Back to home

Privacy Policy

Effective date: September 7, 2026

Last updated: October 6, 2026

Company: Tundra AI Labs, Inc., a Delaware corporation (“Tundra,” “we,” “us,” or “our”)

Service: Aries

Contact: support@tundraailabs.com

This Privacy Policy explains how Tundra AI Labs, Inc. (“Tundra,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use Aries and its related applications, integrations, and websites (collectively, the “Services”).

Aries is intended for business and professional use.

1. Information We Collect

Account and organization information

We may collect:

  • Your name, email address, and authentication information;
  • Your organization's name, settings, and preferences;
  • Information about authorized users and administrators;
  • Billing, transaction, and subscription information; and
  • Support requests and other information you send us.

Payment information may be processed by a payment provider or recorded through invoices. Tundra does not need or intend to collect full payment-card numbers through Aries.

Connected-system information

When you authorize a connection, Aries accesses information from the connected system as needed to provide the features you request. Depending on the integration, this may include:

  • Invoices, estimates, customers, and related business records;
  • Work orders, maintenance records, and support tickets;
  • Email messages or other communications;
  • Files, attachments, and records you select;
  • Information about employees, customers, vendors, or other business contacts; and
  • Data used to generate reports or run workflows.

The information available to Aries depends on the permissions granted through the connected system.

Credentials and authorization information

We collect OAuth tokens, API tokens, and related connection information needed to maintain integrations. We do not receive your password when a provider uses a standard OAuth authorization process.

Content and Outputs

We collect prompts, assistant conversations, workflow instructions, generated Outputs, reports, and workflow history.

Device and usage information

We may automatically collect:

  • IP address;
  • Browser and device information;
  • Dates, times, and duration of use;
  • Features viewed or used;
  • Diagnostic and error information; and
  • Security, audit, and activity logs.

We and our service providers may use cookies and similar technologies for authentication, preferences, security, analytics, and operation of the Services.

2. Sources of Information

We receive information:

  • Directly from you;
  • From administrators or other users within your organization;
  • From systems you authorize Aries to access;
  • Automatically when you use the Services; and
  • From service providers that help us operate, secure, or support Aries.

3. How We Use Information

We use information to:

  • Provide, operate, and support Aries;
  • Connect to systems you authorize;
  • Interpret, organize, summarize, and report on connected business data;
  • Generate drafts, recommendations, images, transcriptions, and other Outputs;
  • Run workflows you configure;
  • Authenticate users and manage accounts;
  • Process billing and transactions;
  • Monitor performance and troubleshoot problems;
  • Protect the Services, customers, and others from fraud, abuse, and security threats;
  • Communicate with you about the Services;
  • Comply with law and enforce our agreements; and
  • Analyze and improve the reliability, usability, and performance of our products.

We may use technical Usage Data and aggregated or de-identified information for analytics, benchmarking, and product development. We will not attempt to reidentify information that we maintain as de-identified.

We do not use identifiable connected-system business data to train a third party's general-purpose or foundation AI models.

We do not sell personal information or use it for third-party advertising.

4. Integrations and AI Providers

Aries connects to third-party systems only when authorized by you or your organization. These systems may include QuickBooks, Zendesk, MaintainX, Gmail, Outlook, and other business applications.

Information sent to or received from a connected system is also subject to that provider's terms and privacy practices. You may revoke access through Aries or the provider's account settings.

Where Aries accesses Google Workspace or Microsoft 365 data, our use and transfer of that data will comply with the applicable provider policies, including the Google API Services User Data Policy and its Limited Use requirements. Email content retrieved through Google APIs, such as message bodies and attachments, is excluded from the session recordings and network diagnostics we send to our product diagnostics provider.

Aries uses AI providers, including Google and Anthropic, to process information and generate Outputs. We send them only the information reasonably needed to provide the requested feature.

We configure our AI providers so Customer Data is not used to train their general-purpose or foundation models. Providers may temporarily process or retain information to provide their services, maintain security and reliability, prevent abuse, comply with law, or support particular features, subject to their agreements with Tundra.

5. How We Disclose Information

We disclose information only as described below.

Service providers

We use service providers to operate, secure, analyze, and support the Services. They may process information only for contracted purposes and subject to appropriate confidentiality and security obligations. Our current providers include:

  • Clerk — authentication and session management;
  • Google Cloud — application hosting, databases, storage, data warehousing, and infrastructure;
  • Google Gemini and Vertex AI — AI processing, image generation, and voice transcription;
  • Anthropic — AI processing for assistant and workflow features;
  • Resend — transactional and notification emails;
  • LogRocket — product diagnostics and session analytics;
  • LaunchDarkly — feature management and configuration; and
  • Email services — connections and drafting involving Gmail and Outlook accounts.

