Trust

Data & Compliance

Last updated: 5 July 2026

This is a plain-language summary of how ARIOS handles data. It sits alongside — and does not replace — our full Privacy Policy and Terms & Conditions. Our principle is simple: collect the minimum, store it safely, keep you in control.

1.What we store

ARIOS is a business tool, so it stores the work data you put into it. We keep this deliberately lean:

Login: your email address and an encrypted (hashed) password. You do not need to give us your personal name to sign up.
Your workspace content: the companies, business contacts, signals, notes, events, and opportunities you choose to add. Because ARIOS researches organisations, this can include business contact details (names, roles, employers, public professional links) — this is data you control and add for legitimate B2B purposes.
Waitlist: your email (and any name you choose to give) if you join early access.
Technical logs: IP address, device/browser info, and activity timestamps, kept briefly for security and diagnostics.

2.What we never store

No payment-card numbers. We never store full credit- or debit-card numbers. If we add paid plans, card payments will be handled entirely by a PCI-compliant payment processor.
No personal name required for your account. Sign-in is by email only; we do not force you to hand over your personal identity to use ARIOS.
No sensitive personal data. We do not ask for government IDs, health, biometric, or other special-category data — please don't upload it.
No selling of data. We never sell your data or the contact data in your workspace, and we don't use your workspace data to build our own marketing lists.

Note: because ARIOS exists to help you research business contacts, the platform does hold the business names and roles you add to your own workspace. That data is yours, held for you, and deletable by you at any time — it is not part of a Pangratis marketing database.

3.Where your data lives

Your data is stored with our cloud database and hosting providers. We are based in Georgia and use reputable providers that may operate in the EU, the US, or elsewhere, so data may cross borders — always under appropriate safeguards (see the Privacy Policy). Each customer workspace is isolated so one customer cannot see another's data.

4.How we protect it

Encryption of data in transit (HTTPS/TLS).
Passwords stored only as salted hashes; secrets and API keys encrypted at rest.
AI-provider keys used server-side only — never exposed to the browser.
Workspace-level access controls and data isolation.
Least-privilege access and activity logging for maintenance.

No system is perfectly secure, but we design ARIOS to minimise what we hold and to keep it locked down.

5.AI & enrichment

To generate briefs, drafts, and enrichment, ARIOS sends the relevant content to third-party AI and data-enrichment providers to return a result to you. We select providers with appropriate safeguards and, where available, terms that keep your business data out of public model training. AI output can be wrong — you review and approve everything before it is used or sent. ARIOS never sends external messages automatically.

6.Your control

You own the content in your workspace and can edit or delete it.
You can request access to, correction of, or deletion of your personal data — see Your rights.
You can unsubscribe from waitlist/newsletter emails at any time.
On account closure, your content is deleted within a reasonable period unless the law requires retention.

7.Compliance frameworks

We design ARIOS to align with major data-protection regimes that may apply to our customers, including the EU/UK GDPR and the California CCPA/CPRA, as well as applicable Georgian data-protection law. We act as a data processor for the business-contact data you load, and as a controller for your account and waitlist data. A list of sub-processors and a data-processing agreement are available on request at sales@pangratis.com.

8.Contact

Data or compliance questions? Email sales@pangratis.com.