Privacy policy.
Your safety data is some of the most sensitive you hold. This policy explains what we collect, why we collect it, and the lengths we go to keep it yours.
Last updated: June 16, 2026
This Privacy Policy describes how armsAI (“armsAI,” “we,” “us,” or “our”) collects, uses, and safeguards information when you use our website and the armsAI platform (together, the Services). By using the Services you agree to the practices described here.
Information we collect
We collect only what we need to run the Services and support your team:
- Account information — your name, work email, company, job title, and the credentials you use to sign in.
- Content you provide — the documents, risk assessments, audit records, incident reports, and other operational and safety data you upload or create in the platform.
- Usage data — how you interact with the Services, such as features used, pages viewed, and approximate timing, collected to keep the product reliable and to improve it.
- Technical data — IP address, browser type, device, and similar information your browser sends automatically.
How we use your information
- Provide, operate, and maintain the Services.
- Generate the risk assessments, audits, and answers you ask the platform to produce.
- Authenticate users, secure accounts, and prevent abuse.
- Respond to support requests and communicate about your account.
- Understand how the product is used so we can improve it.
- Meet our legal and regulatory obligations.
AI processing & confidentiality
armsAI is built so your safety data stays 100% confidential. We do not sell your data, and we do not send your content to third-party LLM providers. The models that power the platform run within infrastructure we control, and your content is never used to train models for any other customer. Your data stays yours.
How we share information
We do not sell your personal information. We share it only in these limited cases:
- Service providers — vetted vendors that host infrastructure, process payments, or provide support under contract, and only to the extent needed to deliver the Services.
- Within your organization — content and activity are visible to other members of your organization according to the roles and permissions you set.
- Legal requirements — where we are required to by law, regulation, or valid legal process, or to protect the rights, safety, and security of our users and the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to the protections in this policy.
Data security
We protect your information with encryption in transit and at rest, access controls, and ongoing monitoring. No system is perfectly secure, but we treat your operational data with the standard of care it deserves and work continuously to harden our defenses.
Data retention
We keep your information for as long as your account is active or as needed to provide the Services. When you close your account, we delete or anonymize your data within a reasonable period, except where we are required to retain it to meet legal, accounting, or regulatory obligations.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below. We will not discriminate against you for doing so.
International transfers
We may process and store information in countries other than where you are located. When we do, we use appropriate safeguards to protect your information consistent with this policy and applicable law.
Cookies
We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings; disabling some may affect how the Services work.
Children’s privacy
The Services are intended for business use and are not directed to anyone under 16. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Continued use of the Services after an update means you accept the revised policy.
Contact us
Questions about this policy or how we handle your data? Reach us at kern@armsai.net or through our contact page.