Privacy policy

This Policy applies to all personal data that AREVIAN TECHNOLOGIES LLC (tax ID 03037538, Yerevan, Republic of Armenia; the “Studio”, “we”) receives through arevian.studio and its subdomains — including the client account, the Pulse feed, the school, the Ari assistant and site previews on demo.arevian.studio — as well as by email, through messengers and while performing contracts.

We process data in accordance with the Law of the Republic of Armenia “On Protection of Personal Data” and other applicable Armenian legislation. For people located in the European Union we also comply with the EU General Data Protection Regulation (GDPR) to the extent it applies to our activities.

By using the site, sending a request, a brief or a message to Ari, or registering an account, you confirm that you have read this Policy. Where the law requires consent, we obtain it separately — through a checkbox in the form or another clear action. The text of that consent is published as the “Consent to personal data processing” document.

If you give us data about other people — colleagues, employees or your own customers — you confirm that you have a lawful basis to do so and have informed them of this Policy.

The controller of personal data is AREVIAN TECHNOLOGIES LLC, tax ID 03037538, Yerevan, Republic of Armenia.

Send questions about personal data and requests to exercise your rights to security@arevian.studio with the subject “Personal data”. General questions go to hello@arevian.studio.

Data you provide yourself: name, email address, phone number, messenger handle, company name and details, job title, links to websites and social media, task description, budget and timing, project files and materials, and the text of your messages.

Client account data: email address, name, a password hash (we never store the password itself), your Telegram or Google identifier if you sign in with them, and the history of requests, projects, documents, invoices and correspondence.

Conversations with the Ari assistant: your questions and the assistant’s replies, the brief it compiles, and an internal conversation identifier.

Technical data: IP address, country (as determined by Cloudflare), device type, browser and operating system, screen size, language, pages viewed, referring source and utm_source tag, visit times, and random browser and tab identifiers stored in your browser.

Payment data: amount, date, status and purpose of a payment. Card details are entered on the acquiring bank’s page (AmeriaBank); we never receive or store them.

We do not intentionally collect special categories of data (health, political or religious beliefs and the like) or biometric data. Please do not send them through forms or to Ari; if such data reaches us, we will delete it.

Replying to your enquiry and preparing a proposal or estimate — on the basis of your request and steps taken before entering into a contract, and your consent where required.

Entering into and performing a contract: running the project, delivering results, invoicing, accepting payment and warranty support — to perform the contract.

Operating the client account: sign-in, account security and notifications about requests and projects — to provide the service under the contract.

Operating the Ari assistant — to answer your question and prepare a brief at your request.

Analytics on aggregated data, improving the site, and protection against fraud, abuse and attacks — on the basis of our legitimate interest. You can opt out of analytics (see “Cookies and analytics”).

Accounting and tax records, and responding to lawful requests from public authorities — to comply with legal obligations.

Studio newsletters — only with your consent. You can unsubscribe at any time via the link in the email or by writing to hello@arevian.studio.

We do not sell personal data or share it with third parties for their own marketing. We do not make decisions with legal effects for you based solely on automated processing: Ari’s answers and preliminary estimates are informational and are reviewed by a person.

Studio employees and contractors who need the data for their work have access to it — limited to their tasks and bound by confidentiality.

We use providers who process data on our behalf: server infrastructure and hosting; Cloudflare for site delivery and attack protection; Resend for sending emails; AmeriaBank for card payments; Telegram and Google for sign-in with those accounts if you choose them; and providers of artificial intelligence models, including Anthropic and OpenAI, directly or through an aggregator service, to process Ari messages and tasks related to your project. Each receives only the data its function requires.

Data may be disclosed to public authorities upon a lawful request and to the extent necessary to defend the Studio’s rights in court.

In a reorganisation or transfer of the business, data may pass to the successor, with the safeguards of this Policy preserved.

Some of the providers listed above are located or store data outside the Republic of Armenia, including in the European Union and the United States. We choose providers that ensure an adequate level of protection and, where the law requires, rely on your consent, contractual safeguards or another lawful basis.

By sending data through the site, Ari or the client account, you agree to such transfers to the extent necessary for the purposes described in this Policy.

We keep data no longer than the purposes of processing require, unless the law sets a longer period.

Enquiries and briefs that did not lead to a contract — up to 3 years from the last contact. Project data and correspondence — for the term of the contract and 5 years after it ends, to defend against possible claims. Accounting and payment records — for the periods required by Armenian law. Visit analytics — up to 26 months. Account data — while the account exists and no longer than 30 days after it is deleted, except for information we must keep by law.

When the period ends, data is deleted or anonymised so that no one can be identified from it.

The site uses cookies and the browser’s local storage. Essential ones: the client account session (arevian_client, not readable by page scripts), a signed-in flag (arevian_in), your chosen language and currency, and drafts of Ari conversations and forms. The site and the account cannot work correctly without them.

Analytics: random browser and tab identifiers for our own visit statistics, described in the data section. The site has no third-party advertising trackers or social media pixels.

The support chat, the Telegram and Google sign-in buttons and site previews on demo.arevian.studio may set their own cookies.

You can opt out of analytics in the cookie notice on the site; visit statistics are then not collected from your browser. You can delete essential cookies in your browser settings, but some features will stop working.

Connections to the site and services are encrypted (HTTPS). Passwords and session tokens are stored only as hashes, staff access is role-based, staff sign-in is protected and actions on data are logged.

No method of transmission or storage is completely secure. If an incident occurs that puts your rights at risk, we will notify you and, where required, the competent authority within the time limits set by law.

You have the right to: find out whether we process your data and receive a copy; have inaccurate data corrected; have data deleted or its processing restricted; object to processing based on legitimate interest, including analytics; withdraw consent; and receive your data in a machine-readable format where applicable.

Send your request to security@arevian.studio from the address used in your account or enquiry, or include information that lets us identify you. We reply within the period set by law and in any case within 30 days.

Withdrawing consent does not affect the lawfulness of processing before the withdrawal and does not stop processing required to perform a contract or comply with the law.

You may lodge a complaint with the personal data protection authority of the Republic of Armenia or, if you are in the European Union, with the supervisory authority of your country. We ask that you write to us first — most issues are resolved faster directly.

The site and the Studio’s services are intended for adults and organisations. We do not knowingly collect data from anyone under 16. If you learn that a child has given us data, write to us and we will delete it.

We may update this Policy. The current version is always published on this page with its revision date. We notify account users of material changes by email or in the account.