Privacy policy

Last updated: 10 September 2026

This page says what we do with your data and with the data of the people who come through your site. It is written to be understood, not to look impressive. If a line does not add up, write to [email protected] and we will answer.

1. Who we are

araldo belongs to MUNDUS CODE UK LTD, a company registered in England and Wales under number 16411896. Its registered office is 60 Tottenham Court Road, Suite 6033a, Fitzrovia, London, W1T 2EW, United Kingdom and its website is https://araldoai.com. For anything about your data write to [email protected]: that is the address we read. We decide what happens to the data described below; in legal words, we are the data controller.

2. What we collect, and where it comes from

Five sources, and nothing else. This is everything we actually keep.

What you write: your name, your email address, your password (turned into a fingerprint you cannot go back from), your language, the name of your business, what you sell, what you never want said, the brief, your offers, your posts and the record of who approved them. If you switch on two-step sign-in, we keep its key encrypted and the backup codes as fingerprints.
What the channels you connect give us: the access tokens (encrypted), the account name, the name of the Page or channel, the id that channel assigns to us and, for every post that goes out, its public address and the public numbers the channel gives back. We do not download your contact lists, your private messages or your comments.
What the site records on its own: clicks on the links that count, the visits, signups and sales that the site counter and the webhooks send us, and — on araldo's public pages — the campaign parameters of the link you arrived with (the campaign fields and click ids in the address), the page you landed on and where you came from, under a random number, so that if you sign up we know which of our own campaigns brought you. We do not keep the email addresses of the people who arrive: we keep a fingerprint, and it only serves to avoid counting the same person twice.
What billing needs: name, address, country, VAT number if you have one, and the two-letter code of the country the request came from and of the country of the card. A European VAT number is checked against the European Commission's VIES register, which tells us whether it exists and whose it is. We never see the card number: only Revolut handles that.
Your IP address, and only to stop abuse: it sits in fast memory for the length of the counting window, one hour at most, and never reaches the database. The web server log keeps one line per request, with the IP address, for 14 days.

3. Why we use them, and on what legal basis

Every reason has its legal basis. We have no others.

To make araldo work for you: writing posts, letting you approve them, publishing them on the channels you connected, doing Monday's tally. Basis: the contract you have with us.
To send you service email: the post that waits for your yes, Monday's tally, the warning when a post did not go out. Basis: the contract. You can switch the warnings off in Settings.
To invoice you and pay the right tax: basis, the contract and a legal obligation.
To stop abuse and keep the service standing: basis, our legitimate interest in not having the site knocked over.
To understand what running araldo costs us, using figures put together so that they do not say who you are: basis, our legitimate interest.
To know which of our own campaigns bring the people who sign up and pay, and to tell Meta and Google so that they can measure them: basis, your consent for the cookies and the browser identifiers (the banner on the public pages), and our legitimate interest for the fingerprint of your email address at signup and at payment — which you can object to by writing to us.

4. Who handles data for us

We do not sell your data and we do not hand it to anyone for their own marketing. We pass it only to those we need in order to do the work. This list is taken from araldo's own code, one by one, not from a template.

