Arborwise — Privacy Policy

1. Overview

Arborwise is designed to minimise data retention and avoid behavioural tracking.

2. What data is processed

When you use Arborwise:

your inputs are processed to generate responses
session data exists temporarily during your interaction

During an active session, conversational content may be processed and held temporarily to complete your current interaction. Once the session ends, conversational content is removed in accordance with the Arborwise retention policy.

3. Storage

Conversational session content is held only during your active session and removed afterwards in accordance with the Arborwise retention policy
Your browser may temporarily store session state locally
If you download a decision artefact, it is stored by you, not by Arborwise

4. Third-party services

Arborwise uses third-party providers to operate, including:

AI processing services
payment providers (e.g. Stripe)
hosting and privacy-focused, cookieless analytics that measure aggregate traffic and performance only (e.g. Vercel, including Vercel Web Analytics and Speed Insights), and do not identify individual users

These providers may process data as required to deliver their services.

5. Tracking, analytics, cookies, and local storage

Arborwise uses a small number of cookies and equivalent browser storage that are strictly necessary to provide the service you ask for. These are not used for advertising, cross-site tracking, or profiling, and they are not shared with third parties for those purposes. Because they are strictly necessary, they do not require a consent banner under UK rules, but they are disclosed here:

a sign-in session cookie, set only if you sign in, which keeps you signed in to your account. It contains a random session reference, not your details, and it expires after a period of inactivity
an anonymous identifier, held in a cookie and in your browser's local storage, which lets the service associate your credits and your in-progress sessions with this browser without an account. It is a random value and does not identify you
a short-lived, in-tab flag used during pilot access, which is cleared when the tab is closed

Arborwise does not use behavioural analytics, advertising analytics, user profiling, tracking cookies, or systems designed to identify, model, or optimise around individual users.

Arborwise may collect limited aggregate operational statistics (such as page views, performance metrics, error rates, and service usage totals) that cannot be used to identify individual users and are used solely to operate and improve the service.

6. Credits

Credit balances are associated with an anonymous identifier stored in your browser.

Clearing browser data resets this identifier and associated balance.

7. Security

Arborwise takes reasonable measures to protect the system, but no system can guarantee absolute security.

8. Your control

You remain in control of:

what you input
what you keep
what you export

9. Safety checks

Arborwise runs automated safety checks on what you enter and on the content it generates, so the system stays within its supported decision-reflection domain.

These checks:

are session-local and run only during your interaction
do not create a risk score, safety profile, or label tied to you
are not retained after the interaction or carried across sessions
are not used to build a behavioural profile

When a check applies, Arborwise enters a visible Safety Mode and explains why. Safety Mode is an Arborwise product state, not a hidden refusal, and no safety determination becomes part of any stored record.

10. Data controller

Daniel James Atkins
Trading as Arborwise
Unit 168175
PO Box 7169
Poole
BH15 9EL
United Kingdom

Contact: use the .

11. Lawful basis for processing

Where Arborwise processes personal data, it relies on the following lawful bases under the UK GDPR:

performance of a contract — to provide the service you request and, for paid features, to process payments;
legitimate interests — to keep the system secure, prevent misuse, and run the session-local safety checks described in section 9;
consent — where you choose to provide it, for example when you add your email to the feedback form so we can reply.

Because Arborwise minimises data and removes conversational session content after the session ends, the personal data processed is limited.

12. Your rights under UK GDPR

Subject to the limited data Arborwise holds, you have the right to:

access the personal data held about you
request correction of inaccurate data
request erasure of your data
restrict or object to certain processing
request a copy of data you have provided, in a portable form
withdraw any consent you have given

To exercise any of these, use the feedback form. Arborwise removes conversational session content after the session ends, and credit balances are tied to an anonymous identifier in your browser rather than to your identity, which may limit the data available to a request.

If you believe your data has been handled improperly, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

13. International transfers

Some third-party providers (for example AI processing and payment services) may process data outside the United Kingdom. Where they do, that processing is subject to the providers’ own safeguards intended to protect personal data in line with applicable law.

14. Contact

If you have questions about privacy, send feedback below. It goes straight to the Arborwise team — add your email if you’d like a reply.

Home · Terms · Privacy