Privacy policy
Which personal data we process, why, and what rights you have.
This text is a draft awaiting legal review. Marked gaps are filled in by the company before publication.
Controller
Julian Brönnimann and David Stocker, simple partnership (einfache Gesellschaft), Haldenstrasse 169, 8055 Zürich, Switzerland
Email: hallo@hirearlo.io
This website
This website sets no cookies and loads no analytics or third-party content.
To deliver the pages and protect them from abuse, the server processes technically necessary data such as the IP address and the time of the request. Storage period of server logs: To be filled in: [period].
Your account
For sign-in we process your email address and, if you use it, your Google or Microsoft login. Sign-in links are stored only as a hash and are valid for 15 minutes.
What you enter in Arlo and what Arlo works out for your company is stored in your account and never used for other customers.
Data about your contacts
For the people Arlo researches and writes to on your behalf, we process data on your instructions. The terms are set out in the data processing agreement: To be filled in: [link to the agreement].
Service providers
Service providers process data for Arlo only on our instructions. Who they are, what for, where, and whether each one is decided: list of subprocessors.
AI processing
Arlo’s language models are run by Anthropic. Our contract partner is Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland. Anthropic processes data on our behalf; for your contacts’ data, which we process on your behalf, Anthropic is a subprocessor.
What for: only Arlo’s work for your company account, such as preparing your documents, drafting messages and classifying replies. Each request to Anthropic carries the data of one company account.
Anthropic may not use your data to train its models.
Anthropic deletes inputs and outputs within 30 days. Longer only where needed to enforce its usage policy (flagged data up to 2 years) or where the law requires it. We have no zero-data-retention agreement with Anthropic.
Arlo’s own storage: everything Arlo holds for your company is kept in Arlo’s database on a server in Frankfurt, Germany, separated per company account. Anthropic receives individual requests, not the database. Connections to Arlo are encrypted (HTTPS), stored access credentials are encrypted with a key per company account, and backups are encrypted before they leave the server.
Transfer outside the EU: Anthropic stores data in the US and may process requests in the US, Europe, Asia and Australia. The transfer is based on EU Standard Contractual Clauses (modules 2 and 3) in the provider’s data processing addendum: www.anthropic.com/
Storage periods
Account data is kept until the account is deleted. A deletion takes effect 14 days after the request. Other periods: To be filled in: [periods per data type].
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the supervisory authority where you live.