Privacy Policy

At AroAI ("we", "our", or "us"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit aroai.com, use the Aroai MCP service at https://mcp.aroai.com/v1, or use the workspace portal at https://app.aroai.com.

This Privacy Policy complies with the Privacy Act 2020 (NZ), the Privacy Act 1988 (Cth) (Australia), and other applicable privacy laws in New Zealand and Australia.

We may collect personal information that you voluntarily provide when you complete website forms, contact us, request information, subscribe to communications, participate in surveys or events, or use the services we offer.

Types of information may include your name, email address, phone number, company details, business information and preferences, communication preferences, service usage information and payment information where applicable.

When you visit the website, we may automatically collect device and usage information such as IP address and browser type, operating system, referring website, pages viewed, time spent on pages, and access dates and times.

We use PostHog's EU service for website usage analytics, interaction heatmaps, session replay where enabled, and technical diagnostics. Local storage can associate visits on this website; website analytics does not share its visitor identifier with sibling subdomains. Browser privacy signals and analytics opt-outs are respected. We do not use your enquiry email address as an analytics identifier.

Enquiry forms are excluded from automatic interaction capture and their inputs are masked in session recordings. Request bodies, authentication headers and raw browser console messages are not recorded by our website configuration. Analytics may still include page paths, device information and general interaction activity.

Enquiries are stored securely for follow-up and delivered to our PostHog Support inbox. This support processing is separate from website analytics. Contact [email protected] to ask about access, deletion or analytics preferences.

We may use information to provide, operate and maintain services; improve and personalise services; understand usage; develop products and functionality; communicate about services and updates; process transactions and send confirmations or invoices; provide technical notices, security alerts and support; respond to questions; and comply with laws and legal processes.

We may share information with service providers and contractors that perform services for or on our behalf. It may also be transferred as part of a merger, acquisition, financing, reorganisation, bankruptcy or sale of company assets; disclosed where required by law or in response to a valid public-authority request; or shared for another purpose with your consent.

We do not sell your personal information to third parties.

We implement technical and organisational security measures designed to protect personal information from unauthorised access, disclosure, use, alteration or destruction. No method of Internet transmission or electronic storage is completely secure, and absolute security cannot be guaranteed.

Information may be transferred to and processed in countries other than the country where you reside. These countries may have different data-protection laws. The existing policy describes transfer to countries outside New Zealand and Australia, including the United States and countries where service providers are located.

The policy states that appropriate measures are taken to protect personal information in accordance with this policy when transferred internationally.

We will retain personal information only for as long as necessary for the purposes set out in this Privacy Policy, including to provide services, comply with legal obligations, resolve disputes, and enforce legal agreements and policies.

Under New Zealand's Privacy Act 2020 and Australia's Privacy Act 1988, you have certain rights regarding personal information, including the right to access it; correct inaccurate or incomplete information; request deletion in certain circumstances; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details in the Contact Us section.

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. A parent or guardian who believes a child has provided personal information may contact us to request deletion.

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new policy on this page and updating the Last Updated date. You are advised to review the policy periodically.

For questions about this Privacy Policy or privacy practices, contact [email protected]. Postal address: AroAI, 128 Clark Road, Auckland 0618, New Zealand.