Privacy Policy
This Privacy Policy describes how Educo LLC ("Educo," "Company," "we," "us," or "our") collects, uses, processes, stores, shares, and protects information obtained through Ariyel, our customer relationship management platform, together with the websites, applications, and related services through which it is made available (collectively, the "Services"). This Privacy Policy applies to ariyel.com, app.ariyel.io, and the Ariyel platform.
Other products operated by Educo are governed by their own privacy policies. This Privacy Policy governs Ariyel only.
By accessing or using the Services, creating an account, submitting information, or otherwise providing information to Educo through Ariyel, you acknowledge that you have read and understood this Privacy Policy.
The three categories of information
Ariyel handles three distinct categories of information, and different rules apply to each.
Account Information is information about the individual using Ariyel and the organization they belong to. Educo determines how this information is used.
Customer Data is the business information an organization stores within its own Ariyel workspace, including its contacts, companies, deals, notes, tasks, and related records. Customer Data belongs to the organization that entered it. Educo processes Customer Data solely on that organization's behalf and in accordance with its instructions, and does not use Customer Data for its own purposes.
Google User Data is information obtained from a user's Google account where that user has voluntarily connected it. Google User Data is subject to the additional restrictions described in the section titled "Google User Data" below, which govern in the event of any conflict with other provisions of this Privacy Policy.
Information we collect
Account Information may include names, email addresses, telephone numbers, business addresses, usernames, profile images, time zone and locale preferences, authentication credentials, organization membership and role, subscription details, and records of transactions associated with the Services.
Technical Information may include internet protocol addresses, device identifiers, browser type, operating system, device configuration, and other technical data generated through interactions with the Services. Usage Information may include pages visited, features used, session durations, timestamps of activity, and navigation paths.
Customer Data may include any information an organization chooses to enter into or upload to its workspace, including contact and company records, deal records, notes, tasks, files, custom fields, and communications logged against those records.
Communications may include support inquiries, feedback, and other correspondence submitted to Educo.
Google User Data
Where a user chooses to connect a Google account to Ariyel, Educo accesses certain information from that account. Connection is entirely optional. Ariyel is fully usable without it, and a user may disconnect at any time.
What we access, and why
We request the following authorizations, and use them only as described:
Gmail message data (gmail.readonly). We read message headers —
sender, recipients, subject line, date, and thread identifiers — from the period
the user selects at the time of connection, in order to automatically create
contact and company records and to display a communication history on those
records. When a user opens a specific message from within Ariyel, we retrieve
that individual message so it can be displayed to that user in the application.
Gmail sending (gmail.send). We send messages composed by the user
from within Ariyel through the user's own Google account, so that those messages
originate from the user's own address.
Google Calendar events (calendar.events.readonly). We read event
titles, times, and attendees in order to display meetings on the relevant contact
or deal records.
Basic profile information (openid, userinfo.email,
userinfo.profile). We use this solely to identify which Google
account has been connected.
What we store
Through Google APIs, we store message headers and calendar event details as described above, not message bodies or attachments. Message content is retrieved only when a user opens a specific message, is displayed to that user, and is not retained by Educo. Deliberately forwarded copies use the separate process below.
Limited Use
Ariyel's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, and notwithstanding any other provision of this Privacy Policy:
We do not sell, rent, or transfer Google User Data to any third party, except as necessary to provide or improve the features described above, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to affected users.
We do not use Google User Data for advertising purposes of any kind, including personalized, targeted, retargeted, or interest-based advertising.
We do not use Google User Data to train, develop, or improve generalized artificial intelligence or machine learning models.
We do not permit humans to read Google User Data, except where the user has provided affirmative consent for specific messages, where necessary for security purposes or to investigate abuse, where required by applicable law, or where the data has been aggregated and anonymized.
Deletion
When a user disconnects their Google account, Educo revokes its access authorization with Google and deletes all Google User Data associated with that connection. Contact and company records already created within the workspace remain, as those records belong to the organization as Customer Data.
A user may also revoke Ariyel's access directly at any time at https://myaccount.google.com/permissions.
Deliberately forwarded email
If you choose to forward or BCC email to your workspace's Ariyel intake address, we receive and retain that copy's original participants, subject, date, body and attachments to display correspondence on workspace records. This is separate from connecting Google: we do not use Google APIs to store message bodies or attachments, and forwarding does not create an outbound mailbox.
Your workspace address uses its unique URL handle and is shared by its members. Use it only with your verified Ariyel login email. Sender checks rely on receiving-provider delivery evidence and domain-authorized mail infrastructure, not on keeping the address secret. Your imports remain owned by you. Workspace sharing controls govern teammate access; by default teammates can see permitted subjects and metadata, not bodies or attachments. Internal and protected correspondence stays private.
