Privacy policy
Articas is a web app that helps small service businesses with back-office work, starting with polite reminders for overdue invoices. This page says what we collect, why, where it is kept, and how to have it deleted. "We" means Articas AI LLC. Questions go to hello@articas.ai.
What we collect
- Your sign-in. When you sign in with Google we receive your email address and Google's account identifier for you. We use them only to recognize you. We never receive your Google password.
- Gmail, only if you connect it. We ask Google for permission to send email as you (the
gmail.sendpermission) and for your address, so the app can show which inbox it sends from. That permission only lets us send email; it does not let us read, search or delete it. We keep an access key from Google, encrypted, and use it only to send a reminder after you approve that exact reminder. We keep the reminder we sent, and nothing else from your mailbox. - QuickBooks, only if you connect it. We read your invoices and the customer details on them (name, email, amount, due date, invoice number, payment link) to find overdue invoices. We never change anything in QuickBooks and never move money. We keep an access key from Intuit, encrypted.
- Drafts and decisions. For each reminder we keep the draft, who it is for, the invoice details it mentions, and whether you approved, edited or rejected it.
- An activity log. Every action (sign-in, connect, draft, send, reject, disconnect) is recorded with who did it and when, so you can always see what happened in your business's account. Entries hold email addresses and, for reminders, the invoice number.
- One cookie. A sign-in cookie (secure, not readable by page scripts) that keeps you signed in for up to 30 days. No advertising, analytics or tracking cookies.
Your customers' information
The customer names, emails and invoices we read from QuickBooks belong to your business. We handle them only on your behalf, to draft and send the reminders you approve, and never use them for anything of our own. If one of your customers asks about their information, they should contact your business; we will help you answer or delete it.
Who else handles it
- Anthropic (Claude) writes part of each reminder. It receives only your business's name: no customer names, emails, amounts or other QuickBooks data. Under Anthropic's API terms, that text is not used to train its models.
- Supabase hosts our database in the United States (US East).
- Fly.io runs the app in the United States (Ashburn, Virginia).
- Google and Intuit receive the requests needed to sign you in, send the email you approved, or read your invoices.
- Fontshare serves the typeface on our website and app, so it sees your IP address, as any website you load a file from does.
We do not sell your data, share it for advertising, give it to data brokers, or use it to train AI models. If the law requires us to disclose data, we will tell you first unless we are not allowed to.
Google user data
Articas's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to sign you in and to send the reminders you approve. We do not use it for advertising, sell it, transfer it except as needed to run those features, or use it to train AI models. People at Articas do not read it, except with your permission to fix a problem you reported, for security, or where the law requires. If we ever want to use Google data in a new way, we will update this policy and ask for your consent first.
How it is protected
Connection keys for Gmail and QuickBooks are encrypted (AES-256-GCM) before they are stored. Traffic is encrypted in transit, including between the app and our database. Nothing is sent to a customer without your approval, and Articas has no way to move money. If we learn of a security incident affecting your data, we will tell you promptly and as the law requires.
How long we keep it
- Gmail and QuickBooks keys: until you disconnect. Disconnecting deletes the key right away and asks Google or Intuit to revoke it.
- Your sign-in, drafts, decisions and the activity log: while your account exists.
- Invoice details are read fresh from QuickBooks each time; we only keep the ones on a reminder.
Your choices
You can disconnect Gmail or QuickBooks in the app at any time. You can also remove Articas's access from your Google account or from the apps list in QuickBooks. To see, correct or delete your data, email hello@articas.ai. When you ask us to delete your account, we delete your business's data, the activity log included, within 30 days; copies in our database host's backups may last up to 30 more days before they expire.
Children
Articas is for businesses and is not meant for anyone under 18.
Changes
If we change this policy we will update the date above and tell signed-in owners about any change that affects how their data is used, before it takes effect.