Legal
Legal, without the fine-print maze.
Clear information about how Arbieter handles data, provides its services, and works with third-party technology providers.
Last updated: 18 August 2026
01 / Privacy Policy
Privacy Policy
How Arbieter collects, uses, stores and shares information across our website, consulting services and software products.
Scope
This Privacy Policy applies to information collected by Arbieter ("we", "us") through:
- visitors to the Arbieter website;
- prospective and current consulting clients;
- customers who access Arbieter Brain or Arbieter Marketing (collectively, the "Products");
- authorised users of customer workspaces;
- individuals whose information is uploaded or processed by customers; and
- business contacts and prospects whose professional or business information may be collected from public or third-party sources in connection with Arbieter Marketing.
Information We Collect
Information provided directly. When you contact us, sign up for a consultation, or create an account, we collect information you provide — such as your name, email address, phone number, business name and role.
Customer content and uploaded documents. Customers using Arbieter Brain may upload documents, files and other content to their workspace. This content is processed to power the AI knowledge and retrieval functionality of the product. Arbieter processes this content on behalf of customers as a service provider.
Account and workspace information. We collect information related to your workspace: configuration, membership and role details, feature usage, and settings.
Business and professional contact information. Customers using Arbieter Marketing may upload, enter or import information about business prospects and leads, including company names, website URLs, phone numbers, addresses, and professional contact details.
Publicly available business information. Arbieter Marketing may collect business information from publicly accessible sources — including business websites, business directories, and third-party business information APIs — to identify and analyse potential business prospects. This information is used to support lead discovery, commercial analysis and outreach preparation for customers.
Website and product usage information. We collect information about how you interact with our website and Products, including pages visited, features used, and actions taken.
Technical and log information. We collect standard technical information including IP addresses, browser type, device type, operating system, referrer URLs and request timestamps.
Cookies and similar technologies. See the Cookie Policy section. In summary: we use cookies primarily for authentication session management. Our analytics provider is privacy-preserving and does not use tracking cookies.
How We Use Information
We use information collected for the following purposes:
- Providing and operating the services — delivering consulting services and operating the Products.
- Arbieter Brain — indexing and retrieving documents from customer knowledge bases, answering questions using customer-provided content, and maintaining workspace functionality.
- Arbieter Marketing — identifying and researching business prospects, analysing businesses and websites, assessing commercial relevance and fit, AI-assisted lead scoring, generating personalised outreach drafts, and supporting campaign and pipeline management.
- Improving product functionality — understanding how products are used to improve features and reliability.
- Security and fraud prevention — detecting and preventing unauthorised access or misuse.
- Customer support — responding to enquiries and resolving issues.
- Billing and administration — managing accounts and service agreements.
- Analytics — understanding website traffic through privacy-preserving analytics.
- Legal and compliance — complying with applicable laws, regulations and legal processes.
- Direct marketing — where we have a lawful basis, contacting prospective or current customers about relevant services. You may opt out at any time.
AI Processing
Arbieter Brain and Arbieter Marketing include AI-powered features. When you use these features, information — including customer content, business data and analytical inputs — may be submitted to third-party AI model providers acting as service providers.
AI-generated output — including analysis, scores, summaries, recommendations and outreach drafts — may be inaccurate, incomplete or inappropriate for specific circumstances. AI output should be reviewed by a person before it is relied upon for important decisions or sent as a communication.
We do not represent that AI output constitutes professional advice of any kind.
Information We Share — Service Providers
We do not sell personal information to third parties. We do share information with third-party service providers that help us deliver our services. Categories of provider include:
- Cloud hosting and infrastructure providers — for deploying and running the Products.
- Database, authentication and storage providers — for securely storing customer and product data.
- AI model providers — for AI processing functionality within the Products.
- Business information providers — third-party APIs used for business discovery functionality in Arbieter Marketing.
- Analytics providers — privacy-preserving analytics to understand website usage.
- Professional advisers — lawyers, accountants and other advisers where necessary.
- Authorities — where required by applicable law, court order or regulatory requirement.
Customers who require a detailed list of service providers for compliance purposes may contact us at dpo@arbieter.com.
International and Cross-Border Processing
Arbieter and its service providers operate in multiple countries. Information submitted to our Products may be transferred to and processed in countries outside your country of residence, including countries that may have different data protection laws.
We take appropriate steps to ensure that any international transfers of personal information are made in accordance with applicable data protection law.
