Trust & Privacy

Privacy policy.

What we collect from the site and from customer engagements, why we collect it, how long we keep it, who we share it with, and the rights you have. Written to be read, not to hide.

In short

US processing is the default, including models, logs and backups; regions are agreed with each customer, including EU processing for EU customers. Neither LuminOne nor its providers train on customer data unless you explicitly request that service. Retention and deletion are agreed with you and governed by the signed agreement.

What we collect

Data we collect

Public website analytics and session replay

We use PostHog to understand visits and interactions on this public website, including a sample of session replays that show how visitors navigate public pages. Input values are masked, and inquiry forms, interactive demo content, generated dossiers and embedded booking calendars are excluded from replay. We do not send names, email addresses or the text you enter into these forms to PostHog. Website analytics and replay follow your cookie choice; you can change that choice or withdraw consent using Cookie preferences where shown. This website analytics setup does not record activity inside a customer ARIA workspace.

Website data

When you visit our site or contact us, we collect basic interaction data (pages visited, approximate location from your IP address, device and browser) and anything you send us directly, such as your name, work email, and message when you submit an inquiry, book an introductory call or email us.

Interactive demo

If you run our interactive demo, we process the public company website you enter and standard request metadata to generate a sourced example, and, only if you ask us to send you the result, your work email. We do not need or ask for personal or confidential data to run the demo.

Customer engagement data

During an engagement, ARIA processes the account, sponsor, and market data you scope to us, for example CRM account records, contact and activity notes, and the public market signals you ask us to monitor. We process only the systems and scopes you approve.

What we collect from site visitors

We use third-party analytics and visitor-identification services that may identify the company, and in some cases the individual, visiting this site, using data those providers license from other sources. We use this only to understand interest in ARIA and to follow up with potential business contacts. You can ask us to delete anything we hold about you at any time.

What we do not do

We do not sell personal data. Neither LuminOne nor its providers train on customer data unless the customer explicitly requests that service. The agreed service defines that training scope. We do not enrich the data you scope to us with purchased personal data, and we are not a consumer product.

Why

How we use it

To run the product

We use the data you scope to us to generate ARIA's researched, drafted, and sourced output for your team to review and approve. We use website and contact data to respond to you and to operate and improve the site.

Model training requires your explicit request

Neither LuminOne nor its providers train on customer data unless the customer explicitly requests that service. The signed customer agreement defines its scope. We do not sell personal data.

Legal basis

For visitors and customers in the EU and UK, we rely on our legitimate interest in operating, securing, and improving ARIA, on performance of our agreement with you, and on your consent where it is required (for example, marketing email).

Sharing & retention

Where it goes, how long it stays

Who we share with

We use service providers for hosting, model inference and operational tooling within the processing region agreed with the customer. Processing includes models, logs and backups. Discuss the applicable providers and data access as part of the engagement. We may disclose data if required by law. We do not sell your data.

Retention

Customer retention, deletion and data-return requirements are agreed with the customer and governed by the signed agreement. Contact and website data is kept while it is useful for our relationship and then deleted or anonymized.

Processing regions

US processing is the default for all customer processing, including models, logs and backups. Regions are agreed with each customer, including EU processing for EU customers. The signed customer agreement governs the applicable region and data requirements.

Your rights

Your data, your call

Your rights

You can ask us to access, correct, export, delete, or restrict the personal data we hold about you, object to certain processing, and withdraw consent at any time. If you are in the EU or UK, you also have the right to complain to your data-protection authority. We will respond within 30 days and will not charge you to exercise these rights.

How to exercise them

Email [email protected] and tell us what you would like us to do. We may need to verify your identity before acting on a request.

Contact

Questions about your data?

The data controller is Arcwell Foundry LLC (doing business as LuminOne), a Massachusetts limited liability company. For any privacy question or request, reach us directly by email and we will respond.

Email [email protected].

Make a privacy request Read our security posture

Last updated October 3, 2026.