1. Overview
This Privacy Policy explains how Arush Labs ("Arush Labs", "we", "us", "our") collects, uses, discloses and safeguards information when you visit arushlabs.vercel.app, use Arush Automation, or interact with any other Arush Labs product or service (together, the "Services").
By using the Services, you agree to the collection and use of information as described here. If you do not agree, please do not use the Services.
2. Data We Collect
- Account data — name, business name, email address, phone number and password (hashed) when you sign up via Firebase Authentication.
- WhatsApp & messaging data — messages, contact numbers and metadata exchanged through the WhatsApp Cloud API that you connect to your Arush Automation account, used to power auto-replies, AI responses and the Inbox.
- Business Brain data — documents, PDFs, menus and price lists you upload so the AI can answer from your business knowledge.
- Usage data — pages visited, features used, device/browser type and IP address, collected for analytics and security.
- Billing data — plan, subscription status and transaction references. Card details are handled directly by our payment processor; we do not store full card numbers.
3. How We Use Data
- To operate core features — Inbox, Automation Builder, AI Agent, Lead Manager, Analytics and Business Brain.
- To generate AI responses, follow-ups, lead scores and daily reports using the Gemini API and your connected knowledge base.
- To send service notifications, security alerts and, where you've opted in, product updates.
- To detect abuse, enforce our Acceptable Use Policy and keep the platform secure.
- To improve the Services through aggregated, de-identified usage analysis.
4. AI & Third-Party Processing
Certain features send relevant conversation or document content to our AI provider (Google Gemini API) and, where connected, Meta's WhatsApp Cloud API, solely to generate the response or automation you requested. These providers process data under their own terms; we select providers that offer enterprise-grade data protection and do not permit our customer data to be used to train their general-purpose models unless explicitly stated otherwise in our AI Usage Policy.
5. Storage & Security
Data is stored in Firebase Firestore with access controlled through Firebase Authentication and role-based permissions. We apply encryption in transit (TLS) and at rest where supported by our infrastructure providers, rate limiting, webhook signature validation, and audit logging on sensitive actions. See our Security Policy for details.
6. Data Retention
We retain account and conversation data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes and enforce agreements. You can request earlier deletion — see Section 8.
7. When We Share Data
We do not sell personal data. We share data only: with sub-processors needed to run the Services (e.g. Firebase, WhatsApp Cloud API, Gemini API, payment processor); when required by law, court order or governmental request; or with your explicit consent.
8. Your Rights
You may request access to, correction of, or deletion of your personal data, and may withdraw consent for optional processing (e.g. marketing messages), by writing to hello@arushlabs.com. We will respond within a reasonable time and in line with applicable law.
9. Children's Privacy
The Services are intended for businesses and individuals aged 18 and above. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy as the Services evolve. Material changes will be reflected by updating the "last updated" date above, and where appropriate, notified to account holders.
11. Contact
Questions about this policy can be sent to hello@arushlabs.com.
