Privacy Policy

Last updated: October 2026

What we collect

When you create a DataSteward workspace we store your name, email address and password (securely hashed). Inside your workspace we store the data asset register you build: asset names, descriptions, owners, classifications, findings, actions and the activity history of your workspace.

How we use it

Your information is used only to operate the service: signing you in, showing your register to your workspace members, generating reports and gap findings, and keeping an audit trail. We do not sell your data, and we do not use your register contents for advertising.

AI features

When a manager generates an AI governance summary, a limited, aggregated view of your register (counts and asset references — never owner names) is sent to the AI provider configured for the workspace. AI output is advisory only and is stored in your workspace so you can review it.

Who can see your data

Only members of your workspace can see its data, and only within the permissions of their role. Every workspace is isolated at the database level, so one organisation can never read another organisation's records.

Retention and deletion

Your data is kept while your workspace is active. Workspace administrators can remove all business data at any time from Settings. Audit history is retained to preserve accountability, and deleted data is not recoverable.

Your rights

You may request a copy, correction or deletion of your personal information at any time by contacting us. We respond to all requests within 30 days.

Contact

Questions about this policy or your data: hello@arventra.tech.