Privacy notice

What Arrelo keeps, and why

• Your sign-in email. So you can sign in, and so Ruben can reach you about your account.
• What Google or Apple shares, if you sign in with them: your name, your account ID with them and, with Apple, the email it gives you. So they can sign you in.
• Your studio name. So Arrelo can show you whose studio you're in.
• The photos and piece details you add. Keeping track of your pieces is what Arrelo is for.
• Where you're signed in. For each device you're signed in on, Supabase sign-in keeps the kind of browser and device, when it was last active, and the network (IP) address it saw. For most sign-ins that is the address of Arrelo's own server, not yours. This lets Settings show where you're signed in and sign you out of the others. Arrelo shows you the browser, the device and the time, never an address.
• When you sign in. Each sign-in, each time you confirm it's you again and each change to your contact email go in Arrelo's own security log, so Ruben can spot problems. That log has no IP addresses and no details about your device. Supabase and Vercel (below) keep ordinary server logs that include IP addresses for a short time.
• Two events about your Invite: when you opened it and when you used it. Ruben uses them to see whether invites work.

Other people who use Arrelo can't see anything in your studio. Ruben looks only when you ask him to, or to fix a problem.

Who helps run Arrelo

• Supabase stores your studio, your pieces and your photos, and handles sign-in. Its servers are in the US.
• Vercel runs the Arrelo website. Its servers are in the US.
• Postmark sends the sign-in emails.
• Google or Apple, only if you choose to sign in with them.

Today, no AI service gets your photos. When Arrelo starts processing photos, these are the services that will get them. Arrelo chooses services whose terms say they don't train their AI on your photos and delete them within 30 days, and Ruben confirms this with each one before any photo is sent:

• Photoroom cuts each piece out of its photo.
• Amazon Web Services (Bedrock) makes an image fingerprint of each photo, so Arrelo can later find pieces that look alike. Its servers are in the US.
• OpenAI or Anthropic suggests a name, category and tags for each piece, using your photo and your studio's own categories and tags. Only one of them will be used, and this page will say which.

No photo goes to any of them until processing is turned on.

How long things are kept

Your things stay until you delete them or ask for your account to be deleted. After that, backup copies are kept for up to 7 days, and a spare copy of your photos for up to 30 days. Then they're gone.

Cookies and trackers

Arrelo uses cookies only to keep you signed in. While you sign in or change your contact email, it also uses short-lived cookies to remember the email you typed and your Invite. There are no ads and no third-party trackers.

Get a copy, or delete your account

To get a copy of everything you've added, or to have your account deleted, email Ruben (see below). Deleting is done within 30 days.

Contact Ruben

Email Ruben at rgottardi+arrelo@gmail.com.