Privacy Policy

1. Introduction and Scope

Arrivd ("Arrivd," "we," "us," or "our") operates the Arrivd mobile application and the website at arrivd.ai (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices and rights you have. By creating an Arrivd account and connecting your email, you agree to the practices described here.

Arrivd is a California corporation, California Entity Number B20260146558, with its principal office in Fair Oaks, California.

2. Information We Collect

We collect the following categories of information:

• Account information: the email address you use to sign up, and authentication credentials managed through Google OAuth. We do not receive or store your Gmail password.
• Email content from your connected Gmail account: the sender, subject line, date, and message body of messages our system identifies as order or shipping related. Section 5 describes how this content is handled and how long it is kept.
• Order and shipping information derived from your email: retailer name, order number, item description, tracking number, carrier, delivery status, and relevant dates.
• AI processing records: a copy of the email content we send to our AI processing provider and the response we receive back, described in Sections 5, 6, and 11.
• Device and usage information: device type, operating system, app version, and basic analytics about how you use the Service, for example which screens you view.
• Payment information: if you subscribe, payment is processed by our third-party payment providers. We do not store full payment card numbers.

3. How Arrivd Uses Your Connected Email

When you connect your Gmail account, Arrivd uses read-only access solely to identify order confirmation and shipping emails. Arrivd cannot send, delete, or modify anything in your inbox. You can revoke this access at any time, as described in Section 11.

4. What We Extract

From order and shipping emails, Arrivd extracts the information needed to track your packages: retailer name, order number, item description, tracking number, carrier, delivery status, and relevant dates. This extracted order information is stored in your Arrivd account so your dashboard stays current and syncs across your devices.

5. How We Handle Email Content

This section describes what happens to the content of your email. We have written it to be accurate rather than simplified, so that you can make an informed decision about connecting your inbox.

• To identify and extract your order details, we send the sender, subject line, date, and message body of relevant emails to our AI processing provider, as described in Section 6. The message body is cleaned of formatting before it is sent. It is not redacted, which means it may include personal details that appear in the original message.
• While an order is being processed, the message body is stored in our database.
• Once the order and its related delivery events are fully reconciled, we strip the message body from our database. The sender and subject line are retained.
• If a message never finishes reconciling, for example because the delivery events never complete, the message body remains in our database until you disconnect your Gmail account or delete your Arrivd account.
• We retain a copy of the content we send to our AI processing provider and the response we receive, in an internal processing log. That log is retained until you disconnect your Gmail account or delete your Arrivd account. It is not deleted on a fixed schedule before that point.
• We do not store emails unrelated to your orders, and we do not store attachments.
• Email content is not stored in our job queue, application cache, or object storage. Queued jobs carry record identifiers only, and failed jobs are cleared after 48 hours. Where an extraction fails to parse, our application logs may record a short excerpt of the AI provider's response. They do not record the original email.

6. AI Processing and Our AI Provider

Arrivd uses Anthropic (Claude), accessed through Anthropic's API, to read order and shipping emails and extract the order details described in Section 4. The same provider powers the in-app AI assistant that answers questions about your orders.

• What we send: the sender, subject line, date, and cleaned message body of emails our system identifies as order or shipping related.
• Training: under Anthropic's Commercial Services Agreement, Anthropic does not use content submitted through its API to train its models. Your email content is not used to train Anthropic's models or ours.
• Retention by Anthropic: Anthropic deletes the content we send, and the responses it returns, within 30 days of receipt or generation. Anthropic may retain that content for longer where it is required to comply with law or to enforce its Usage Policy. Where a submission is flagged by Anthropic's automated safety systems as violating that policy, Anthropic may retain it for up to two years, and related safety classification scores for up to seven years.
• We do not send your email content to any other artificial intelligence or machine learning provider.

7. Google API Services Compliance

Arrivd's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Gmail data is used only to provide the package tracking and order assistant features that are prominent in the app.
• Gmail data is never used for advertising, including retargeting or personalized advertising.
• Gmail data is transferred to third parties only as necessary to provide those user-facing features, as described in Sections 6 and 9, or to comply with applicable law.
• Gmail data is never read by humans except with your explicit consent for specific messages, for security purposes, or to comply with applicable law.
• Gmail data, and any data derived from it, is never used to develop, train, or improve generalized or non-personalized artificial intelligence or machine learning models, including the models underlying our AI assistant.

8. How We Use Your Information

We use the information we collect to:

• Provide the core package tracking features of the Service, including auto import, order consolidation, and proactive delivery alerts.
• Operate the built-in AI assistant that answers questions about your orders.
• Sync your order dashboard across your devices.
• Maintain the security and integrity of the Service and prevent fraud or abuse.
• Process subscription payments and provide customer support.
• Send you service-related communications, for example delivery alerts and account notices. Where we send promotional email, we will identify the message, provide a working opt-out, and honor opt-out requests promptly in accordance with the federal CAN-SPAM Act.
• Comply with applicable legal obligations.

9. How We Share Your Information

We do not sell your personal information. We do not rent, license, or trade your personal information to data brokers, advertisers, or any other party for their own purposes.