Data Security
We implement technical and organisational measures to protect information from unauthorised access, disclosure, alteration or destruction. These include authentication controls, role-based access, row-level security in our database, and encryption of data in transit.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
Data Retention
We retain information for no longer than is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes. Customers may request deletion of their workspace data and customer content.
Privacy Requests and Contact
To make a privacy, access, correction or deletion request, or to ask a question about how we handle your information, contact us at:
- General enquiries: info@arbieter.com
- Privacy and data matters: dpo@arbieter.com
We aim to respond to all privacy requests as soon as reasonably practicable, and in any event within any timeframe required by applicable law.
Children
Our Products are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy at this URL with a revised "Last updated" date. Material changes will be communicated to active customers through the Product or by email where practical.
02 / Terms of Service
Terms of Service
The agreement between you and Arbieter governing use of our consulting services and software products.
Acceptance
By accessing or using any Arbieter service — including this website, Arbieter Brain, Arbieter Marketing, or any consulting engagement — you agree to these Terms of Service ("Terms"). If you are agreeing on behalf of an organisation, you represent that you have authority to bind that organisation. If you do not agree, do not use the services.
Eligibility and Accounts
You must be at least 18 years old and have the legal capacity to enter into a binding agreement to use Arbieter's Products. Access to the Products is by invitation or arrangement with Arbieter.
You are responsible for maintaining the security of your account credentials. You must notify us promptly if you become aware of any unauthorised access to your account.
Workspaces and Customer Responsibilities
Customers who access the Products do so through a workspace. The customer (the organisation or individual that has established the workspace) is responsible for:
- all use of the Products within their workspace, including by authorised users;
- ensuring that all authorised users comply with these Terms;
- the accuracy, legality and appropriateness of all content, data and information uploaded or processed within their workspace;
- ensuring they have the necessary rights, authority and lawful basis to upload, process or instruct Arbieter to process any information within the Products; and
- maintaining appropriate internal access controls and user management.
Permitted Use and Acceptable Use
You may use the Products only for lawful purposes and in accordance with these Terms. You must not:
- use the Products for any unlawful purpose or in violation of applicable laws or regulations;
- upload or process content that you do not have the right to use;
- engage in conduct that is deceptive, misleading, harassing, defamatory or abusive;
- attempt to gain unauthorised access to any part of the Products or any related systems;
- attempt to reverse engineer, decompile or extract source code from any part of the Products;
- use the Products to develop a competing product or service;
- transmit malware, viruses or any harmful code; or
- use the Products in a manner that unreasonably interferes with other customers' use of the services.
Arbieter Brain
Arbieter Brain is an AI-powered knowledge workspace that allows customers to upload documents and other content and ask questions of that knowledge base using AI. Customers:
- retain ownership of all content they upload to their workspace;
- are responsible for ensuring that uploaded content does not infringe the intellectual property rights of third parties;
- are responsible for ensuring that any personal information uploaded to the workspace is handled in accordance with applicable privacy laws and with appropriate authority; and
- acknowledge that AI-generated responses may be inaccurate and should be verified before being relied upon.
Arbieter Marketing
Arbieter Marketing provides tools for lead discovery, business analysis, campaign management, AI-assisted outreach generation and sales pipeline tracking. Customers:
- are responsible for ensuring that their use of the lead discovery and outreach features complies with applicable marketing, privacy, anti-spam and communications laws in all relevant jurisdictions;
- must not use Arbieter Marketing to send unsolicited commercial communications to individuals in violation of applicable law;
- must not use prospect data obtained through Arbieter Marketing to harass, deceive or engage in any unlawful conduct toward business contacts;
- acknowledge that AI-generated outreach drafts require human review before use and must be edited appropriately to ensure accuracy; and
- are responsible for maintaining any required suppression lists and honouring opt-out requests from business contacts.
Arbieter provides tools and drafts only. Arbieter does not send communications on behalf of customers and is not responsible for the content of outreach sent by customers.
Customer Content
Customers retain all rights in the content they upload to the Products ("Customer Content"). By uploading Customer Content, you grant Arbieter a limited, non-exclusive licence to process and use that content solely for the purpose of providing the Products to you.
Arbieter does not claim ownership of Customer Content. Arbieter will not use Customer Content to train AI models. Third-party AI providers used to deliver the Products operate under their own terms, and Arbieter selects providers whose terms are consistent with this commitment.