We retain forwarded copies until you delete them or the submitting membership, account or workspace is removed. Disabling your imports stops new intake for you without deleting history. Your workspace URL handle is permanent; changing the workspace name does not change its URL or intake address. Deletion removes access and queues private attachment bytes for retryable removal; it cannot recall downloaded copies, instantly revoke an issued download link, or instantly erase backups. Download links expire within one minute. Created CRM contacts follow ordinary record retention. Issued URL handles and retired intake identifiers remain permanently reserved without ownership links to prevent address reuse; a meaningful handle can itself identify a business. Import status metadata remains until the submitting membership, account or workspace is removed.
Resend processes incoming copies and stores customer data in the United States. Its Free, Pro and Scale plans retain email and log data for 30 days; backups persist for 7 days. Remaining customer data is deleted within 90 days of account termination. Earlier provider-side message removal requires contacting Resend. Our deletion action does not promise immediate provider or backup erasure. See Resend's retention policy.
How information is collected
Information is collected directly from individuals when they voluntarily provide it through the Services, including when creating accounts, entering records, uploading materials, or communicating with Educo.
Technical and usage information is collected automatically through the operation of the Services, including through cookies and similar technologies used to maintain sessions, secure the platform, and understand how the Services are used.
Google User Data is collected only where a user has connected a Google account, and only within the authorizations that user has granted.
How we use information
Educo uses Account Information and Technical Information to operate and maintain the Services, create and manage accounts, authenticate users, process transactions, provide technical support, respond to inquiries, secure the platform against fraud and abuse, comply with legal obligations, and improve the reliability and functionality of the Services.
Educo processes Customer Data solely to provide the Services to the organization that owns it, in accordance with that organization's instructions and its agreement with Educo. Educo does not use Customer Data for its own commercial purposes, does not sell it, and does not use it to train artificial intelligence or machine learning models.
Educo uses Google User Data only as described in the section titled "Google User Data" above.
Educo may send service communications relating to the operation of an account, including security notices, billing notices, and material changes to the Services. Marketing communications are sent only where permitted by applicable law, and every marketing communication includes a means of unsubscribing.
Cookies and similar technologies
Educo uses cookies and similar technologies to maintain authenticated sessions, remember user preferences, secure the Services, and understand aggregate usage patterns. Educo does not use cookies to deliver targeted advertising, and does not permit third-party advertising networks to place tracking technologies within the Ariyel application.
Users may configure their browser to reject or delete cookies; disabling cookies necessary for authentication will prevent use of the Services.
Aggregated and de-identified information
Educo may generate aggregated or de-identified information reflecting patterns of system usage and platform performance, and may use such information to operate, secure, and improve the Services. Such information is created so that individual users and individual organizations cannot reasonably be identified.
Google User Data is not used to create aggregated or de-identified datasets other than as expressly permitted by the Limited Use requirements. Customer Data is not used to create datasets offered or licensed to third parties.
Data retention
Account Information is retained for as long as an account remains active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce agreements.
Customer Data is retained for as long as the owning organization maintains its workspace. Upon termination, Customer Data is deleted in accordance with the organization's agreement with Educo.
Google User Data is retained only while a Google account remains connected. It is deleted when the user disconnects the account, when the user's Ariyel account is closed, or when Educo's authorization is revoked at Google, whichever occurs first.
Data security
Educo implements administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. These include encryption of data in transit and at rest, encryption of authentication credentials for connected accounts, database-level access controls that isolate each organization's workspace from every other, and restriction of access to production systems to authorized personnel.
No internet-based system can be guaranteed to be completely secure. Users acknowledge the inherent risks of transmitting information electronically.
Your rights and choices
Individuals may request access to the personal information Educo holds about them, request correction of inaccurate information, request deletion of their information, or object to or restrict certain processing, by contacting Educo using the details below. Educo will respond as required by applicable law and where the identity of the requester can be reasonably verified.
Where a request concerns Customer Data held within an organization's workspace, Educo will refer the request to that organization, which controls that information.
Users may disconnect a connected Google account at any time from within Ariyel, or revoke access directly at https://myaccount.google.com/permissions.
Children's privacy
The Services are not intended for individuals under the age of eighteen (18), and Educo does not knowingly collect personal information from minors. If Educo becomes aware that personal information has been collected from a minor without appropriate authorization, reasonable steps will be taken to delete it.
International data transfers
Information collected through the Services may be stored or processed in the United States or other jurisdictions where Educo or its service providers operate. Where required by applicable law, Educo implements appropriate safeguards for such transfers.
Changes to this Privacy Policy
Educo may update this Privacy Policy to reflect changes in legal requirements, technological developments, or business practices. Updated versions will be posted with a revised "Last Updated" date. Where a change materially affects how Google User Data is handled, affected users will be notified.
Contact information
Educo LLC
3930 Blake Street
Denver, CO 80205
Email: hello@ariyel.io