Privacy Policy
Last updated: October 2026
What we collect
When you create a DataSteward workspace we store your name, email address and password (securely hashed). Inside your workspace we store the data asset register you build: asset names, descriptions, owners, classifications, findings, actions and the activity history of your workspace.
How we use it
Your information is used only to operate the service: signing you in, showing your register to your workspace members, generating reports and gap findings, and keeping an audit trail. We do not sell your data, and we do not use your register contents for advertising.
AI features
When a manager generates an AI governance summary, a limited, aggregated view of your register (counts and asset references — never owner names) is sent to the AI provider configured for the workspace. AI output is advisory only and is stored in your workspace so you can review it.
Who can see your data
Only members of your workspace can see its data, and only within the permissions of their role. Every workspace is isolated at the database level, so one organisation can never read another organisation's records.
Retention and deletion
Your data is kept while your workspace is active. Workspace administrators can remove all business data at any time from Settings. Audit history is retained to preserve accountability, and deleted data is not recoverable.
Your rights
You may request a copy, correction or deletion of your personal information at any time by contacting us. We respond to all requests within 30 days.
Contact
Questions about this policy or your data: hello@arventra.tech.