Anthropic and OpenAI — the models that write. OpenAI studies your business, prepares the strategy and the marketing plan, and writes the creative copy: posts, video scripts, image descriptions, pages, automatic emails and replies to customers; Anthropic carries out the work: the chat with you, Monday's tally and sorting your messages. We send them what you sell, the brief, the rules and the numbers put together; never the name or email of a person who wrote to you, except in the replies araldo prepares for them. US companies, under the EU standard contractual clauses.
OpenAI, Replicate or Google — they make the images, when one is needed. Only one of them is switched on at a time, the one chosen in the server configuration, and it receives only the description of the image to make. Companies outside the European Union and the United Kingdom.
HeyGen — makes the videos with a presenter. It receives the words the presenter has to say. A company outside the European Union and the United Kingdom.
OpenAI (ChatGPT Ads) — if you connect a ChatGPT Ads account, it receives the campaigns you approve: text, image, landing page and budget. We keep the account key encrypted. To measure our own campaigns on ChatGPT, if we switch them on, it receives a fingerprint of your email address at sign-up and payment, never the address itself. A company outside the European Union and the United Kingdom.
Revolut — takes the payment and holds the card details. It receives your name, your email address and the amount. Only Revolut sees the card number, never us.
The European Commission — the VIES register, the one that says whether a European VAT number exists. It receives your VAT number and your country code, nothing else, when you type it at checkout; if the register does not answer, araldo tries again over the following days until it gets an answer. It sits in the European Union.
The channels you connect yourself: X, LinkedIn, Meta (Facebook and Instagram), TikTok, YouTube, Google Ads. What you approved goes to them, and it goes under your own account. Each of them has its own privacy policy and its own rules. Reddit is in the code too, but today it is switched off and cannot be connected.
Telegram — only if you switch on approving from your phone. It receives the post that waits for your yes and the id of your chat. A company outside the European Union and the United Kingdom.
Mailgun — the mail service that delivers our email: the post that waits for your yes, Monday's tally, the sign-in link, password recovery. It receives your address and the text of the message. A company outside the European Union and the United Kingdom.
IONOS SE — rents us the dedicated server araldo runs on: it holds the machine and the disks, so the database, the safety copies and the files you upload. The machine is in London, United Kingdom.
Cloudflare — sits in front of the araldoai.com site: it protects it from attacks and checks that whoever signs up or asks for a new password is a person (Turnstile). It sees your IP address, your browser and the pages you open; it does not receive what you type in the forms. A US company, under the EU standard contractual clauses.
Google Places — only if you turn it on in Reviews: to find your listing we send Google your business name and the city you type, and we read the rating, the count and the latest reviews from the public listing. A company outside the European Union and the United Kingdom.
Google Fonts — araldo's pages, both the public ones and the ones inside your account, fetch two typefaces from Google's servers (fonts.googleapis.com and fonts.gstatic.com). To fetch them, your browser tells Google the IP address you are reading from.
Meta and Google, to measure our own campaigns — only if you accept the measurement cookies on the banner, and only on araldo's public pages. When you sign up, or pay, we tell Meta and Google that it happened, so we know which of our own campaigns work: your email address travels only as a SHA-256 fingerprint, never in clear, together with the campaign parameters of the link you came with; the identifiers of your browser (Meta's _fbp and _fbc cookies, your IP address, the name of your browser) go with it only if you pressed «Accept» on the banner. If you pressed «No thanks», nothing of your browser is sent — not Meta's cookies, not your IP address, not the click id of the ad you came from (fbclid, gclid) — and no Meta or Google script is loaded. Companies outside the European Union and the United Kingdom.

5. Where the data ends up

araldo runs on a dedicated server we rent from IONOS SE, and that machine is in London, United Kingdom: your database, the safety copies and the files you upload stay there and do not leave the United Kingdom. The VIES register sits in the European Union. Several of the other providers listed above sit outside the European Union and the United Kingdom: the ones that write the words, the ones that make the images and the videos, and the channels you publish on. When we send them something, the data leaves. For those we do not write the exact country, because we have not verified them one by one and we will not invent it: if you need it for a particular provider, write to [email protected]. What each of them does is governed by the terms each of them publishes.

6. How long we keep them

These are the real periods, the ones the code actually does.

