Legal
Privacy Policy
Effective 9 October 2026
The short version. arby is a desk assistant that you talk to. It only listens after you say its wake word. It reads your email only if you connect a mailbox, and then only to do what you ask. It can never send, delete or change your email. We don't sell your data, we don't use it for advertising, and nobody uses it to train AI models.
1. Who we are
arby (the device, the arby app and the services behind them, together the "Service") is operated by WISED S.r.l., with registered office at Viale Giuseppe Azari 72, 28922 Verbania (VB), Italy, VAT and tax no. 02732850033 ("we", "us"). We are the data controller for the personal data described in this policy.
Registered with the Business Register at the Camera di Commercio Monte Rosa Laghi Alto Piemonte, registration no. 02732850033; REA VB-310419.
For anything about privacy, write to [email protected]. For general support, write to [email protected]. Our certified email (PEC) address is [email protected].
2. What arby does
arby is a personal AI assistant. You speak to it, and it answers out loud. It can look things up and, when you ask, carry out tasks for you on websites in an isolated browser, for example finding a flight or booking a table. Before anything consequential, like submitting a booking or a payment, it asks for your approval. You can cancel any task at any time.
You can also connect accounts so that arby can help with them:
- Email (Gmail or Google Workspace, Outlook.com or Microsoft 365), read-only. arby uses it to answer questions about your email and to type the one-time codes that websites email you when it signs in for you.
- Password managers (Bitwarden, 1Password, LastPass). arby uses only the logins you put in a folder or vault named "Arby", so that it can sign in to websites on your behalf.
3. The data we process
Voice and conversations
- Wake-word detection runs entirely on your device. Until you say the wake word, no audio leaves it.
- After the wake word, the audio of your request is streamed to our servers and to our AI provider (see section 5), which turns it into text and produces arby's spoken answer.
- We keep a session log of each conversation: transcripts of what you and arby said, the tools arby used and their results, and timings. We use it to run the Service, to fix problems and to keep the Service secure. Email content is never written to it (see section 4). Session logs are deleted after 30 days.
Tasks on websites
- Each task runs in a fresh, isolated browser or desktop sandbox on our servers. The sandbox is deleted when the task ends, is cancelled, or the conversation ends. It has no access to our other systems.
- What arby does in the sandbox (pages visited, buttons clicked, text typed) is part of the session log. Passwords and one-time codes are removed from that log and from everything shown to the AI model.
- If you choose to save your sign-in to a website, its browser session data (cookies and similar) is stored encrypted and used only for tasks on that website, until you remove it.
Password managers
- arby can only see the logins in the folder or vault named "Arby" that you create. It retrieves one login at a time, only for the website the task's browser is actually on.
- Passwords are typed directly into the website. They are never sent to the AI model and never written to any log.
- The access token for your vault is kept in an encrypted secret store. We log which website a login was looked up for and when, but never the username or password. These records are kept for 90 days.
Account and device data
- Your account identifier, your device's identifier and software version, and technical connection data (such as IP address and timestamps), used to authenticate your device and operate the Service.
This website
- getarby.com is served by Cloudflare, which processes standard request data such as IP addresses to deliver and protect the site. The site uses no advertising or analytics cookies.
- If you email us, we use your message and address to reply. Messages sent to our privacy and support addresses are forwarded by Cloudflare to a Gmail mailbox, where we read and respond to them.
4. Email: Google and Microsoft account data
This section describes how arby handles data from a Gmail or Google Workspace account, or an Outlook.com or Microsoft 365 account, that you choose to connect.
What we access
- For Google, we request a single permission: read-only access to Gmail (
https://www.googleapis.com/auth/gmail.readonly). For Microsoft, we request Mail.Read and User.Read. - With it, arby can read your messages, their headers (sender, recipients, subject, date, and the authentication results your provider adds), attachments, labels or folders, and your address and aliases.
- arby cannot send, delete, move or archive email, and cannot change labels or mark anything as read. Our software rejects any connection that would grant broader access.
How we use it
Only to provide the features you use, at the moment you use them:
- Answering your requests about your email. When you ask, for example, "when is my flight to London?" or "what did Anna say about Friday?", arby searches and reads the relevant messages and attachments and tells you the answer.
