This policy explains how arethino (Arethine Institute) handles personal data, in line with the EU General Data Protection Regulation (GDPR).
1. Two roles
- Your account data (email, login, plan, usage counts): we are the controller.
- People you add (names, roles, companies, descriptions, photos, notes): you are the controller, we process it only on your instructions to provide the service.
2. Where data is stored
Data is stored in a managed database and private file storage hosted in the European Union. Each account's data is isolated by access rules; other users cannot see it. Sharing an interaction with a co-organiser exposes only that interaction — never your other interactions, your People Library or your private notes.
3. Imported files
Files you upload for AI import are processed in memory and are not stored. Only the list of people you review and confirm is saved.
4. AI and web search
For AI import and public-information search, the relevant text is sent to our AI and search sub-processors solely to produce suggestions. It is not used to train models. Search looks only at publicly available sources, and every suggestion is saved only after you confirm it; its sources are shown to you.
5. Retention
Your data is kept while your account is active. When you delete an interaction, person or account, the data is removed (backups within 30 days).
6. Your rights
You may access, correct, export or delete your data, and object to or restrict processing. People listed in a user's workspace should contact that user as controller; we will assist them. Contact connect@arethine.com. You may also complain to the Slovenian Information Commissioner (Informacijski pooblaščenec).
7. Cookies
We use only technically necessary storage for login and language choice. No advertising or tracking cookies.