Privacy Policy

Aretivra is a product operated by Saady Consulting LLC, a Wyoming limited liability company. Questions or privacy requests can be sent to contact@aretivra.com. Our public address and phone number are available on the Contact page.

We process contact and account information such as name, email address, phone number, preferred language, organization, and verification status. We also process the business profile, assessment responses, and related diagnostic inputs you submit.

We process assessment progress, scores, findings, recommendations, report content, report status, report access, and PDF delivery information to generate, preserve, and deliver the diagnostic. Secure identifiers connect a customer, business, assessment, report, and purchase without exposing internal identifiers publicly.

Stripe processes checkout and payment information. Aretivra receives payment and purchase records such as product, amount, currency, payment status, checkout reference, and purchase time. We do not use the application to collect or store full payment-card details.

We process authentication challenges, secure-link status, session information, and delivery records to provide customer and administrator access. Resend is used for transactional email such as secure sign-in, Executive Preview readiness, and purchased-report delivery. Delivery status may be updated from signed provider webhooks.

Essential cookies and similar first-party identifiers support security, authentication, session continuity, diagnostic operation, payment, report access, the customer portal, and other transactional functions. These technologies remain active because the requested service cannot operate reliably without them.

With permission, Aretivra uses Google Analytics 4 and Meta technologies for product analytics, attribution, advertising measurement, and understanding how the journey is used. Meta technologies may include the browser Meta Pixel and server-side Meta Conversions API. We also use Microsoft Clarity for product-experience analytics such as heatmaps, session recordings, clicks, scrolling, navigation, and friction analysis. Sensitive forms, assessment content, reports, portal content, and commerce surfaces are masked so their private text and values are not readable in Clarity. Privacy-safe event dimensions may include language, country, device, browser, campaign, business-size category, and journey status.

Where supported, first-party visitor and session identifiers, Meta fbp/fbc identifiers, and hashed identifiers may be used for measurement and deduplication. We do not send assessment free text, report content, contact name, business name, raw email address, or raw phone number as canonical analytics event content.

Non-essential analytics and advertising technologies are disabled unless the current consent version records acceptance. You may accept all or reject non-essential technologies, and may reopen “Privacy choices” from the control shown on the site. Rejection does not prevent essential product functions. A material policy or consent change may require a new choice.

We use information to operate and secure the service; register and authenticate customers; save assessment progress; generate and deliver reports; verify purchases and entitlements; provide the portal and PDF access; send transactional communications; prevent abuse; troubleshoot; support customers; and, with permission where required, measure product and marketing performance.

We use service providers for hosting and storage, AI-assisted narrative generation, payment processing, transactional email, analytics, and advertising measurement. Current integrations include OpenAI-hosted application infrastructure, OpenAI services used by the report pipeline, Stripe, Resend, Google Analytics 4, Microsoft Clarity, and Meta Pixel/Conversions API. Providers process information under their own applicable terms and safeguards.

We retain information for as long as reasonably necessary to provide purchased access, maintain diagnostic history, operate and secure the service, meet legal or accounting obligations, resolve disputes, and enforce agreements. Different records may require different retention periods. We do not promise a fixed deletion deadline in this Policy.

We use technical and organizational safeguards appropriate to the nature of the service, including access controls, secure sessions, ownership checks, hashed credentials where applicable, authenticated provider integrations, and restricted operational access. No system can guarantee absolute security.

Aretivra and its service providers may process information in countries other than your own. Applicable contractual, technical, and provider safeguards are used where appropriate. Local privacy rights may vary by jurisdiction.

You may ask about, correct, or request deletion of information by contacting contact@aretivra.com. We may need to verify identity and may retain information where required for security, purchased access, legal obligations, or rights that cannot be overridden by a request.

We may update this Policy as the product, providers, or legal requirements change. The effective date identifies the current version. Material changes to non-essential processing may require a renewed privacy choice.