Data and privacy
Where ARVEMO stores your data, who processes it, which AI services see what, how long data is kept and how you export or delete it.
This page answers the questions people ask before they put client material into ARVEMO. It summarises the privacy policy and the terms of use; where they differ from this page, they are the authority. The German versions are authoritative.
Where is my data stored and who processes it?#
ARVEMO processes all data in the European Union. The hosting provider is Scaleway in Paris: servers, database, file storage, e-mail delivery and logs. The only exceptions are two Apple services in the apps (see below). The privacy policy lists every service provider with its task and location.
Which AI models work with my documents?#
The agents use language models from Mistral AI in Paris. Only what a task needs goes there: the request, excerpts from the workspace, files for text recognition and recordings for transcription. Content is not used to train AI models; this is stated in the privacy policy and the terms. Mistral keeps inputs and outputs for up to 30 days to detect abuse. Short yes/no decisions, for example whether a file contains instructions aimed at an AI, are made by a second EU service that stores nothing.
What leaves my workspace?#
When an agent researches the web, only search terms leave (companies, markets, topics), never the content of the workspace. The agents of a workspace work with what that workspace holds. ARVEMO sends service e-mails (invitations, sign-in links, notices, an optional daily summary), no newsletters and no advertising.
What leaves my device in the apps?#
The apps talk to ARVEMO's servers in the EU. Two Apple services are the exception. Push notifications pass through Apple with a delivery number, a generic notice text and a count, never your text, titles or workspaces; the app then fetches the content from ARVEMO itself. Dictation runs on the device where it can; otherwise, and for voice notes in the chat, the audio goes to Apple's speech recognition. The camera, microphone and photos are used only when you start them. The apps contain no analytics or advertising software.
Who can see what in a workspace?#
People invited to the workspace, each with their role, and the owners and admins of the advisor's organisation. Agents are built to see no more than the person they work for may see. The page Workspaces and roles explains the roles.
How long is data kept?#
A workspace's content is kept for the workspace's term. After closing, it stays readable until the organisation asks for deletion or deletes its account. Your account stays until you delete it. Deleted or overwritten files can be recovered for 30 days, backups are kept for 30 days and server logs for 7 days. The privacy policy has the full table.
How do I export or delete my data?#
Open the account section of your settings. Advisors find it on the web under Settings › Account; on the Mac it is in the settings window (⌘,); on the iPhone and iPad everyone finds it under the name at the foot of the menu › Settings › Account. A client who uses only the browser has no such entry: she writes to the address in the privacy policy or asks her advisor.
Choose Export my data to get a ZIP file with your data; an organisation owner gets everything of the organisation. The link appears in the app and comes by e-mail. To delete your account, use the delete button there. The deletion starts after a short grace period during which you can restore the account by signing in. If you are the only owner of an organisation, the organisation with its workspaces goes with you; its other members are told beforehand.
Do I need a processing agreement?#
If you upload personal data of third parties, such as people at your client, you or your organisation are responsible for it and ARVEMO processes it on your behalf. Organisations get a data processing agreement on request by e-mail to the address in the privacy policy.
Is there tracking or advertising?#
No. There are no analytics or advertising services, no third-party cookies and no sale of data. The beta sets one cookie that keeps you signed in. The website sets none.
Is the sample workspace safe?#
Yes. It holds fictitious data. Its agents follow a script and make no model calls, so nothing from it goes to an AI service. What you type there yourself is treated like other content.
Common questions#
Do the AI models train on my data? No. Content is not used to train AI models.
Is my data used for other clients? Workspaces are kept apart: what is in one client's workspace is not shown in another. Advisors can have working notes (for example their style) apply across their organisation; those are seen only by the advisor side.
Does ARVEMO hold a security certification? ARVEMO does not claim a security certification. The privacy policy states what is in place: encryption of all connections, a database reachable only on a private network, data of workspaces kept apart, and access by role.
Who do I ask about data protection? Write to the address in the privacy policy; it also names the supervisory authority you may contact.