Privacy Policy
How Aries AI collects, uses, shares and protects personal data and customer data when you use Aries Insight, and the choices you have.
1. Who we are and what this policy covers
This policy explains how Aries AI, Amman, Jordan (we), handles information in Aries Insight at insight.ariesai.ai (the Service).
We handle two kinds of information differently. Account information about the people who use the Service is ours to look after, and we decide how it is used as this policy describes. Customer Data, the data your organization connects, uploads or creates in the Service, belongs to your organization: we process it only to provide the Service on your organization's instructions, and your organization is responsible for the personal data it contains.
2. What we collect
- Account information
- Name, email address, organization, role, language and profile settings, and a protected form of your password. If you sign in with Google or GitHub, we receive your basic profile and email address from that service.
- Customer Data
- Database connection details (passwords are stored encrypted), the schemas, labels and values the Service reads, uploaded files, the knowledge base built from them, and your questions, conversations, dashboards, insights, reports and comments.
- Billing information
- Your plan, add-ons, invoices, amounts and payment results. Card details are entered on HyperPay's payment form and are never stored by Aries AI.
- Usage and credit records
- Which work used how many credits, which AI model was used and how much model processing it took, so that every charge can be traced.
- Audit and security logs
- Who did what and when: sign-ins, changes, shares, guest link opens and billing events, with IP address and browser details. Actions taken by Aries AI staff while assisting your account are recorded too.
- Cookies and similar technology
- Cookies needed to keep you signed in and to protect sign-up and sign-in (Google reCAPTCHA), and, where enabled, Google Tag Manager to understand how the website is used.
- Messages to us
- What you send when you contact support or sales.
3. How we use information
- To provide the Service: read your data sources, build the knowledge base, answer questions, and display dashboards and reports.
- To run your account: seats, roles, team spaces, data access rules, shared credit pools and guest links.
- To bill you and measure credit usage.
- To keep the Service secure: prevent abuse and fraud, investigate incidents and keep audit logs.
- To support you and send service messages, such as plan expiry reminders, low-credit alerts and approval requests.
- To operate and improve the Service using usage measurements and error diagnostics.
- To meet legal obligations.
4. What we do not do
- We do not sell personal data or Customer Data.
- We do not use Customer Data to train AI models.
- We do not use Customer Data for advertising.
- We do not write to your databases.
Database sessions are opened read-only wherever the database engine supports it.
5. How AI processing works
To build a knowledge base and to answer questions, the Service sends the relevant parts of your Customer Data, such as schema descriptions, column labels, sample values, query results and your question, to the AI language models that write the response. The models run at our AI providers, listed below, which process this content to return a response under their own terms.
Figures are calculated by running queries and code on your data; the models interpret questions and write explanations. Output can contain errors; see the Disclaimer.
6. Who processes data for us
- Microsoft Azure
- Hosts the production Service. Azure AI Foundry runs AI language models used by the Service. Microsoft also provides speech transcription and email delivery.
- HyperPay
- Processes card payments. HyperPay receives your card details directly; Aries AI does not.
- Provides reCAPTCHA to protect sign-up and sign-in, sign-in with Google, maps in charts, and Google Tag Manager on the website.
- GitHub
- Provides sign-in with GitHub, if you choose it.
7. Sharing
Inside your organization, information is visible according to the roles, team spaces and data access rules your account managers set. A dashboard shared through a guest link can be viewed by anyone who holds the link until it is switched off or expires.
Outside your organization, we share information only with the providers above, when the law requires it (for example, a valid order from a competent authority), to protect the rights and safety of our users or of Aries AI, or as part of a merger or sale of our business, where the recipient remains bound by this policy.
Each provider processes data only to provide its service to us, under its own terms. Your data may be stored and processed outside Jordan, in the regions where these providers operate.
8. Retention and deletion
We keep account information while your account is active. Customer Data stays in your account until you delete it or the account is deleted. Moving to the Free plan does not delete Customer Data, but features and capacity beyond the Free plan stop being available.
When you delete a data source, it is removed from your workspace at once, and the stored data built from it is then purged from our systems. When an account is deleted, its data is deleted from our active systems; copies in backups and logs are removed as those backups and logs expire. We keep invoices and payment records, and audit records needed for security or legal purposes, for as long as the law requires or allows.
9. Security
- Connections to the Service are encrypted in transit (HTTPS).
- Database passwords and connection secrets are stored encrypted.
- Database sessions are read-only wherever the engine supports it (PostgreSQL, MySQL, MariaDB and Oracle). For SQL Server and BigQuery, which have no such mode, the permissions of the login are measured and recorded.
- Access inside your account is controlled by roles, team spaces and data access rules, and recorded in audit logs.
- Our hosting providers encrypt stored data at rest.
- No system is completely secure. Use least-privilege database logins and strong passwords, and tell us at once about any suspected incident at info@ariesai.ai.
10. Your choices and rights
- See and correct your information
Update your profile in your settings, or ask us.
- Delete your account
Delete your account from your settings. An organization can ask us to delete its whole account.
- Get a copy
Ask us for a copy of the personal information we hold about you.
- Object or restrict
Ask us to stop or limit a use of your information that is not needed to provide the Service.
- Control cookies
Block or delete cookies in your browser; the Service may not work correctly without the cookies needed for sign-in.
- Requests about Customer Data
If your request concerns data your organization brought to the Service, we will pass it to your organization, which decides on it.
11. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their information.
12. Changes and contact
We may update this policy. The version and effective date at the top of this page show which text applies, and we will tell account managers about material changes before they take effect. To exercise your rights or ask a question, email info@ariesai.ai. We answer requests within 30 days.