Skip to content
ARF AI

Privacy Policy

Effective Date: August 10, 2026

1. Overview

This Privacy Policy applies to the ARF public sandbox API, demo website, and pilot signup process. The core engine is proprietary and access‑controlled – this policy does not apply to data processed under separate written agreements. We do not sell your personal data.

2. Data We Collect

Account Information

  • Email address
  • Account credentials

API and Usage Data (sandbox)

  • API keys
  • Mock evaluation requests and responses
  • Timestamps, IP addresses, endpoints

AI Agent Chat (ARF Institutional Memory Agent)

  • Message text you submit to the chat widget or the /agent page
  • The model’s generated response

Technical Data

  • Browser and device information
  • Log files

Payment Data

  • None – paid tiers are handled via separate written agreements, not through this site.

3. How We Collect Data

Through signup forms, API usage, the AI agent chat widget, and analytics (Vercel Analytics). Nothing is collected via cookies — see section 10.

4. Purpose of Processing

To provide the sandbox, enforce rate limits, generate AI agent chat responses, improve the service, and send critical updates.

5. Legal Basis (GDPR)

Contractual necessity (sandbox, AI agent chat), legitimate interests (security, improvement), and consent (optional newsletters).

6. Data Sharing

We share data with:

  • Vercel – hosting and analytics
  • Hugging Face – demo hosting (mock data only)
  • Anthropic – the AI agent chat widget and /agent page send your submitted message text to Anthropic’s Claude API for processing. Each request is evaluated independently; the agent does not retain conversation history between messages.
  • GitHub – repository links
  • Slack – community (no data shared unless you click)

7. Data Retention

  • Sandbox usage logs: 30 days
  • AI agent chat logs: retained in server logs for 30 days for abuse monitoring and debugging; not stored in a database or used for model training
  • Pilot signup data: up to 12 months (if you later enter a written agreement)
  • Account data: retained while your account is active
  • API keys: retained until you request deletion

8. Your Rights

Access, correction, deletion, portability, objection. Contact juan@arf-ai.com.

9. Security Measures

HTTPS encryption, access controls, logging.

10. Cookies and Browser Storage

This site sets no cookies of its own — not for authentication, not for analytics, and none for advertising.

It does use your browser’s local storage, which stays on your device and is never transmitted to us:

  • arf-theme – your light/dark preference
  • arf-pilot-form – a draft of the pilot signup form, so a half-completed form survives a refresh. Cleared on submission.
  • github-* – a short-lived cache of publicly available repository data shown on the site

You can clear these at any time through your browser’s site-data controls, with no loss beyond the preference and draft above.

11. International Transfers

Data may be processed in the US; we rely on Standard Contractual Clauses.

12. Children’s Privacy

Not intended for under 16.

13. Changes to This Policy

We may update it; continued use constitutes acceptance.

14. Contact

juan@arf-ai.com

Last updated: August 10, 2026