Informativa sulla privacy

1. Who is responsible

FSRC Inc., Canada, is the controller of the personal data processed by Aristo (aristoprompt.ai). Privacy questions and requests: support@aristoprompt.ai.

2. What we collect

Account data: email address, name if you give one, chosen language, plan, and the sign-in method you use (Google or email).
Your content: the prompts you submit, the answers you give the coach, the rewrites and test results, your library and your chat with Professor Aristo.
Usage and technical data: pages visited, actions taken, approximate device and browser information, IP address (hashed for rate limiting), and error reports.
Billing data: handled by Stripe. We store your Stripe customer and subscription identifiers and invoice status, never your card number.
Connected AI assistants: if you connect Aristo to an assistant such as Claude or ChatGPT, we keep which assistant you connected, the permissions you granted and when, and hashed sign-in tokens that expire. Prompts you send through the assistant are handled like any other prompt. You can disconnect an assistant at any time from your account page.

3. Why we process it

To provide the Service: grading, coaching, rewriting and testing your prompts, and keeping your history and library (performance of our contract with you).
To keep the Service safe: quotas, rate limits, abuse prevention and security (our legitimate interest). A small number of authorised Aristo staff can see recent prompts in an internal moderation view, only to investigate abuse or a support request you make; any action they take, such as hiding a prompt, is logged.
To bill you (performance of the contract and legal obligations).
To improve the Service using aggregated, anonymised statistics (legitimate interest).
To send service emails such as sign-in links, receipts and material changes. Marketing email only with your consent, which you can withdraw at any time.

4. AI providers

To grade, coach, rewrite and test prompts, we send your prompt text and related inputs to Anthropic PBC's Claude API, and, where you choose other model families for test drives, to those providers. They process the text to return a result. We do not allow providers to train on your content, and we send an opaque identifier rather than your email with each request.

5. Where data is stored

Account data and your content are stored with Supabase in the Canada Central region. The application runs on Vercel; Vercel functions are configured to run in Canada where available. Emails are sent through Resend; error reports go to Sentry with prompt text removed. Stripe processes payments. Some of these providers operate outside Canada; where data leaves Canada, it does so under the providers' standard contractual protections.

6. How long we keep it

Your content stays until you delete it or your account. Deleting your account removes your profile, content, library and chat within 30 days, and deletes or anonymises your Stripe customer record. Usage logs are kept for 90 days; billing records for as long as tax law requires; a hashed email is kept to prevent repeated free trials.

7. Your rights

You may access, correct, export and delete your data. Export and deletion are available on the account page; anything else, write to support@aristoprompt.ai. If you are in the EU, UK or another jurisdiction with data-protection rights, those rights apply, including the right to complain to your supervisory authority. In Canada, PIPEDA applies.

8. Cookies

We use only the cookies needed to run the Service: your session, your language choice and a security token. There are no advertising cookies. Analytics, where enabled, is privacy-preserving and does not use cookies.

9. Children

Aristo is not directed at children under 13, and in jurisdictions where a higher age applies, under that age. Classroom use is arranged with the responsible institution.

10. Changes

We will announce material changes to this policy on the Service or by email. The date at the top shows the current version.