Legal

Privacy Policy

Last updated: October 27, 2026

Draft for review. This policy is being reviewed by a qualified US attorney.

This policy explains what personal information Arjava ("we," "us") collects through this website, why we collect it, who we share it with, and the choices and rights you have under US federal and state law.

1. Who we are

Arjava. For any privacy question or request, contact us using the form on our website and start your message with "Privacy request."

2. What information we collect

In the past 12 months, we have collected the following categories of personal information (using the category names from the California Consumer Privacy Act):

• Identifiers: your name and work email address, from the contact form or your emails to us.
• Professional information: your company name and the business problem you describe.
• Your preferences: whether you agreed to be contacted and whether you want updates.
• Technical information: when your browser loads our website fonts from Google Fonts, Google receives your IP address and basic browser details (see section 4).

We use Google Analytics, loaded through Google Tag Manager, only if you click Accept on our cookie banner. It then collects the pages you visit, the site that referred you, your browser and device type, and your approximate location based on your IP address. If you click Reject, or don't choose, Google Analytics and Google Tag Manager do not load. We do not use advertising tools. Your cookie choice is saved only in your own browser (see section 11).

We collect this information directly from you, except for the technical information described above. We do not knowingly collect sensitive personal information (such as health, financial account, Social Security or other government ID details) through this website. Please don't include it in the contact form.

3. Why we use it

• To reply to your inquiry, book a demo and prepare a pilot proposal.
• To send you occasional marketing emails, but only if you checked the marketing emails box.
• To understand how the site is used and improve it, using Google Analytics, only if you click Accept.
• To keep the site secure, prevent fraud and misuse, and meet our legal obligations.

This policy covers this website. If you become a customer, how we handle your company's data inside our systems during a pilot or subscription is set out in our written agreement with you.

4. Who we share it with

• Service providers who help us run the website and our business, such as hosting, email and customer-management tools. They may use your information only to provide services to us, under written contracts.
• Google Fonts: to show our fonts, your browser loads them from Google, which receives your IP address and basic browser details. Google's own privacy policy applies to that information.
• Google Analytics and Google Tag Manager: only if you click Accept on the cookie banner, Google receives information about your visit (see section 2) to provide website analytics to us. Google's own privacy policy applies to that information.
• Web3Forms: when you send our demo or unsubscribe form, what you typed is sent through Web3Forms, a form-delivery service, which emails it to us.
• Companies in our group that help us deliver our services, under the same privacy commitments.
• Government authorities or others when the law requires it, or to protect our rights, users or the public.
• A buyer or successor if our business is merged, sold or reorganized.

We do not sell your personal information for money, and we do not use advertising cookies. We use Google Analytics only with your consent. Under certain US state laws, sharing information with an analytics provider may count as a "sale" or "sharing." You can opt out of this at any time (see section 9).

5. Where your information is stored and processed

Our engineering team is based in India. Your information may be transferred to, stored and processed outside the United States, including in India, and in other countries where our service providers operate. Data protection laws in these countries may differ from US law. We use reasonable contractual, technical and organizational safeguards to protect your information wherever it is processed.

6. How long we keep it

We keep each type of information only as long as we need it:

• Contact form details (name, work email, company and your message): up to 2 years after our last contact with you, unless you become a client. Client records are then kept under our written contract with you.
• Marketing preferences: until you unsubscribe. After that, we keep only a record of your opt-out, so we don't email you again.
• Your cookie choice: saved in your own browser until you clear it or change it. We do not receive it.
• Analytics data: collected only if you click Accept. We keep it for no longer than 2 years.

After these periods, we delete or de-identify the information, unless the law requires us to keep it longer.

7. California Residents

To the extent the California Consumer Privacy Act (CCPA), as amended by the CPRA, applies to us, California residents have the following rights:

• Right to know what personal information we collect, use and disclose
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information
• Right to limit the use of sensitive personal information
• Right not to be discriminated against for using these rights

We do not collect sensitive personal information through this website.

How to make a request

Contact us using the form on our website and start your message with "Privacy request." We will verify your request by matching information you give us with information we already have, such as the email address you used, and we will reply within 45 days. If we need more time (up to another 45 days), we will tell you why. You can also have an authorized agent make a request for you; we may ask for proof that you gave them permission.

Global Privacy Control

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of your personal information (see section 10).

California "Shine the Light"

California residents may ask whether we disclosed personal information to third parties for their own direct marketing purposes in the past year. We do not do this.

8. Other US States

To the extent these laws apply to us, residents of other states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, and others as new laws take effect, have similar rights. Depending on where you live, and subject to legal exceptions, you have the right to:

• Know / access: confirm whether we process your personal information, learn what we have collected, and get a copy in a portable format.
• Delete: ask us to delete the personal information we hold about you.
• Correct: ask us to fix personal information about you that is inaccurate.
• Opt out: stop any sale of your personal information, its use for targeted advertising, and profiling that has legal or similarly significant effects. (We do not do this kind of profiling.)
• Non-discrimination: we will not deny you service, charge you a different price or give you a different level of service for using your rights.

How to make a request

Use the same ways described for California residents above: contact us using the form on our website. We will verify your request and reply within the time your state's law requires.

Appeals

If we decline your request, you can appeal by replying to our decision email with "Appeal" in the subject line. We will respond to your appeal within the time your state's law requires (generally 45 to 60 days) and explain our decision in writing. If you are not satisfied, you can contact your state Attorney General.

9. Do Not Sell or Share My Personal Information

We do not sell or share your personal information.

If you would still like to record your choice, or if this ever changes, you can opt out of any sale or sharing of your personal information, and of targeted advertising, in any of these ways:

We do not knowingly sell or share the personal information of consumers under 16.

10. Global Privacy Control

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser, and we will not load Google Analytics or Google Tag Manager for that browser.

11. Cookies

When you first visit, a banner asks you to Accept or Reject Google Analytics. If you click Accept, Google Analytics (loaded through Google Tag Manager) sets analytics cookies, such as _ga, to tell visits apart. If you click Reject, or don't choose, no analytics cookies are set. Your choice is saved only in your own browser (using its local storage), so the banner doesn't show again. We do not receive it. Clearing your browser's site data also removes any analytics cookies. You can change your choice at any time with the "Change cookie settings" button in section 9, or by clearing your browser's site data.

12. Marketing emails (CAN-SPAM)

We send marketing emails only if you checked "Send me occasional marketing emails." Every marketing email we send will clearly identify us, include our postal address, and include an unsubscribe link. You can also stop marketing emails at any time on our unsubscribe page. We will process unsubscribe requests within 10 business days. Even after you unsubscribe, we may still send you non-marketing messages about an inquiry or project you started with us.

13. Children's privacy (COPPA)

This website is meant for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us using the form on our website, and we will delete it.

14. Security

We use reasonable administrative, technical and physical safeguards to protect your information. No website or online service is completely secure, so we can't guarantee absolute security.

15. Data breach notification

If we discover a security breach that affects your personal information, we will notify you, and any regulators where required, without unreasonable delay and as required by the data breach notification laws of your state. We will tell you what happened, what information was involved, what we are doing about it, and what you can do to protect yourself.

16. Changes to this policy

We may update this policy from time to time, and we review it at least once every 12 months. We will change the "Last updated" date above, and for material changes we will give more prominent notice.

17. Contact us

Arjava
Contact us using the form on our website.