ARAI Consent to Personal Data Processing

I consent to CODEALIVE LTD (England and Wales, Company Number 16517721, registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom; support@arai.build) collecting and processing my personal data where provided for by applicable law for the operation of ARAI: sign-in and account management, fulfilment of my requests, allowance tracking, setting up and servicing my selected subscription, delivery of codes and applicable notifications, security, including automatic screening of requests to the engineering agent, and the statistics described in the policy.

The data includes my phone number, full name, optional workplace, account country, language and time zone, messages and files, audio recordings of dictated questions, engineering task materials and results, the agent's checkpoints and working notes, results of screening requests to the agent (without their text), verified contact email address, subscription and payment information, notification delivery and consent records, technical logs, IP address and cookies. ARAI does not store full card numbers or CVVs. Email verification does not constitute consent to advertising, and this consent does not authorise charges.

I consent to the transfer of data to the recipients listed below for the listed functions, including cross-border transfers to the countries where they are located, where data protection may differ, to the extent described in the Personal Data Processing Policy:

• Amazon Web Services hosts ARAI's infrastructure: the main database and file storage.
• Telegram (Telegram FZ-LLC, UAE) processes my number, account identifier and sign-in code messages if I share my number with the ARAI bot.
• AI (including for screening requests to the engineering agent), search, speech recognition and file-conversion providers receive the necessary messages, files, audio and queries. The phone number and workplace from my profile are not transferred to them as profile fields; my full name, language and time zone may be included. OpenRouter also receives a stable account or session identifier separately from the text to prevent abuse.
• OpenAI, through ARAI's account, receives materials that the engineering agent reads while performing my task; results and checkpoints are returned to ARAI so work can continue.
• Amazon Web Services (SES) receives my email address, the relevant notification and technical delivery information. Stripe and, for Managed Payments, Link process purchase and checkout-form data, country and technical information for payments, taxes, fraud prevention, receipts, refunds and disputes under their own terms. Checkout requires my separate confirmation.

I do not include third parties' personal data in messages or files. For dictated audio, ARAI uses the recording for the duration of the request; the external provider may retain it under its own terms. Consent itself does not override mandatory requirements for data protection and lawful transfers.

Only if I click “Share conversation” does its text up to the selected response become available to anyone with the link. The link can be revoked under “Account → My public links”; copies already saved by other people cannot be retrieved.

For statistical purposes, PostHog Inc. (PostHog Cloud EU, Frankfurt, Germany) receives a pseudonymous visitor or account identifier, page views and actions, device and browser information, IP address and country, and masked recordings of website sessions (sessions are not recorded on iOS). Chat text, file names, CAD content, telephone numbers, full names, email addresses and ARAI cookies are not transmitted. Browser statistics are enabled by default; you can opt out in your account or on the policy page. Opting out stops new browser data collection; requests already sent may complete. Server-side facts about account usage and numerical metrics for LLM calls, without content, are transmitted to PostHog regardless of this choice. The ARAI log is retained for 180 days, and account-linked information about first use and key actions is retained until the account is deleted; retention periods in PostHog are determined by the project settings. Advertising analytics is described separately in the policy; this consent does not replace the cookie choice required by applicable law.

Account data, task history and request screening results are retained until their applicable deletion; unpinned temporary files for 14 days, the virtual machine cache for up to 24 hours after the last task, and sign-in code logs for 90 days. Financial records, minimal delivery and repeat-send suppression records, pending tasks and backups are subject to separate conditions set out in the policy; withdrawing consent does not mean their unconditional immediate destruction.

I have read the Personal Data Processing Policy. Consent can be withdrawn through support@arai.build or by submitting the deletion request available in the account. For accounts with payment history, deletion requests must be sent to support. Withdrawal does not affect previously lawful processing or processing with another applicable legal basis. Features requiring the withdrawn consent may become unavailable. This consent does not restrict mandatory rights relating to data protection, refunds or subscription cancellation.

Version 2026-10-19.1.