Privacy Policy

Last updated: November 5, 2026

The short version

Arlo is your assistant, so it sees a lot of your life. Here is what that means in plain words.

• We never sell your personal information.
• Your email, calendar, and other Google data are never used to train AI, ours or anyone else’s.
• Your calls, meeting recordings, connected apps, files, passwords, passport, and payment details are never used to train AI either.
• You can see what Arlo remembers about you, fix it, and have it erased. Deleting your account erases your account data.
• You decide about AI training. You can turn it off at any time in Account Settings, and Arlo works the same either way, at the same price. Outside the U.S., it stays off unless you turn it on.
• The AI companies that run Arlo’s models work for us. Our contracts with them do not let them train their models on your data.
• Arlo tells people when it records a call or meeting, and it says it is an AI.

The rest of this page gives the details, including the formal disclosures privacy laws require.

About this policy

This Privacy Policy explains how Arlo ("Arlo", "we", "us", "our") collects, uses, shares, and protects information when you use the Arlo AI assistant and related services (the "Service"). We have tried to write it the way we would explain it to a friend.

We apply one high standard everywhere, so most of what is below applies to everyone, wherever you live. Some sections add specific rights for people in the UK, the EU, and U.S. states with privacy laws.

If we make a material change to this policy, we will tell you by email or in the app before it takes effect. We do not make meaningful changes silently. We will never use information we already have in a materially new way without asking you first.

Who is responsible for your data

Arlo is operated by Arlo AI, LLC, based in Wyoming, United States. For data-protection purposes, Arlo AI, LLC is the "controller" of the personal data described in this policy, except for data about people who don’t use Arlo, where the Arlo user who brought Arlo in is the controller and Arlo acts on their behalf (see "Information about people who don’t use Arlo" below).

For any privacy question or request, email privacy@arlo.sh. If you are in the UK or the EU, see "UK and EU representatives" below.

Information we collect

We collect the categories of personal information below. The formal category names from California law are in parentheses, so U.S. residents can match them to their rights.

• Account and identifiers (Identifiers): your name, email, mobile phone number, date of birth if you give it at web signup, messaging-app account IDs, account ID, login identifiers, and IP address. Used to create your account, sign you in, and text or call you.
• Customer and billing records (Customer records; Commercial information): your billing contact details, plan, credits, purchases Arlo makes for you, and payment history. Card payments are processed by Stripe; we do not store full card numbers.
• Messages and content (Audio and electronic information): the messages, requests, photos, files, and voice notes you send to Arlo, and Arlo’s replies.
• Connected-account data (Professional or employment-related information; Audio and electronic information): information from tools you connect, such as Gmail, Google Calendar, Google Drive, Outlook, Slack, and Microsoft Teams, including the email, calendar, and file contents Arlo needs to do what you ask, plus the access tokens that let Arlo reach those tools.
• Audio, recordings, and transcripts (Audio and electronic information): recordings and transcripts of phone calls and video meetings Arlo joins or makes for you. See "Recording calls and meetings" below.
• Location (Geolocation data): a location you choose to share with Arlo, such as a live location in Messages or a place you tell it you are, used to answer things like "what’s near me" or to plan a trip. Arlo uses a shared location for a few hours and then erases it.
• Things you ask Arlo to keep safe (Sensitive personal information): website logins you save and a passport you add for travel check-in. These are encrypted, are never sent to the AI models, and are used only on a site you approve. Payment methods you link are held by Stripe, and Arlo uses them only for a purchase you approve.
• Memory and inferences (Inferences): Arlo’s long-term "memory": facts Arlo learns about you from your messages and connected tools, stored as text and as mathematical representations (embeddings), so it can recall context and personalize its help.
• Public profile information (Professional or employment-related information; Inferences): when you sign up, what a public profile lookup finds about you, such as your work, city, and interests, kept as guesses you can see and erase. See "Public profile lookup at signup" below.
• Usage and technical data (Internet or network activity): device, log, and usage information, including how well Arlo did on each request, needed to operate, secure, improve, and measure the Service and our public marketing pages.

Where this information comes from

We collect information directly from you (for example, when you sign up or message Arlo), from the tools you choose to connect, automatically as you use the Service, and from the calls and meetings you ask Arlo to join. When you sign up, we also receive public profile information about you from our people-lookup provider, Orbit (see "Public profile lookup at signup"). We may also receive information about other people through you, for example other participants in a meeting Arlo records or a person you ask Arlo to text.

Sensitive information

Some of what Arlo handles is sensitive personal information under California and other state laws, and special-category or otherwise sensitive data under UK and EU law. For Arlo this means, in particular: the contents of emails, messages, and meetings Arlo handles for you where Arlo is not the intended recipient; login credentials and access tokens for accounts you connect; website passwords and passport details you save; payment and financial account details you link; and a precise location you share.

We use sensitive information only to provide and secure the Service you asked for, and to check and improve the quality of that same Service. We never use it to train AI models (our AI-training filters are built to leave sensitive topics out), we never use it to infer things about you for advertising, we do not sell it, and we do not share it for cross-context behavioral advertising. Because we limit our use this way, you don’t need to do anything extra to restrict it, but you can always ask us about it at privacy@arlo.sh.

Why we use your information, and our legal basis

We only use your personal data when the law lets us. For people in the UK and EU, here is the lawful basis under the GDPR for each purpose.

