Privacy policy

Julian Brönnimann and David Stocker, simple partnership (einfache Gesellschaft), Haldenstrasse 169, 8055 Zürich, Switzerland (“we”). This policy follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

Contact for all data protection questions: hallo@hirearlo.io

Arlo writes on behalf of our customers, from their own mailbox. The company named as the sender of the email is responsible for your data; we process it only on that company’s behalf and instructions.

Simply reply to the email if you want no further messages, want to know what is held about you or want your data deleted: Arlo recognises such replies, stops writing to you and passes your request to the sender. You can also contact us; we forward your request to the sender.

This website sets no cookies, stores nothing on your device and loads no third-party content.

To count visits, each page view is sent to PostHog (PostHog, Inc., San Francisco, USA, storing data in its EU cloud in Frankfurt, Germany): the page address without parameters, the referring page, browser, operating system and device type, screen size, language and time zone. PostHog counts visitors with a value it calculates on its servers from the IP address and browser details with a key that changes daily; the IP address itself is not stored. The basis is our legitimate interest in visit statistics without cookies (Art. 6(1)(f) GDPR). We delete the data once we no longer need it for the statistics.

To deliver the pages and protect them from abuse, the server processes technically necessary data such as the IP address, the time, the address requested and browser details. The basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The logs are overwritten continuously once their limited storage is full.

For your account we process your name, your email address, your role in the team and, if you use it, the details from your Google or Microsoft sign-in (name, email address, identifier). Sign-in links are stored only as a hash and are valid for 15 minutes.

What you and your team enter or upload in Arlo, the conversation with Arlo and everything Arlo works out for your company is kept in your account, separate from every other account. It is never used for other customers and not to train language models.

The basis is the contract with your company (Art. 6(1)(b) GDPR). We send you the emails that belong to Arlo’s work: sign-in links, Arlo’s questions, summaries and notices. You set how often in the settings.

When you connect a mailbox, Arlo sends your company’s emails through it and reads incoming emails to recognise replies, match them to the right company and honour stop requests. The connection runs through Unipile. When you disconnect the mailbox, access ends and the connection is deleted at Unipile too.

Payments and invoices run through Stripe. Card details go directly to Stripe; we never see them. We receive the name and address for the invoice, the payment status and the invoices. The basis is the contract and our legal duty to keep business records for ten years (Art. 958f Swiss Code of Obligations).

To keep Arlo reliable, the app records technical events and error reports through PostHog: which feature was used and what went wrong, without message text and without data about your contacts. The basis is our legitimate interest in a secure, working service.

When you write to us, we process your message and details to reply. Our mailbox is hosted by Google Workspace.

Your company is responsible for the companies and people Arlo finds and writes to on its behalf; we process this data as a processor. It includes names, business contact details, role and company, public information from websites and the email exchange. It comes from public sources, web searches and what your team gives Arlo. Arlo checks that an address exists before writing to it.

The terms are set out in the data processing agreement.

Service providers process data for Arlo only on our instructions. Who they are, what for and where: list of subprocessors. Sign-ins with Google or Microsoft and payments with Stripe are also subject to their own privacy terms.

Arlo’s language models are run by Anthropic. Our contract partner is Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland. Anthropic processes data on our behalf; for your contacts’ data, which we process on your behalf, Anthropic is a subprocessor.

What for: only Arlo’s work for your company account, such as preparing your documents, drafting messages and classifying replies. Each request to Anthropic carries the data of one company account.

Anthropic may not use your data to train its models.

Anthropic deletes inputs and outputs within 30 days. Longer only where needed to enforce its usage policy (flagged data up to 2 years) or where the law requires it. We have no zero-data-retention agreement with Anthropic.

Arlo’s own storage: everything Arlo holds for your company is kept in Arlo’s database on a server in Frankfurt, Germany, separated per company account. Anthropic receives individual requests, not the database. Connections to Arlo are encrypted (HTTPS), stored access credentials are encrypted with a key per company account, and backups are encrypted before they leave the server.

Transfer outside the EU: Anthropic stores data in the US and may process requests in the US, Europe, Asia and Australia. The transfer is based on EU Standard Contractual Clauses (modules 2 and 3) in the provider’s data processing addendum: www.anthropic.com/legal/data-processing-addendum.

We process data in Switzerland and the EU. The EU recognises Switzerland as providing adequate data protection. Where a service provider processes data in another country, the transfer rests on an adequacy decision or on the European Commission’s standard contractual clauses, which the FDPIC recognises too; the list of subprocessors names the basis for each provider.

We keep account data until an owner deletes the account. The deletion takes effect 14 days after the request; the data then leaves the database, and the backups within another 14 days. Only a note that and when an account was deleted remains.

While the account exists: companies and contacts that do not fit or were excluded are deleted by Arlo after 180 days; email text after 730 days (sender, date and matching remain). Anyone who wants no more emails stays on the block list as an unreadable fingerprint, so they are never written to again. Invoices and accounting records are kept for ten years.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to hallo@hirearlo.io; we may ask you to prove your identity. If your request concerns data we process for a customer, we forward it to them.

You can lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the supervisory authority where you live.

We update this policy when Arlo or the law changes. The version on this page applies.