Third-Party Services and Integrations
The Products use third-party service providers to deliver functionality including cloud infrastructure, database and authentication, AI processing, and business information APIs. Categories of provider are described in the Service Providers section of our Privacy Policy.
Arbieter is not responsible for the availability, accuracy or conduct of third-party services. Your use of third-party services integrated with the Products may be subject to those providers' own terms and privacy policies.
AI Functionality and Limitations
AI features within the Products are provided as tools to assist human decision-making. You acknowledge and agree that:
- AI-generated output — including analysis, scores, summaries, recommendations and outreach drafts — may be inaccurate, incomplete, biased or otherwise unsuitable for your specific circumstances;
- AI output does not constitute professional, legal, financial or other specialist advice;
- you are responsible for reviewing AI output before using it for any consequential purpose; and
- Arbieter makes no representation or warranty about the accuracy, completeness or suitability of AI-generated output.
Intellectual Property
All intellectual property rights in the Products, including software, design, trademarks, and documentation, are owned by or licensed to Arbieter. Nothing in these Terms transfers any Arbieter intellectual property rights to you.
You retain all intellectual property rights in Customer Content. AI-generated output produced from your inputs using the Products is provided to you for your use, subject to applicable third-party provider terms.
Fees and Subscriptions
Access to certain Products or features may require a subscription or payment. Applicable fees, payment terms and billing arrangements will be communicated separately and confirmed in writing prior to any charges being applied. All fees are exclusive of applicable taxes unless stated otherwise.
Service Changes and Availability
Arbieter may modify, update, add to or remove features of the Products at any time. We will use reasonable efforts to communicate material changes to active customers with reasonable notice.
We do not guarantee uninterrupted availability of the Products. Downtime may occur due to maintenance, third-party service disruptions or other factors beyond our control.
Suspension and Termination
Arbieter may suspend or terminate access to the Products, in whole or in part, if:
- you materially breach these Terms and fail to remedy the breach within a reasonable period after notice;
- continued access creates a security risk or legal risk for Arbieter or other customers; or
- you fail to pay applicable fees.
You may stop using the Products at any time. Provisions of these Terms that by their nature should survive termination will do so, including intellectual property, limitation of liability and governing law.
Disclaimers
The Products are provided "as is" and "as available" without warranty of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.
Arbieter does not warrant that the Products will be error-free, uninterrupted, or that any particular result will be achieved. AI output is provided without any guarantee of accuracy.
Limitation of Liability
To the maximum extent permitted by applicable law, Arbieter's aggregate liability to you arising out of or in connection with the Products or these Terms will not exceed the fees paid by you to Arbieter in the 12 months preceding the claim.
Arbieter will not be liable for any indirect, incidental, special, consequential or punitive damages, including loss of profits, data, goodwill or business opportunity, even if advised of the possibility of such damages.
Nothing in these Terms limits liability that cannot be limited by law, including for fraud, death or personal injury caused by negligence, or statutory consumer guarantees where applicable.
Indemnity
You agree to indemnify and hold harmless Arbieter and its personnel from any claims, losses, damages, costs (including reasonable legal fees) arising from: (a) your breach of these Terms; (b) your violation of any applicable law; (c) Customer Content you upload or process; or (d) your use of the Products in a manner not authorised by these Terms.
Governing Law
These Terms are governed by applicable law. The jurisdiction applicable to your engagement with Arbieter will be specified in any written service agreement or order confirmation. Any disputes arising from these Terms that cannot be resolved by negotiation will be referred to the courts of the applicable jurisdiction.
Changes to These Terms
We may update these Terms from time to time. Updated Terms will be posted at this URL with a revised "Last updated" date. Continued use of the Products after the effective date constitutes acceptance of the updated Terms. Material changes will be communicated to active customers.
Contact
Questions about these Terms: info@arbieter.com
04 / Privacy & Data Rights
Privacy & Data Rights
Your rights in relation to your personal information and how to exercise them.
Overview
Arbieter is committed to respecting privacy rights. Depending on where you are located and your relationship with us, different rights may apply to the personal information we hold about you.
This section covers rights under Australian privacy law and rights that may apply to individuals in the European Economic Area, United Kingdom or other jurisdictions with relevant privacy legislation.
Australian Privacy
Arbieter handles personal information in accordance with applicable Australian privacy law, including the Australian Privacy Principles where they apply.
