How visitor data is collected and used through AI assistants powered by ARIA.

This policy applies to visitors — people who interact with an AI assistant embedded on a website, WhatsApp Business account, Instagram account, or Facebook Messenger account operated by a business using the ARIA platform.

The business operating the assistant is the ARIA client. ARIA is the platform that powers it.

The following types of data may be collected when a visitor uses an ARIA-powered assistant:

• Chat messages and conversation history.
• Files uploaded by the visitor during the chat, if the visitor chooses to send files.
• Visitor profile fields — name, email address, and phone number — where the business has enabled that collection and the visitor has provided them.
• Technical and session data required to operate the chat, remember returning visitors, enforce limits, prevent abuse, and maintain service security.

The only personal data fields that may be requested through the ARIA visitor form are name, email, and phone number. No other personal data fields are permitted.

Businesses using ARIA may enable a visitor data form that appears before the chat opens. The only fields they may enable are name, email address, and phone number.

Businesses cannot create custom fields or request any other type of personal data through the ARIA visitor form.

Visitor data is accessed and used by two parties:

• ARIA — as the platform operator — for service delivery, security, abuse prevention, rate limiting, and internal operations.
• The client business that deployed the assistant — for customer support, operator takeover, and business purposes including marketing where consent applies.

Data collected through the chat may be used for the following purposes:

• Delivering the AI assistant service and answering visitor questions.
• Enabling operator takeover when a visitor requests to speak with a human.
• Remembering returning visitors within the same browser session or within one week of inactivity via cookies.
• Enforcing upload limits, rate limits, and other security controls.
• Supporting service continuity, diagnostics, and abuse protection.
• Follow-up communication or marketing by the client business, where the visitor has provided consent.

If the business has enabled a visitor data form, the visitor must check a consent checkbox before the chat opens. By checking that box, the visitor agrees that the data they provide may be collected and used as described on this page.

Where no data form is enabled, the visitor's chat messages and session data are still recorded as part of normal service operation from the moment the chat is opened.

Visitor data collected through the ARIA platform may be retained by ARIA internally even if the client account associated with that assistant is later deleted.

This retention is part of the ARIA service structure and is disclosed to both visitors and clients in advance through this page and the service policies.

If you have questions about this policy or about how your data has been handled, please contact the ARIA support team.

Questions specifically about how a business has used your data should also be directed to that business directly.