us with their data, please contact us and we will take immediate steps to delete it.
19. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, our data practices, or the features of our Services. We will notify you of material changes by email or through the Services. The current version will always be available at arrowalgo.com/privacy/.
20. Contact
Arrow Algo Ltd
Email: info@arrowalgo.com
For data protection enquiries, please contact us at the address above.