Last updated June 12, 2026
Privacy Policy
Aruwo™ Effective Date: June 12, 2026 Last Updated: June 12, 2026
1. Introduction
Aruwo™ ("Aruwo", "we", "our", or "us") operates the platform available at aruwo.dev — an AI-powered Startup Operating System that helps founders build, launch, and scale companies using artificial intelligence.
This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website, platform, and services (collectively, the "Services").
By creating an account or using our Services, you agree to the practices described in this policy. If you do not agree, please do not use our Services.
2. Who We Are
Aruwo™ is incorporated as a Delaware C-Corporation. Our data controller contact for privacy matters is:
Email: privacy@aruwo.dev Address: Aruwo™ Inc., [Registered Address], Delaware, United States
3. Data We Collect
3.1 Account & Identity Data
- Name, email address, password (hashed)
- Country, industry focus, technical level (collected during onboarding)
- Profile photo (if provided)
- Google OAuth profile data (if you sign in with Google)
3.2 Project & Usage Data
- Startup ideas, prompts, and descriptions you submit to the AI Builder
- Generated code, schemas, and files created on the platform
- Project names, descriptions, industry, business model
- Files stored in your workspace
- Prompts and conversation history with the AI Builder
3.3 Payment & Billing Data
- Subscription plan and billing history
- Payment method type (card, Mobile Money, bank transfer)
- Transaction IDs and amounts
- We do not store full card numbers or Mobile Money account credentials — these are handled directly by our payment processors (Stripe, Flutterwave, Paystack)
3.4 GitHub & Integration Data
- GitHub username and repository access (if you connect GitHub)
- Repository names, commit history, and linked projects
- OAuth access tokens (stored encrypted)
3.5 Domain Data
- Domains you search for or register through the platform
- DNS records and domain configuration
- Registrant contact information (required by domain registrars)
3.6 Technical & Device Data
- IP address, browser type, operating system
- Device identifiers
- Pages visited, time spent, clicks, and navigation patterns
- Error logs and performance data
3.7 Communications
- Support messages and tickets
- Feedback, survey responses
- Email correspondence with our team
4. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Providing and operating the Services | Contract performance |
| Processing payments and managing subscriptions | Contract performance |
| Generating AI outputs from your prompts | Contract performance |
| Sending transactional emails (receipts, deployment notifications) | Contract performance |
| Improving platform features and AI performance | Legitimate interests |
| Preventing fraud, abuse, and unauthorized access | Legitimate interests / Legal obligation |
| Sending product updates and marketing (with opt-out) | Consent |
| Complying with legal obligations | Legal obligation |
| Analytics and platform performance monitoring | Legitimate interests |
We do not sell your personal data to third parties. We do not use your code or startup ideas to train AI models without your explicit consent.
5. AI and Your Data
When you use the Aruwo™ AI Builder:
- Your prompts are sent to Anthropic (Claude API) for processing. Anthropic processes this data as a sub-processor under their API terms. Anthropic does not use API inputs to train their models by default.
- Your generated outputs (code, schemas, plans) are stored in your Aruwo™ workspace and belong to you, subject to Section 6 of our Terms of Service.
- Conversation history is retained to provide context for follow-up prompts. You can delete your conversation history at any time from your project settings.
6. Sharing Your Data
We share data only in the following circumstances:
6.1 Service Providers (Sub-processors)
We use the following third-party processors to operate our Services:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | US / EU |
| Anthropic | AI code generation (Claude API) | United States |
| Stripe | Card payment processing | United States |
| Flutterwave | Mobile Money, bank transfer, card payments | Nigeria / Africa |
| Paystack | Card and Mobile Money payments | Nigeria |
| OpenSRS / Tucows | Domain registration and DNS | Canada |
| GitHub (Microsoft) | Code repository hosting | United States |
| Vercel | Application deployment | United States |
| Resend / Supabase | Transactional email delivery | United States |
| OAuth login | United States |
Each provider is bound by data processing agreements and operates under applicable data protection laws.
6.2 Legal Requirements
We may disclose your data if required by law, court order, or government authority, or to protect the rights, property, or safety of Aruwo™, our users, or the public.
6.3 Business Transfers
If Aruwo™ is acquired, merged, or undergoes a restructuring, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
6.4 With Your Consent
We may share data in other ways if you explicitly authorize it.
7. International Data Transfers
Aruwo™ operates globally. Your data may be transferred to and processed in countries outside your home country, including the United States, where our primary infrastructure is hosted.
For users in the European Economic Area (EEA), United Kingdom, or countries with equivalent transfer restrictions, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
For users in Africa, we comply with:
- Nigeria Data Protection Act (NDPA) 2023 and NDPR
- South Africa's POPIA (Protection of Personal Information Act)
- Kenya's Data Protection Act 2019
- Other applicable national data protection laws
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after deletion |
| Project files and generated code | Duration of subscription + 30 days |
| AI conversation history | 12 months rolling, or until manually deleted |
| Payment records | 7 years (legal/tax requirement) |
| Support communications | 3 years |
| Technical logs | 90 days |
When your account is deleted, we permanently remove your personal data within 30 days, except where retention is required by law.
9. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your personal data ("right to be forgotten")
- Portability — receive your data in a structured, machine-readable format
- Restriction — request that we limit how we process your data
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw Consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, email privacy@aruwo.dev. We will respond within 30 days.
If you are in Nigeria, you may also lodge a complaint with the Nigeria Data Protection Commission (NDPC). If you are in South Africa, you may contact the Information Regulator. If you are in the EEA, you may contact your national data protection authority.
10. Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Encrypted storage of OAuth tokens and API keys
- Role-based access controls
- Regular security audits
No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact security@aruwo.dev immediately.
11. Children
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at privacy@aruwo.dev and we will delete the account promptly.
12. Cookie Policy
We use cookies and similar tracking technologies. See our full Cookie Policy for details and to manage your preferences.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the Services after that date constitutes acceptance.
14. Contact
Aruwo™ Inc. privacy@aruwo.dev aruwo.dev/legal/privacy