Effective date: 1 August 2026 · Version 1.1

1. Who we are

This Privacy Policy explains how ArilX LLC (“ArilX”, “we”, “us”, “our”) collects, uses, and protects personal data across our websites at arilx.io, studio.arilx.io, and app.arilx.io (together, the “Services”).

Legal name: ArilX LLC (შპს არილიქს)

Company ID: 445839754

Registered address: 2 Volski Street, Batumi, Georgia

Contact for privacy matters: hello@arilx.io

ArilX provides an AI-powered website builder and an AI chatbot builder, offered on a subscription basis. This policy is governed by the Law of Georgia on Personal Data Protection and, where applicable to users in the European Economic Area (EEA), the EU General Data Protection Regulation (GDPR).

2. The two roles we play

Personal data is processed in two distinct situations, and our legal role differs in each.

(a) When you use our Services (arilx.io, studio.arilx.io, or app.arilx.io) directly — we are the data controller. This covers people who register an account, use the website or chatbot builder, chat with the ArilX assistant on our website, or submit our contact or booking forms. For this data, ArilX decides why and how it is processed.

(b) When a visitor interacts with a chatbot that our customer built and embedded on the customer’s own website — we are a data processor. In that case our customer (the chatbot owner) is the controller, and ArilX only processes the visitor’s data on the customer’s behalf. That processing is described in our separate AI Assistant Privacy Policy, and our customers are responsible for providing their own privacy notice to their visitors.

3. What personal data we collect

Account data (when you register)

Email address, first and last name, phone number, country, and an encrypted (hashed) password. If you sign in with Google, we receive your Google account identifier, email, and name from Google.

Information you provide through our forms

• Contact form: name, email, phone number, and your message.

• Booking form: name, email, an optional note, and your selected date and time.

• ArilX website chat assistant: name, phone number, email (where you provide it), and the content of your messages.

Content you create and upload

• Chatbots you build (name, description, instructions, and configuration).

• Documents you upload to train your chatbot (e.g. PDF or Word files). We extract the text from these documents to power the chatbot; we do not keep the original file.

• Websites generated for you through the builder.

Technical data

• Authentication tokens, stored as secure, http-only cookies (see our Cookie Policy).

• IP address, which appears in our server logs and is used to set a default language and keep the Services secure. We do not store your IP address in our application database.

• Limited information stored in your browser to make the Services work (see our Cookie Policy).

• On arilx.io, analytics and measurement data collected through Google Analytics 4 and Microsoft Clarity, but only after you give consent. This may include pages visited, approximate location derived from IP address, device and browser information, interaction events, heatmaps, and session replay data. We mask form fields and other user-input areas where Clarity could otherwise record entered content.

Payment data

Subscription payments are processed by Bank of Georgia on its own secure payment page. You enter your card details directly with the bank.

We never receive, see, or store your full card number or CVV. To let you see and reuse your saved payment method, and to renew your subscription, we store a limited set of payment details returned by the bank: the cardholder name, the card expiry date, the last four digits of the card, and a secure payment token issued by the bank. We do not store the full card number or security code.

Children

The Services are intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us data, contact hello@arilx.io and we will delete it.

4. How we use your data and our legal bases

We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects on you.

5. Artificial intelligence and how your content is processed

Our Services use Google’s Gemini API to generate content and power chatbots. Only what is needed to generate a response is sent to Google (message text, conversation history, your chatbot configuration, uploaded document text, and our instructions); direct identifiers of chat visitors such as name, email, phone, and IP address are not. The Gemini API is used under Google’s commercial (paid) terms, under which Google does not use your data to train its AI models.

6. Who we share data with (sub-processors)

We use the following trusted service providers, who process data only on our instructions:

We may also disclose data where required by law, to protect our legal rights, or in connection with a business transfer (e.g. a merger or acquisition), in which case you will be notified.

7. International data transfers

Some of our providers (in particular Google) may process your data outside Georgia and the EEA, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) and the providers’ Data Processing Addenda.

8. How long we keep your data

9. Your rights

Under Georgian law and the GDPR (where applicable), you have the right to access, rectify, erase, restrict, or object to the processing of your personal data; to data portability; and to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hello@arilx.io. We will respond within 30 days. You may also lodge a complaint with the Personal Data Protection Service of Georgia (personaldata.ge) or, if you are in the EEA, with your local data protection authority.

10. How we protect your data

We apply appropriate technical and organisational measures — including encryption of data in transit, hashed passwords, access controls, and secure http-only cookies for authentication — to protect your data against unauthorised access, loss, or misuse.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on arilx.io and update the effective date above. Significant changes will be communicated to you.

12. Contact us

ArilX LLC — hello@arilx.io — 2 Volski Street, Batumi, Georgia.