If you are in Australia and believe we have not handled your personal information appropriately, you may contact us first. If we do not resolve your concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
GDPR and UK GDPR
If you are located in the European Economic Area or the United Kingdom, and Arbieter processes your personal data in circumstances where the GDPR or UK GDPR applies, the following rights may be available to you:
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to request correction of inaccurate or incomplete personal data.
- Right to erasure — to request deletion of your personal data in certain circumstances (including where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing).
- Right to restrict processing — to request that we limit how we use your personal data in certain circumstances.
- Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
- Right to object — to object to processing of your personal data where we rely on legitimate interests as the lawful basis, and in relation to direct marketing.
- Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
These rights are not absolute and may be subject to exemptions under applicable law. We will respond to requests within the timeframes required by applicable legislation.
Lawful Bases for Processing
Where GDPR applies, we process personal data on the following lawful bases depending on the context:
- Contract — where processing is necessary to deliver services under an agreement with you or your organisation.
- Legitimate interests — for business operations, product improvement, security, and direct marketing to existing or prospective customers (subject to your right to object).
- Legal obligation — where processing is required to comply with applicable law.
- Consent — where we have obtained your consent (for example, for certain marketing communications). You may withdraw consent at any time.
Marketing Opt-Out
You may opt out of receiving direct marketing communications from Arbieter at any time by contacting us at info@arbieter.com or by following any unsubscribe mechanism provided in the communication.
If you are a business contact whose information has been collected for prospect outreach purposes, see also the Marketing & Prospect Data section.
How to Submit a Request
To exercise any of the rights described in this section, contact us at:
Please include enough information to identify you and describe your request. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.
Complaints
If you are not satisfied with how we have handled a privacy matter, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
- Australia: Office of the Australian Information Commissioner — oaic.gov.au
- United Kingdom: Information Commissioner's Office — ico.org.uk
- European Union: your relevant national data protection authority.
05 / Marketing & Prospect Data
Marketing & Prospect Data
How Arbieter and its customers use business and professional information for sales and marketing purposes.
Who This Section Applies To
This section applies to individuals whose business or professional contact information may be collected and processed in connection with the Arbieter Marketing product. This includes:
- people whose information appears on a business's public website or business listing;
- people whose business contact details have been sourced from third-party business information providers; or
- people whose information has been added to a customer's Arbieter Marketing workspace by that customer.
Sources of Business and Professional Information
Arbieter Marketing is a tool that helps businesses identify, research and reach out to potential business clients. To support this, information about businesses and their representatives may be collected from the following sources:
- publicly accessible business websites;
- publicly accessible business directories and listings;
- third-party business information providers and APIs;
- information provided or imported by Arbieter customers; and
- other publicly available and lawfully obtained sources.
The fact that information has been published online or in a business directory does not grant unlimited permission to use it for any purpose. We aim to limit collection and use to professional and business contact information used in a business-to-business context, consistent with what business contacts would reasonably expect.
How This Information Is Used
Business and professional information collected in connection with Arbieter Marketing is used for:
- identifying businesses that may be relevant to a customer's target market;
- evaluating commercial fit and relevance;
- business research and due diligence;
- AI-assisted analysis of businesses, websites and commercial opportunity;
- preparing personalised business-to-business outreach communications; and
- campaign and pipeline management within customer workspaces.
This information is processed on behalf of Arbieter customers, who direct the specific purposes for which it is used within their workspaces.
Customer Responsibilities for Outreach
Arbieter provides tools to generate and manage outreach drafts. Arbieter does not send outreach on behalf of customers. Customers are responsible for:
- ensuring that any communications sent to business contacts comply with applicable marketing, privacy, anti-spam and communications laws in all relevant jurisdictions (including, where applicable, the Spam Act 2003 (Cth), GDPR, UK GDPR, and CAN-SPAM);
- only sending outreach where they have a lawful basis to do so;
- reviewing and editing AI-generated outreach drafts before sending to ensure accuracy, appropriateness and compliance;
- maintaining and honouring suppression lists and opt-out requests; and
- not engaging in unsolicited bulk messaging, harassment or deceptive conduct.
Suppression and Opt-Out
If you are a business contact who has been reached through outreach generated by an Arbieter customer, any request to stop receiving communications should be directed to the organisation that contacted you, as that organisation is responsible for its own outreach.
If you believe that your information is being processed by Arbieter in a manner that is unlawful or that you wish to challenge, you may contact us at dpo@arbieter.com. We will review your request and respond appropriately.
