Privacy Policy

Capitalized terms in this Privacy Policy have the meanings set out below.

• “Service” means Arden — the text-messaging assistant — together with textarden.com and any companion dashboards we operate.
• “You” means the individual using the Service, identified by the phone number you message Arden from.
• “Personal Data” means any information that identifies or can reasonably be linked to you.
• “Durable content” means the reminders, tasks, lists, and notes we store in our own database on your behalf so Arden can act on them across conversations. Calendar events are handled differently — see Section 2.
• “Company,” “we,” “us,” “our” means Arden Intelligence Inc.

Personal Data. Your phone number (your identity on the Service — there are no separate usernames or passwords), any profile details you tell Arden about yourself (like your name or timezone), the content of the messages you send, and your durable content in our database. If you connect Google Calendar, we hold an authorization token that lets Arden read and write the specific events you ask about — the events themselves stay in your Google Calendar, not in our database. We also hold your billing status and history through Stripe.

Attachments. If you send Arden a photo or PDF, we process it to carry out your request — for example, pulling dates off a syllabus — and don't keep the file itself once that request is handled.

Usage Data. We automatically collect operational data needed to run the Service — message delivery and read-receipt timestamps, error and diagnostic logs, and, for the web dashboards, standard request data like IP address and browser type.

Arden itself runs over text messaging, not a browser, so there is no in-product tracking to speak of. Our marketing site (textarden.com) uses Vercel Analytics, a cookieless analytics tool that reports aggregate traffic trends without tracking you across other sites. We do not run advertising pixels — no Meta Pixel, no TikTok Pixel, no cross-context behavioral advertising trackers — anywhere on textarden.com, including this policy page.

We use the information above to:

• Operate Arden — interpret your messages, take the actions you ask for, and deliver replies, reminders, and follow-ups.
• Maintain your durable content so it persists correctly across conversations.
• Provide the read-only companion dashboard.
• Process payments and manage your subscription and trial period.
• Secure the Service, prevent abuse, and debug problems.
• Contact you about your account, billing, or material changes to our terms.

We do not train AI models on your data. We do not use the content of your messages, durable content, or calendar data to develop, improve, or train OpenAI's models or any other third-party foundation model, and our contracts with our sub-processors prohibit them from doing so either.

We do not sell your Personal Data. We share information only in these circumstances:

• Service providers who process data on our behalf and under our instructions — see Section 11.
• Business transfers — if Arden Intelligence Inc. is involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction, subject to this policy.
• Legal compliance — where required by law or valid legal process.
• With your consent — for any other purpose you've agreed to.

We don't participate in cross-context behavioral advertising, and we don't share your data with ad networks or data brokers for their own advertising purposes. If that ever changes for the marketing site, we'll update this policy and its “Last updated” date before doing so, not after.

We keep your durable content and profile for as long as your account is active, so Arden can act on it across conversations. Usage and diagnostic logs are retained only as long as needed for debugging and security, and are deleted or anonymized on a rolling basis after that. You can ask Arden to delete specific items at any time, or contact us to delete your account and associated data entirely.

We and our service providers may process information in the United States and other countries whose data protection laws may differ from your own. By using the Service, you consent to your Personal Data being transferred to and processed in these jurisdictions. Where required, we apply appropriate safeguards for cross-border transfers.

You can review, correct, or delete individual pieces of durable content directly by texting Arden. You can also delete your entire account this way, in three steps designed so it can't happen by accident: text the exact phrase “delete my account”, reply “yes” when asked to confirm, then reply with the one-time code Arden texts you back. Each step has to match exactly — any other reply cancels the request, and you'd need to start over from the first step; each step also expires after 15 minutes if you don't respond. Once the final code is confirmed, deletion is immediate: your durable content, profile, and conversation history are erased, and any active subscription is automatically canceled. You can text Arden again at any time afterward to start fresh as a new user.

For a full data export, or any account-level request you'd rather not handle over text, email contact@tryarden.io. We'll act on those requests within 30 days, subject to any data we're required to retain for legal, billing, fraud prevention, or dispute-resolution purposes.

Depending on where you live, you may have additional rights under laws like the EU/UK GDPR or U.S. state privacy laws, including rights to access, correct, delete, restrict, or object to processing, and to lodge a complaint with a supervisory authority.

Where GDPR applies, we process your Personal Data on these bases:

• Contract performance — to provide the Service you've signed up for.
• Legitimate interests — to secure the Service, prevent fraud, and improve reliability.
• Consent — where you've explicitly agreed, such as connecting Google Calendar.
• Legal obligation — where we're required to process or retain data by law.

Beyond the sharing described in Section 5, we may disclose information where reasonably necessary to comply with a legal obligation, respond to a valid law enforcement request, defend our legal rights, prevent fraud or abuse, or protect the safety of our users or the public.

We use commercially reasonable technical and organizational safeguards, including encryption in transit, per-user scoped database access, and credential storage kept separate from the data used to generate Arden's responses. Access to your data by our own team is limited to the engineers who need it to build, operate, or debug the Service, and to support requests you initiate. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

If a security incident affects your Personal Data, we will investigate and, where required by law, notify you and any applicable regulator without undue delay, along with guidance on steps you can take to protect yourself.

Arden may occasionally point you to a third-party website or service (for example, a Stripe checkout link or a Google authorization page). We don't control those sites and aren't responsible for their content or privacy practices — review their policies separately.

Google Calendar access is opt-in and scoped to exactly what Arden needs to do what you asked: read, create, update, or delete the events you've told it about. The events themselves are never copied into our database — Google remains the source of truth, and Arden simply calls the Calendar API on your behalf each time. Data we receive back through that API is used only to answer you in the moment; it isn't retained for any other purpose, isn't repurposed for advertising, and isn't used to build, tune, or evaluate any AI model, ours or anyone else's. This matches the Limited Use requirements of the Google API Services User Data Policy. Revoke access anytime from your Google Account's permissions page, or just ask Arden to disconnect it.

We may update this policy from time to time. When we do, we'll revise the “Last updated” date at the top of this page, and for material changes, we'll text you directly rather than relying on a silent update.

Questions about this policy or your data? Email us at contact@tryarden.io.