Your account and your business: as long as you keep them open. When you press Delete account in Settings you type the name of your business, and the deletion is scheduled 14 days later: until that day you can undo it from Settings, and nothing goes out in the meantime. Then the business you work on alone goes: posts, offers, figures, connected channels, all together — and your account with it. If somebody else works on that business, the business stays with whoever still works on it and your account goes at once: to make the business go, first remove the other people from the People page, or write to [email protected]. The invoices we issued keep their number: an emptied, anonymous record stays only for them (see below).
The safety copy: one encrypted copy every night. We keep one for each of the last 7 days, one a week for 4 weeks and one a month for 6 months, then they delete themselves. So after you delete your account a copy may still exist for up to six months: that is the time we need to put the service back together if a disk fails. The copies sit on the same server, encrypted; the day we also send them to an outside store, we will write here who runs it and which country it is in.
The web server log (one line per request, with the IP address): 14 days.
The program log: the file reaches 5 MB, then starts again, and we keep the three older copies, which delete themselves as new ones arrive.
The IP address in the abuse counter: as long as the counting window lasts, from one minute to one hour depending on the form.
The invoices we issued to you: they also end up in the company's accounting records, outside araldo, and there they stay for as long as United Kingdom tax law requires us to keep them, even after you have deleted your business.

7. The data of the people who buy from you

The site counter and the webhooks may send us something about your visitors and your customers: the visit, the signup, the sale, the amount, and a fingerprint of the email address when there is one. You are the controller of that data: we handle it on your behalf and only to tell you which post brought that result. We never mix it with another business's data and we never use it for our own marketing. You can export it and delete it from Settings whenever you want. If you put the counter on your own site, it is you who must tell your visitors about it in your own privacy policy. If you connect another app with «Send to other apps» (Zapier, Make, your own backend), araldo sends it the data of the contacts that YOU choose to send — a new contact, a post that went out, a sale, a confirmed booking — signed, in real time: you remain the controller of that data, not us, and you decide what to send and to whom.

8. Facebook and Instagram

When you connect Facebook, araldo keeps your Facebook id, the name of the Page, the id of the professional Instagram account linked to that Page, and the access tokens, encrypted. We use them for two things only: showing you which account is connected and publishing the posts you approved. We do not read comments, we do not read private messages, we do not read your Page's numbers. Inside araldo, Facebook and Instagram are two separate cards: Disconnect deletes the tokens of the card you press, straight away, not of the other one. You can also remove araldo from your Facebook settings (Settings & privacy › Settings › Apps and websites): when you do, Facebook sends us a signed deletion request, and we delete the Facebook connection and the Instagram born of it, and give you a code to check that it was done. One thing we say because it is true: if you had already disconnected that Facebook inside araldo, the request finds nothing that leads back to you, because the only link to your Facebook account was in those deleted tokens; in that case the Instagram card stays, and you remove it from there, or write to [email protected] and we remove it.

9. TikTok

When you connect a TikTok account, araldo stores your TikTok open_id, your display name and the access and refresh tokens, encrypted. We use them to show you which account is connected and to publish the videos you approve, through TikTok's Content Posting API. We do not read your TikTok analytics, your follower list or your private messages. You can disconnect TikTok at any time from Channels: the tokens are deleted immediately, and you can remove araldo from inside TikTok too, under Settings and privacy › Security and permissions › Manage app permissions. To delete your whole account and everything in it, use Settings › Delete account, or write to [email protected].

10. YouTube and Google

araldo uses YouTube API Services. By connecting a YouTube channel you accept the YouTube Terms of Service (https://www.youtube.com/t/terms), and the Google Privacy Policy applies, which you can read at https://policies.google.com/privacy. What we keep from YouTube is little, and here it is in full: the encrypted access tokens, the id of the video we uploaded for you and its public address, so you can open it from the Published page. We never request and never hold anything about your other videos, your subscribers, your comments or your numbers. On the Google Ads channel we read the campaigns that already exist and, if you set a cap, we pause them when they go over it: we do not create campaigns, we do not change bids and we never touch billing. You can revoke araldo's access to your Google account at any time from the Google security settings page, at https://myaccount.google.com/permissions, or by pressing Disconnect in Channels. If you write to us to have the data that comes from YouTube deleted, we delete it within 7 days.