Tundra's primary application data is hosted on Google Cloud. Certain information is also processed by other providers as described above. We may update this list as the Services evolve and will provide notice of material changes.

Connected systems

We disclose information to connected systems when you direct Aries to retrieve information, draft communications, update records, or perform another requested action.

Legal and safety disclosures

We may disclose information when reasonably necessary to:

  • Comply with law, regulation, subpoena, court order, or legal process;
  • Protect the rights, safety, and security of Tundra, our customers, or others;
  • Investigate fraud, abuse, or security incidents; or
  • Establish, exercise, or defend legal claims.

Corporate transactions

Information may be disclosed or transferred in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of some or all of Tundra's business or assets. Any recipient will remain subject to this Privacy Policy until it provides notice of a replacement policy.

6. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy. Retention depends on the type of information:

  • Account and organization information is generally retained while the account is active and afterward as needed for billing, legal, fraud-prevention, and recordkeeping purposes.
  • Connected-system data, assistant conversations, Outputs, and workflow history are generally retained while needed to provide the Services or until deletion is requested.
  • Authorization credentials are retained while the associated connection remains active and are revoked or deleted after the connection is removed.
  • Security, audit, and diagnostic logs are retained for a limited period appropriate to security, troubleshooting, and legal needs.
  • Secure backups may retain information temporarily until they are overwritten through our regular backup cycle.

We may retain information longer when required by law, necessary to resolve a dispute or enforce an agreement, or needed to investigate fraud or a security incident. Aggregated and de-identified information may be retained longer.

You may request deletion by contacting support@tundraailabs.com. Deletion requests are subject to applicable law and reasonable technical limitations.

7. Your Choices

You may:

  • Update certain account information through the Services;
  • Disconnect an integration at any time;
  • Revoke access through a connected provider's settings;
  • Ask us to access, correct, provide, or delete personal information associated with your account; and
  • Manage available cookie or communications preferences.

Disconnecting a system prevents new access but does not automatically delete previously stored information. You may separately request deletion.

8. California Privacy Rights

This section applies to California residents to the extent the California Consumer Privacy Act, as amended (“CCPA”), applies to Tundra's handling of their personal information.

During the preceding twelve months, we may have collected the following categories of personal information:

  • Identifiers, such as names, email addresses, IP addresses, and account identifiers;
  • Customer-record and commercial information, such as organization, billing, subscription, invoice, and transaction information;
  • Internet or electronic-network activity, such as device information, activity logs, and interactions with the Services;
  • Professional or employment-related information contained in business accounts or connected systems;
  • Communications and other content submitted to or accessed by Aries;
  • Sensitive personal information, such as account credentials, authorization tokens, and the contents of certain communications; and
  • Inferences and Outputs generated from information processed through the Services.

We collect these categories from the sources and for the purposes described in this Policy. We may disclose them for business purposes to the categories of recipients described above.

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising, as “share” is defined by the CCPA. We have not knowingly sold or shared the personal information of anyone under 16.

We use sensitive personal information only to provide, secure, and maintain the Services and for other purposes permitted by the CCPA. We do not use it to infer characteristics about individuals for advertising or profiling.

Subject to applicable exceptions, California residents may have the right to:

  • Know the categories and specific pieces of personal information we have collected;
  • Access or obtain a portable copy of personal information;
  • Correct inaccurate personal information;
  • Request deletion of personal information;
  • Opt out of the sale or sharing of personal information; and
  • Limit certain uses or disclosures of sensitive personal information.

Because we do not sell or share personal information and use sensitive personal information only for permitted purposes, we do not currently provide separate sale, sharing, or sensitive-information opt-out links.

To submit a request, email support@tundraailabs.com with the subject line “California Privacy Request.” We may request information reasonably necessary to verify your identity and authority. An authorized agent may submit a request for you. We may require proof that you authorized the agent and may ask you to verify your identity directly.

We will not discriminate against you for exercising an applicable privacy right.

9. Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption in transit and at rest, access controls, logging, and monitoring. Tundra AI Labs, Inc. maintains commercial insurance coverage.

No security measure can eliminate every risk. You should use appropriate care when deciding what information to connect or submit.

10. Children

The Services are intended for business use and are not directed to anyone under 18. You must be at least 18 years old to use Aries, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy as the Services or legal requirements change. We will update the “Last updated” date and provide reasonable notice of material changes through the Services or by email.

12. Contact Us

Questions or privacy requests may be sent to:

Tundra AI Labs, Inc.
support@tundraailabs.com