We use a limited set of service providers strictly to operate the Service. These providers process information only on our instructions, only to perform services for us, and are contractually restricted from using it for any other purpose. They are:

• Anthropic, for the AI processing of order and shipping email content described in Section 6.
• DigitalOcean, for cloud hosting and managed database services.
• Analytics and crash reporting providers, which receive the device and usage information described in Section 2. They do not receive your email content or your extracted order details.
• Payment and subscription billing providers, including the Apple App Store and Google Play where you subscribe through those platforms.

We may disclose information if required to do so by law, subpoena, or valid legal process, or to protect the rights, safety, or security of Arrivd or its users.

Change of control. If Arrivd is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy. Any successor will remain bound by the Google API Services User Data Policy Limited Use requirements with respect to Gmail data.

10. Data Security

We use technical and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Our databases are hosted on DigitalOcean Managed Databases, and data is encrypted at rest by that hosting platform. The live database cluster is encrypted using LUKS with AES-XTS and a 512-bit key per volume.
• Database backups are encrypted separately. Each backup file has its own AES-256 key, and those keys are wrapped with an RSA key unique to the cluster.
• Connections to the database are protected in transit using TLS.
• Your Google OAuth tokens are encrypted by Arrivd at the application layer. We never receive or store your Gmail password.
• Order records and stored email content are held as standard database fields protected by the platform encryption and access controls described above. They are not additionally encrypted field by field by Arrivd.

11. Data Retention and Deletion

Retention periods by category:

• Extracted order information: retained while your account is active.
• Email message bodies: stripped once the related order and delivery events are fully reconciled. Where reconciliation does not complete, retained until you disconnect Gmail or delete your account.
• Email sender and subject line: retained while your account is active.
• AI processing log: retained until you disconnect Gmail or delete your account.
• Google OAuth tokens: retained in encrypted form until you disconnect Gmail or delete your account.
• Device and usage information: retained for no longer than 24 months.
• Failed background jobs: cleared after 48 hours.
• Database backups: retained by our hosting provider for 7 days on a rolling basis.

How to disconnect or delete: You can disconnect your email account at any time, which stops all processing. You can delete your Arrivd account in the app, or request deletion by emailing privacy@arrivd.ai. California residents have additional rights described in Section 13.

• When you disconnect Gmail or delete your account, we delete your extracted order data, stored email content, AI processing log entries, and OAuth tokens from our live systems. We carry this out at the time of the request, and in all cases within 24 hours of a verified request.
• Copies present in database backups are removed as those backups rotate off, within 7 days.
• Content already sent to our AI processing provider is deleted by that provider on the schedule described in Section 6.
• You can also revoke Arrivd's access to your Google account at any time directly through your Google Account security settings at https://myaccount.google.com/permissions.

12. Online Tracking and Do Not Track

Arrivd does not track you across third-party websites or online services over time, and we do not use your information for cross-context behavioral advertising. Because there is no common industry standard for interpreting "Do Not Track" (DNT) browser signals, Arrivd does not respond to DNT signals at this time. We do not permit third parties to collect personally identifiable information about your online activities over time and across different websites when you use the Service, other than the limited service providers described in Section 9 who act on our behalf. Where required by applicable law, we treat a Global Privacy Control (GPC) signal as a valid request to opt out of any "sale" or "sharing" of personal information.

13. Your California Privacy Rights (CCPA/CPRA) and Shine the Light

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), provides you with the following rights regarding your personal information:

• Right to know: you may request the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to delete: you may request that we delete the personal information we have collected from you, subject to certain legal exceptions.
• Right to correct: you may request that we correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing: we do not sell or share your personal information as those terms are defined under the CCPA.
• Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights.

Sensitive personal information. Under the CCPA, the contents of your email are treated as sensitive personal information, because Arrivd is not the intended recipient of the messages we process. We collect and use that content only to identify your orders, to provide the tracking, alert, and assistant features of the Service, and to maintain security and prevent fraud. We do not use or disclose it to infer characteristics about you, and we do not use or disclose it for purposes beyond performing the Service. Because our use is limited to those purposes, the right to limit the use of sensitive personal information under Civil Code Section 1798.121 does not apply. If our practices change, we will update this Policy and provide the notice and opt-out required by law.

How to exercise your rights. Submit a request by emailing privacy@arrivd.ai. We will verify your request and respond within 45 days, with one additional 45-day extension where reasonably necessary and permitted by law. You may use an authorized agent to submit a request on your behalf. We honor Global Privacy Control (GPC) browser signals where applicable.

Shine the Light.California Civil Code Section 1798.83 permits California residents to request certain information about a business's disclosure of personal information to third parties for those third parties' direct marketing purposes. Arrivd does not disclose your personal information to third parties for their own direct marketing purposes.

14. Age Requirement and Children's Privacy

You must be at least 18 years old to create an Arrivd account and use the Service. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it promptly. The Service is likewise not directed to children under 13, and we do not knowingly collect personal information from children under 13, consistent with the federal Children's Online Privacy Protection Act (COPPA). If you believe a minor has provided us personal information, please contact us at privacy@arrivd.ai.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date and, where required by law, provide additional notice such as a statement on our website or in the app. We review and update this policy at least every 12 months.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Email: privacy@arrivd.ai

Arrivd, a California corporation
Sacramento, California