- Entering emailed sign-in codes. When arby signs in to a website for you and that website emails a one-time code, arby finds that email, checks that it really comes from that website (using your provider's own sender authentication) and types the code into the website. The code is never shown to the AI model.
arby reads your email only during a conversation in which you asked for one of these things. It does not scan your mailbox in the background, and it does not build a profile of you from your email.
Who it is shared with
- To answer a request, the messages arby reads for it are sent to our AI model provider, OpenAI, which processes them on our behalf to produce the answer (see section 5). OpenAI does not use this data to train its models.
- Our hosting provider stores and processes it on our behalf, as part of running the Service.
- Nobody else receives it. We do not sell it, use it for advertising, or share it with data brokers. We do not use it to train or improve AI or machine-learning models, ours or anyone else's.
What we store, and for how long
- Access tokens. The OAuth refresh token that lets arby read your mailbox is kept encrypted in a secret store, separate from the rest of the Service. The AI model and the website sandboxes never see it. It is kept until you disconnect the mailbox or delete your account.
- Email content. It is not stored. Messages are fetched when needed for a request and kept in memory only while that request is processed. They are excluded from session logs.
- Minimal records. We keep your connected mailbox addresses, the websites you linked to a mailbox for sign-in codes, and the internal identifiers of code emails already used, so that an old code is never entered twice. An access log records which internal message identifiers were read and when, never their content. It is kept for 90 days.
- Our AI provider. OpenAI may keep data sent through its API for up to 30 days to detect abuse, and then deletes it.
Human access
No person at our company reads your email, except: with your explicit permission for specific messages (for example, when you ask support to look into a problem); when necessary for security purposes, such as investigating abuse; to comply with applicable law; or in aggregated, anonymised form for internal operations.
Disconnecting and deletion
- You can disconnect a mailbox at any time from the arby app. We then delete its tokens and records and revoke our access at Google.
- You can also revoke access yourself: for Google at myaccount.google.com/permissions, and for Microsoft at account.live.com/consent/Manage (personal accounts) or myapps.microsoft.com (work or school accounts).
- To have all your data deleted, write to [email protected].
Google API Services: Limited Use. arby's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Service providers
Our backend, website sandboxes and secret store run on infrastructure in Europe.
We use these providers to run the Service. Each processes personal data only on our instructions and under a data processing agreement.
| Provider | Purpose | Location |
|---|---|---|
| OpenAI, L.L.C. | Speech recognition, voice, and the AI model that understands requests and decides what to do | United States |
| Cloudflare, Inc. | Website delivery and protection, email forwarding | Global network |
arby also talks to the services you ask it to use, such as websites you send it to, Kiwi.com for flight searches, and your email and password-manager providers. Those services handle data under their own privacy policies.
We may disclose data if required by law, or to a successor if our business is transferred. In that case, this policy continues to apply to your data.
6. Legal bases (GDPR)
- Performance of a contract: providing the Service you signed up for, including conversations and tasks.
- Consent: connecting an email account or a password manager. You can withdraw consent at any time by disconnecting it.
- Legitimate interests: keeping the Service secure, preventing abuse and fixing problems, using the minimal logs described above.
- Legal obligations: where the law requires us to keep or disclose data.
7. International transfers
Some providers process data outside the European Economic Area, notably in the United States. Where this happens, we rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework, for certified providers) or on the European Commission's Standard Contractual Clauses.
8. Retention at a glance
| Data | Kept for |
|---|---|
| Audio before the wake word | Never leaves your device |
| Session logs (transcripts, tool activity) | 30 days |
| Email content | Not stored; in memory only while a request is processed |
| Email and password-manager access tokens | Until you disconnect or delete your account |
| Access and security logs (no content, no secrets) | 90 days |
| Website sandboxes | Deleted when the task ends |
| Saved website sign-ins | Until you remove them |
| Account data | Until you delete your account |
9. Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing, and to receive it in a portable format. You can also withdraw any consent you gave. To exercise these rights, write to [email protected]. We will answer within one month.
You can also lodge a complaint with your data protection authority. In Italy, that is the Garante per la protezione dei dati personali.
10. Security
We protect data with encryption in transit and at rest, a separate secret store for access tokens, and website sandboxes that are locked down, isolated from our systems and deleted after each task. We give each component only the access it needs. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
11. Children
The Service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.
12. Changes
If we change this policy, we will post the new version here with a new effective date. If the changes are significant, we will notify you in the app or by email before they take effect. We will not use data already collected in a materially different way without your consent.