Privacy
What ARB Copilot collects, why, and how it's protected.
What we collect
- Account data: email, display name, sign-in method (Google or email/password).
- Workspace data: workspace name, plan, members, roles.
- Architecture request content: the request fields you submit (title, description, NFRs, integrations, data sensitivity, etc.).
- AI analysis output: the structured analysis the AI returns for each request.
- Decision records and overrides: final decisions you record, rationale, override reasons.
- Audit logs: who did what, when, with action metadata. No request content is duplicated into audit logs.
- Rate-limit events: per user/workspace counters with a hash of the IP address (not the IP itself).
Tenant isolation
Every workspace is isolated server-side by row-level security. Members of one workspace cannot read or modify another workspace's requests, analyses, decisions, audit logs, or decision memory.
AI processing
Signed-in workspaces send request content to the configured AI provider via the Lovable AI Gateway (current model: google/gemini-3-flash-preview). See the AI Data Notice for what to avoid sending. Public demo pages use static sample data only and do not call any AI provider.
Retention
Workspace data is retained until you or the workspace owner request deletion. Audit logs and rate-limit events are retained for operational and security purposes.
Deletion and export
Workspace owners can export decision memory and request metadata. Email hari@eabyea.com for full workspace deletion.
Operator
ARB Copilot is operated by Hari Krishna Bodapati / EA2.0, based in India.
Contact
For privacy questions, email hari@eabyea.com.
Questions? Contact hari@eabyea.com. Last updated: June 2026.