11. LinkedIn

When you connect LinkedIn, araldo keeps your member id, your name and the access tokens, encrypted, and uses them to publish the posts you approved. Today the post goes out from your personal account, not from your company page: we tell you before you connect, not afterwards. We do not read your connections, your messages or your notifications. The connection expires after 60 days and has to be made again: that is LinkedIn's rule, not ours. You can disconnect from Channels at any time, and you can also remove araldo from LinkedIn, under Settings & Privacy › Data privacy › Permitted services.

12. What we do not do

It is worth writing plainly. We do not sell your data and we do not trade it. We do not follow you around the web and we do not build advertising profiles: the only third-party counter on our site is the Meta and Google measurement of our own campaigns, and it exists only if you press «Accept» on the banner (see «Cookies»). We do not use your data to train any model; what the model provider does with what we send it is set out in its own terms, and is not ours to decide. And we publish nothing you have not approved, unless you switch on one of the modes that publish on their own.

13. Links to other providers

In a few places araldo points you to a provider that is not ours — OVHcloud for a domain, Twilio for a phone number, Mailchimp, Shopify, Zapier, Canva, Google Workspace, Hostinger. That link goes through an address of ours (/vai/<provider>/) that records only that your business clicked that provider, with the date and time — no other data about you or your customers — and then sends you to them. For some of these providers we have an arrangement: if you buy, we earn a commission, and you pay the same price you would pay anyway. Where such an arrangement exists, the link says so next to itself.

14. Your rights

You can ask us to show you your data, to correct it, to delete it, to limit its use, to give you a copy to take elsewhere, and to object to its use. Many of these you can do yourself, right away: Settings › Export my data gives you everything in one file, and Settings › Delete account deletes. For the rest write to [email protected]: we answer within 30 days, and we do not charge you for it.

15. How to delete everything

The page with the three steps is https://araldoai.com/en/data-deletion/. In short: disconnect the channel from Channels, delete your business from Settings, and if something does not work write to [email protected] from the address you signed up with.

16. Cookies

Only the ones the site needs to work: the session one, the one that protects forms, and the one that remembers the language you chose. Then two kinds we tell you about in full. One cookie is ours, signed, and lasts 90 days: it remembers the campaign parameters of the link you arrived with (the campaign fields and click ids in the address), the page you landed on and where you came from, under a random number — not your name — so that, if you sign up, we know which of our own campaigns brought you. The others belong to Meta and Google and exist only if you press «Accept» on the banner at the bottom of the public pages: they let those two companies match your visit with their own advertising accounts. If you press «No thanks», they are never set, no Meta or Google script is loaded, and OUR OWN origin cookie is deleted from your browser together with the anonymous row it had written: from that moment we stop counting you. Your choice is remembered for 180 days in a cookie of ours. Without their keys on our server there is no banner and none of this exists. One thing we say in full: if you arrive through one of our links carrying a code (the address ends with ?ap=), we put that code in the session, and therefore in the session cookie, even if you have no account at all. It only tells us which of our links a signup came from, not who you are, and we give it to nobody. The light or dark theme stays in your browser's own memory, not in a cookie.

17. How we keep the data safe

We only say what is there. The site travels encrypted. Channel tokens and the two-step key are encrypted in the database, and passwords are kept as fingerprints, not as words. Inside araldo each business sees only its own data, and the roles decide who can do what. Everything araldo does leaves a line in a log you can read too. There is a safety copy every night. We hold no certification to show you, and we claim none.

18. If we change this page

The date at the top changes and the page stays where it is. If the change affects the way we use your data, we write to you by email before it takes effect.

19. If you want to complain

Write to us first, at [email protected]: two messages usually settle it. If that is not enough, in the United Kingdom you can go to the Information Commissioner's Office (https://ico.org.uk/make-a-complaint/), and if you are in the European Union to the data protection authority of your own country — in Italy the Garante per la protezione dei dati personali (https://www.gpdp.it).