DRAFT. Do not publish this page yet. It is ready for implementation, which is not the same as ready for publication. Every yellow box below is an engineering question that only Lex and Geraldo can answer, and each one becomes a normal sentence once answered. Publishing a privacy policy that describes something the system does not actually do is the one document in this project that creates real exposure.

This page carries noindex so it stays out of search results while it is a draft. Remove that tag, and this box, on the day it goes live.

Privacy Policy

This Policy explains what information Arborized collects and processes, why it is used, who it may be shared with, how long it may be kept and what choices you have about it. It applies to the Arborized site and platform, and should be read together with the Terms of Use.

1. Who is responsible for your information

Arborized is operated by Plano Marketing LLC, a limited liability company organised under the laws of the State of Florida, United States. In this Policy, "Arborized", "we" and "our" refer to that company.

For anything concerning your data, the contact is contact address.

2. What information is collected

It depends on which features you use.

Your account

your email address;
the name or nickname you choose to use inside the product;
whether your email has been confirmed;
information needed for authentication and account security.

IMPLEMENTATION, remove before publishing. Identify the authentication system and confirm how passwords are protected. If they are stored hashed, the published version states that expressly, which is stronger than the current wording.

What you create

Marks and highlights, notes, questions and answers, comments, summaries, indexes, connections between subjects, review history and results and, if you use that feature, voice recordings and their transcripts.

This content exists so that you can develop, organise, review and return to your own work over time. It is the reason the product exists.

The material you study with

Books, tests and exercises, class notes, articles, PDFs, images, photographs and videos. How each one is processed depends on the technical architecture of each feature: some may remain only on your device, and some may need to be sent to or processed by the systems Arborized uses in order for a feature to work.

IMPLEMENTATION, remove before publishing. Decide separately for PDF, image or photo, video and other files:

whether the original file leaves the device;
whether it is stored, and where;
for how long;
whether only extracted text or a transcript is stored;
whether any of it is sent to artificial intelligence services.

This is question 1 in QUESTIONS-FOR-GERALDO.md.

Voice recordings

If you use the recorded thought feature, Arborized may process the recording to produce a transcript and make it usable inside your study.

IMPLEMENTATION, remove before publishing. Decide whether raw audio is stored, stored temporarily and then deleted, or never stored after transcription. Set the period and the location. This is question 6 in QUESTIONS-FOR-GERALDO.md. If the decision is not to build the feature, this whole section goes.

How you use the platform

Length and frequency of study sessions, focus time, which material was opened, how many times you returned to a study, which features you used and how reviews went. This is the information that lets the product show you your own progress.

Technical information

As with any online service, some data is recorded automatically: IP address, browser type and version, operating system, date and time of access, technical identifiers, and access, security and error logs. It is used for operation, security, abuse prevention and diagnosing faults.

Profile picture

A profile picture is optional. If you do not add one, the product shows your initial. The image is not used for facial recognition or any biometric identification.

3. What the information is used for

creating, authenticating and maintaining your account;
providing the platform's features and storing the content you create;
building indexes, reviews and other structures out of your own study;
running the artificial intelligence features you request;
showing you information about your own use, such as focus time and progress in reviews;
sending email confirmation, access recovery and notices necessary to the service;
telling you about material changes to the product, the Terms or this Policy;
keeping the platform secure and preventing abuse, fraud and unauthorised access;
diagnosing faults and keeping the service running;
meeting legal obligations.

4. What we do not do

We do not sell or rent your personal information.

We do not use your data for advertising. There are no advertising cookies, no social network pixels, and we do not build profiles for ads, here or anywhere else.

5. Artificial intelligence

Some features use artificial intelligence services provided by third parties. When you request one, Arborized sends the provider the information needed to produce that answer: the excerpt you selected, the question you asked and the context needed to understand it. What is sent is limited to what the function requires.

What is never sent

Two fields on an expansion page are yours and only yours: what is my opinion and what does this knowledge do to me. No model writes in them, and what you write in them is not sent to any artificial intelligence provider, not as context for another question on the same page, and not for any other purpose.

IMPLEMENTATION, remove before publishing. This is a guarantee to the user and therefore an architecture requirement, not a preference. Exclude those two fields at the point where the request is assembled, so it still holds when somebody later adds page context to a prompt without thinking about it. Once confirmed, this section stands as written.

About model training

IMPLEMENTATION, remove before publishing. State: (1) which AI provider or providers are used; (2) which features use AI; (3) how long the provider retains what it receives, if at all; (4) whether the contracted plan permits that content to be used for model training; (5) whether a zero-retention setting exists and is switched on. Only add the sentence "we do not use what you write to train artificial intelligence models" after confirming both our own use and the terms and settings of every provider involved.

