Aries — Privacy Policy

1. What This Policy Covers

This Privacy Policy explains how Aries collects, uses, stores, and protects information when users connect third-party business systems and use our AI-powered workflow tools.

It applies to all Aries products, extensions, and websites. For a plain-language overview of our data practices, see our How We Use Your Data page.

2. Access to Connected Services

Aries connects to third-party systems that you or your organization authorize, solely to provide core workflow automation features. Connected services may include:

• • Helpdesk platforms (for example, Zendesk) — used to read and update tickets as part of workflows you configure.
• • Maintenance and work order systems (for example, MaintainX) — used to read and update work orders as part of workflows you configure.
• • Accounting software (for example, QuickBooks) — used to read and update accounting records as part of workflows you configure.
• • Email and calendar providers (for example, Google and Microsoft) — used to read messages, labels, and availability and to create drafts as part of workflows you configure. Aries does not send emails without explicit user action.

Connections are established through OAuth or API credentials that you provide. The access Aries requests from each service is scoped to what the features you enable require, and you can disconnect a service at any time.

3. Information We Collect

4. How We Use Data

We use data to:

• • Classify, summarize, and act on data from your connected systems
• • Provide AI-generated suggestions and workflows
• • Maintain security and detect abuse
• • Improve performance and user experience
• • Provide support and troubleshooting
• • Comply with legal obligations

We do not sell or share user data for advertising.

We may use aggregated and anonymized data for analytics or product improvement, and this data never includes content from your connected systems.

Content from your connected systems is not used for analytics, product improvement, advertising, or any purpose unrelated to providing the core Aries features.

5. How We Process Data from Connected Systems

We access content from your connected systems only to provide core Aries features, such as classification, summarization, and workflow automation. We do not store that content unless strictly necessary to provide the immediate feature the user requested, and any stored content is deleted when no longer needed.

We do not:

• • Sell data from your connected systems
• • Share it with advertisers
• • Train third-party models on your identifiable data
• • Use it for any purpose unrelated to providing the Service

Aggregated or anonymized data never includes content from your connected systems.

6. AI Processing

Aries uses machine learning models to generate outputs such as classifications and summaries. When required to provide these features, Aries may send content from your connected systems to approved AI processors (such as Google Gemini) solely to generate the specific output the user has requested. These processors are contractually prohibited from retaining your data or using it for model training, and where Google user data is involved, all processing complies with Google's Limited Use Policy. Your data is never used to fine-tune, improve, or develop any machine learning models.

7a. Google API Limited Use Compliance

Where you connect Google services (such as Gmail or Google Calendar), Aries's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, profiling, or any purpose other than providing core user-facing features.

7b. Analytics, Cookies, and Improvement Tools

We use the following third-party analytics services to understand usage patterns, detect errors, and improve our Services. Google Analytics does not have access to content from your connected systems or any Google user data obtained through restricted or sensitive scopes. LogRocket session replays may include content displayed in the Aries interface and are used solely to diagnose product issues, never for advertising or profiling.

• • Google Analytics (GA4) — collects anonymized usage data such as pages visited, session duration, and general location. Google may set cookies (e.g., _ga, _ga_*) on your device. See Google's Privacy Policy.
• • LogRocket — records session replays to help us diagnose bugs and improve the user experience. See LogRocket's Privacy Policy.

These tools may place cookies or similar technologies on your device. You can control or disable cookies through your browser settings, though this may affect site functionality.

8. Subprocessors

We share user data with the following subprocessors, each contractually required to protect your data consistent with this Policy:

• • Clerk — authentication and session management
• • Google Cloud — hosting, database, and infrastructure
• • Google Gemini — AI inference for classification, summarization, and drafting across connected systems
• • Resend — transactional emails (welcome emails and notifications)
• • Google Analytics — anonymized usage analytics (does not receive content from your connected systems or any Google user data from restricted scopes)
• • LogRocket — session recording for bug diagnosis. Recordings may include content displayed in the Aries interface and are used solely to troubleshoot product issues, never for advertising or profiling

AI inference providers are contractually prohibited from retaining data from your connected systems or using it for model training. We will notify users of material subprocessor changes.

9. Data Transfers

Data may be processed in the United States or other jurisdictions where our subprocessors operate. Where required, we use appropriate legal safeguards.

10. Data Retention & Deletion

We retain data only as long as necessary to provide the Service or meet legal obligations. Content from your connected systems is retained only temporarily to process user actions and is not stored long-term unless explicitly required for a user-facing feature. You may request deletion at any time by emailing support@tundraailabs.com. Upon termination, we will delete or anonymize data within a commercially reasonable timeframe unless otherwise required by law.

11. Your Rights

Depending on your jurisdiction, you may request to:

• • Access your data
• • Correct inaccurate data
• • Delete your data
• • Opt out of non-essential processing
• • Request a copy of your data

Requests should be sent to support@tundraailabs.com.

You may disconnect any connected service from Aries at any time. If you have connected Google services, you may also revoke Aries's access to your Google account at any time by visiting: https://myaccount.google.com/permissions.

12. Children's Privacy

Aries is not intended for individuals under 18. We do not knowingly collect children's data.

13. Security

We take commercially reasonable measures to protect data. No security measure is perfect; you use the Service at your own risk.

14. Changes to This Policy

We may modify this Privacy Policy periodically. We will notify users of material changes.

15. Contact

support@tundraailabs.com