arsi.team

Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how arsi.team ("we", "us", "our") collects, uses, and protects personal data when you use our website (arsi.team) and our software products: Digital Menu, Hospitality Hub, Event Web-App, and Gym (together, the "Services").

1. Who we are

arsi.team is operated by Roman Stankevich, doing business as "arsi.team". For any privacy-related question or request, contact us at roma@arsi.team or via Telegram at @ars_i.

2. What data we collect

  • Account data: name, email address, and profile information, collected when you sign up or sign in via Clerk or Google Sign-In.
  • Business/workspace data: content you or your staff enter into the Services on behalf of your organization — e.g. menu items, guest information, event details, class schedules, and related media.
  • End-guest data: where your guests, diners, event attendees, or gym students interact with our guest-facing apps, we process the data your organization configures them to submit (e.g. names, contact details, bookings), acting on your instructions as a data processor for that data.
  • Payment data: when subscription billing is enabled, payment card details are collected and processed directly by our payment processor (Stripe); we do not store full card numbers ourselves.
  • Usage data: standard technical data (IP address, browser type, pages visited) collected via Google Analytics on our marketing website, only after you consent to analytics cookies, and aggregated, cookieless page-view data collected via Vercel Web Analytics.
  • Communications: messages you send us via email or Telegram.

3. How we use data

We use personal data to: provide and maintain the Services; authenticate and secure accounts; process payments and manage subscriptions; respond to support requests; improve our products; and comply with legal obligations.

4. Legal basis

Where GDPR or similar law applies, we process data based on: performance of a contract (providing the Services you signed up for), legitimate interest (security, product improvement), consent (analytics cookies), and legal obligation (tax and accounting records).

5. Who we share data with

We share data with the following service providers, each acting under their own privacy commitments, strictly to operate the Services: Clerk (authentication for platform users), Google (OAuth sign-in), Stripe (subscription billing and payment processing), Cloudinary (media hosting and delivery), DeepL (automatic translation of guest-facing content), Google Analytics and Vercel Analytics (website usage analytics, marketing site only), Vultr (cloud hosting infrastructure, Singapore). We do not sell personal data.

6. Cookies and similar technologies

Our marketing website (arsi.team) currently uses:

  • Vercel Web Analytics — collects anonymized, aggregated page-view data without cookies or persistent identifiers. No consent needed.
  • Google Analytics (GA4) — sets analytics cookies (e.g. _ga, _gid) to measure site usage. These scripts load only after you accept them via our cookie banner; if you decline or dismiss the banner, no Google Analytics cookies are set.
  • Local storage— we store your language preference in your browser's local storage (not a cookie) so the site remembers it on your next visit. This is strictly functional and always active.

We do not use advertising or cross-site tracking cookies on the marketing website. Our console application (console.arsi.team) uses strictly necessary session and security (CSRF) cookies only, required to keep you signed in and protect your account; these cannot be disabled without breaking sign-in.

7. Data retention

We retain account and workspace data for as long as your organization's account is active, plus a reasonable period afterward for legal, accounting, and backup purposes, after which it is deleted or anonymized.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, or object to certain processing. To exercise these rights, contact roma@arsi.team.

9. International transfers

We are based in Thailand and host infrastructure in Singapore. Some of our service providers (listed above) process data in other countries, under their own applicable safeguards.

10. Children

Our Services are intended for business use and are not directed at children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time; the "Last updated" date above reflects the latest revision. Material changes will be communicated to account owners.

12. Contact

Roman Stankevich — roma@arsi.team — Telegram @ars_i