AI-Assisted Analysis
Arbieter Marketing uses AI to analyse businesses and their websites, score commercial relevance and generate personalised outreach. This analysis is automated but is always provided to the customer as a tool for human review, not as a final autonomous decision.
Customers are responsible for ensuring their use of automated analysis features complies with applicable data protection law, including any obligations under relevant frameworks relating to automated decision-making.
Retention of Prospect Data
Prospect and lead data is held within customer workspaces and is retained for the duration of the customer's active relationship with Arbieter. When a workspace is terminated or a customer requests deletion, prospect data is removed in accordance with our data retention practices. Customers may contact dpo@arbieter.com to request deletion of their workspace data.
06 / Customer Data Processing
Customer Data Processing
The distinction between Arbieter as a data controller and as a processor of customer data.
Controller and Processor Roles
Privacy law in various jurisdictions distinguishes between organisations that determine the purposes and means of processing personal data (controllers) and those that process data on behalf of and under the instructions of a controller (processors).
Arbieter acts as a controller in relation to:
- information about visitors to the Arbieter website;
- information about customers and prospective customers; and
- information we use for our own business administration, security and product improvement purposes.
Arbieter acts as a processor (or in some frameworks, a service provider) in relation to:
- Customer Content uploaded by customers to Arbieter Brain (documents, knowledge base content); and
- prospect and lead data that customers enter or import into Arbieter Marketing workspaces.
Where Arbieter acts as a processor, the customer is the controller responsible for the lawfulness of processing. Arbieter processes such data only as directed by the customer and as described in these Terms and this Privacy Policy.
Customer Responsibilities
Customers who use the Products to process personal information on behalf of their own businesses or their end customers are responsible for:
- ensuring they have an appropriate lawful basis under applicable privacy law to upload or process any personal information within the Products;
- ensuring they have the necessary rights and authority to upload and process Customer Content;
- providing any required notices to individuals whose information they upload or process; and
- handling data subject rights requests (access, erasure, etc.) that relate to personal information they control within their workspace.
Data Processing Addendum
Customers operating in jurisdictions where a formal data processing agreement or data processing addendum (DPA) is required (including under GDPR or UK GDPR) may request a DPA from Arbieter.
To request a DPA or discuss data processing arrangements, contact: dpo@arbieter.com
Subprocessors
Where Arbieter acts as a processor, it uses its own subprocessors (third-party service providers) to deliver the Products. A current list is maintained in the Service Providers section of this page. Arbieter will notify customers of material changes to subprocessors where required by applicable law or contract.
07 / Service Providers
Service Providers
The categories of third-party providers through which Arbieter processes data to deliver its services.
Categories of Provider
Arbieter uses third-party service providers to deliver the Products. The table below describes the categories of provider and the data involved. We do not disclose specific provider names in this public policy.
Customers who require a detailed list of providers for compliance purposes — for example to satisfy a GDPR data processing agreement — may contact us at dpo@arbieter.com.
| Category | Purpose | Data / Process |
|---|---|---|
| Cloud hosting and infrastructure | Deploying, running and serving the Products. | All data transmitted to or from the Products; server-side logs and request data. |
| Database, authentication and storage | Storing workspace data, user authentication, Customer Content, lead and prospect data, activity logs and AI usage records. | Workspace data, authentication credentials, Customer Content, product data. |
| AI model providers | Powering AI features in Arbieter Brain (knowledge retrieval, Q&A) and Arbieter Marketing (lead analysis, website analysis, outreach generation). | Customer Content and business information submitted for AI processing; prompts and model inputs. |
| Business information providers | Third-party APIs used for business discovery and lead research in Arbieter Marketing. | Search queries (business type, location); business information returned by the API. |
| Analytics | Privacy-preserving, aggregated measurement of website usage. | Aggregate page view data. No tracking cookies; no persistent individual profiles. |
Data Processing Locations
Third-party service providers may process data in countries outside your country of residence. We take appropriate steps to ensure that any international transfers are made in accordance with applicable data protection law, including through appropriate contractual safeguards where required.
Changes to Service Providers
Arbieter may add or change service providers from time to time as the Products evolve. Customers who require advance notification of provider changes as a contractual requirement should contact dpo@arbieter.com to discuss appropriate arrangements.
Future Provider Categories
The following categories of provider may be introduced as the Products develop:
Questions about your data?
We're here to help.
If you have a privacy, data or legal question about Arbieter, get in touch. We aim to respond promptly.