About the answers

Answers generated by artificial intelligence may contain errors, omissions or wrong interpretations. They support your study and should be judged by you, especially where accuracy matters.

6. Cookies and similar technologies

Arborized uses cookies and local storage only for what the service needs: keeping your session, preserving preferences such as theme and palette, and protecting your account. They are not used for advertising.

IMPLEMENTATION, remove before publishing. Review every service actually installed, including authentication, hosting, CAPTCHA, error monitoring and any measurement tool, and list the cookies and storage they really use. Update this section to match real behaviour, not intention.

If measurement tools or other technologies that materially change collection or sharing are added later, this Policy will be updated first.

7. Who information is shared with

Only with those needed for the service to exist, and only as far as each function requires:

Hosting and infrastructure, to keep the application running. Provider to be confirmed.
Database and storage, to hold accounts and content. To be confirmed.
Authentication, to create secure sessions and verify credentials. To be confirmed.
Artificial intelligence, to run the features in section 5. To be confirmed.
Email delivery, for account confirmation, access recovery and notices. To be confirmed.
Security and diagnostics, to monitor availability and errors. To be confirmed, if any.

We may also disclose information where required by law, court order or valid legal process, or where necessary to protect the rights, safety or integrity of Arborized, its users or third parties.

8. Minimum age

Arborized is intended for people aged 13 or older. This limit exists because the United States Children's Online Privacy Protection Act (COPPA) applies to children under 13.

We do not knowingly collect personal information from children under 13. If an account is identified as having been created by someone who does not meet the minimum age requirement, access will be blocked and the associated information will be deleted, in accordance with applicable law and our retention and deletion procedures.

9. How long information is kept

Arborized exists so that you can return to what you built before, so your content stays with your account while it is active. That does not mean permanent storage or any guarantee of indefinite retention.

Information is kept for as long as reasonably necessary to provide the service, meet the purposes in this Policy, maintain security and comply with legal obligations.

Deleting your account

When an account is deleted, the associated content stops being available and is removed from active systems. Residual copies may remain temporarily in backups until the end of normal retention cycles.

IMPLEMENTATION, remove before publishing. Set the deletion period for active systems and the maximum period data may remain in backups, in days. This is question 2 in QUESTIONS-FOR-GERALDO.md, and the number goes here as a sentence, never as "eventually".

Technical logs

IMPLEMENTATION, remove before publishing. Set how long access, security and error logs are kept, and which categories are kept at all.

If the service changes or ends

Arborized may change features, change how access works, or stop offering part or all of the service. Where reasonably possible and where a change would delete content, a period will be provided for you to export the supported data before removal. Holding a free account does not create a right to permanent storage.

10. Where information is processed

Arborized is operated from the United States. Information may be processed in the United States and in other countries where our service providers keep infrastructure. If you use Arborized from another country, your information may be transferred and processed outside the country you are in, in accordance with applicable law.

IMPLEMENTATION, remove before publishing. Identify the region of the main hosting, database, storage, AI and backup providers. If all processing stays within the United States, simplify this section to say exactly that, which is stronger.

11. Your choices

Depending on the features available and on applicable law, you may access your account information, correct data that is wrong, export the supported content, delete your account and ask for information about how your data is handled. Some requests may require identity confirmation before they are acted on.

IMPLEMENTATION, remove before publishing. Confirm which of these actions will be available inside the platform at launch: changing email, exporting, deleting the account. Do not promise a function here that does not yet exist, and route anything not yet automatic to the contact address.

Requests that cannot be made inside the platform can be sent to contact address.

12. Security

We take reasonable technical and organisational measures to protect information against unauthorised access, loss, alteration and improper disclosure. Access to content is limited to the account it belongs to, and that separation is enforced on the server, not by hiding buttons on a screen.

IMPLEMENTATION, remove before publishing. Confirm the mechanisms actually in use: authentication, encryption in transit, storage, access control, isolation between accounts and administrative access policy. Name only technology that is genuinely implemented.

No internet-connected system is absolutely secure. If an incident occurs that requires notifying users or authorities, the required notifications will be made.

13. A free service, and future changes

Arborized is currently free, and that does not mean it will remain free indefinitely. We may introduce paid plans, set usage limits, change features or change how something is offered. Before any charge, the applicable conditions will be presented to you.

A change of model may also require changes to storage and retention practices. When that happens, this Policy will be updated and, where appropriate, export or deletion options will be explained.

14. Changes to this Policy

This Policy may be updated to reflect changes in the product, the infrastructure, the providers used or legal requirements. Where a change is material, you will be notified by email, inside the platform or by another appropriate means. The published version shows the date it was last updated.

15. Contact

For any question, request or complaint about your data:

Plano Marketing LLC
contact address

The English version of this Policy is the official version and prevails over any translation.