• To run Arlo and do what you ask: because it is necessary to deliver the Service you signed up for (contract, Art. 6(1)(b)).
• To send the texts, voice calls, and notifications you asked for: to deliver the Service, or with your consent where required (Art. 6(1)(b) or 6(1)(a)). You can stop texts any time by replying STOP.
• To keep Arlo secure, prevent fraud and abuse, fix problems, and keep it reliable: because we have a legitimate interest in running a safe, dependable product, balanced against your rights (Art. 6(1)(f)).
• To check and improve the quality of Arlo, including automated quality grading and testing new models (see "How we make Arlo better"): because we have a legitimate interest in making the Service work well for you, balanced against your rights. You can object at any time (Art. 6(1)(f)).
• To use your conversations for AI training: in the UK and EU, only with your consent, which you give by turning the setting on and can withdraw at any time (Art. 6(1)(a)). See "AI training: your choice".
• To measure whether ads and public signup flows are working: only on public marketing, signup, and trial confirmation pages, because we have a legitimate interest in understanding campaign performance, balanced against your rights and your opt-out choices (Art. 6(1)(f)).
• To look up your public profile when you sign up, so onboarding and Arlo’s first suggestions fit you: because we have a legitimate interest in making the Service personal from the start, balanced against your rights. You can object at any time (Art. 6(1)(f)). See "Public profile lookup at signup".
• To keep customer records and follow up with people who use Arlo for work: because we have a legitimate interest in understanding and growing our business, balanced against your rights. You can object at any time (Art. 6(1)(f)).
• To take payment: to perform our contract with you and to meet our legal and accounting obligations (Art. 6(1)(b) and 6(1)(c)).
• For anything optional, such as marketing emails or texts: only with your consent, which you can withdraw at any time (Art. 6(1)(a)).

Do you have to give us this information

You do not have to connect any tool or give us a phone number. Some features simply will not work without the relevant data: for example, Arlo cannot text you without a phone number, and cannot act in your calendar unless you connect it. Where we ask for information we genuinely need to run the Service, declining means that part of the Service is unavailable to you. AI training is never required.

How we make Arlo better

Like any service, Arlo gets better when we can see where it went wrong. Here is what we do, for every account.

• Automated quality checks. After Arlo answers, an AI model may grade the answer: did it do what you asked, did it say something untrue, was it too slow. These grades help us find and fix mistakes. The grading models are run by our AI providers under the same no-training terms described below.
• Research and model tests. To choose and improve the models that serve you, we run research and quality tests that send samples of past requests, with names, contact details, and account numbers removed, to AI model providers, including through OpenRouter, a service that routes a request to many model makers. Google data is never part of these tests.
• People, rarely. A small number of authorized Arlo team members may look at a specific conversation when you ask for help, when something went wrong and they need to fix it, or to keep Arlo safe. They are bound by confidentiality. People at Arlo do not read your Google data except as described in "Google user data".

This is not AI training. It does not build a model from your conversations, and it happens whether or not the AI-training setting is on. If you are in the UK or EU, you can object to it at privacy@arlo.sh.

AI training: your choice

Separately from quality checks, Arlo can learn from how people use it, to train and improve AI models. This only happens while your AI-training setting is on. You can see the setting and change it at any time in Account Settings, under AI training (sign in first). Turning it off applies from that moment on, and Arlo works exactly the same, at the same price and with the same usage limits.

Who starts with it on. A new adult account created from a verified U.S. location starts with the setting on when it accepts our Terms. Accounts created in the EEA, the UK, Switzerland, any other country, or from an unknown location start with it off and stay off unless the account holder turns it on. If your browser sends Global Privacy Control (GPC), we treat that as a binding opt-out and keep the setting off. We never include anyone who has told Arlo they are under 18.

Only the future. Only activity after the setting is on can be used. Turning it on never reaches back to earlier conversations, and older accounts stay private unless their owner turns the setting on.

What can be used while the setting is on:

• De-identified records of how Arlo worked. For example: "a travel request, three web searches, one page read, finished in under a minute." These hold task categories, tool types, timing ranges, and success or error signals, with no words from your conversation and nothing that identifies you. We use them to train and improve Arlo’s own models, and we may license them to other AI developers (see below).
• Your one-to-one conversations with Arlo, for Arlo’s own models only. Where the law allows, and only for conversations after you agreed to this version of our policy or turned the setting on yourself, Arlo may use your messages to Arlo and Arlo’s replies to train and evaluate Arlo’s own AI models. Before anything is used, we remove names, phone numbers, email addresses, account numbers, exact locations, and other details that point to you or to other people. These conversations stay with Arlo and the service providers that help us train our models under contract. We do not sell or license them to anyone.

What is never used for AI training, whatever the setting says:

• Your Gmail, Google Calendar, Google Drive, Google contacts, or any other data from Google.
• Anything from other apps you connect, such as Outlook, Slack, or Microsoft Teams.
• Phone calls, meetings, recordings, transcripts, and voice audio.
• Group chats, WhatsApp chats, forwarded messages, and messages from other people.
• Photos, files, and attachments.
• Saved passwords, passport details, payment details, and other things Arlo keeps in your vault.
• Your memory, and what the public profile lookup found about you.
• Conversations about sensitive topics, such as health, sex life, religion, politics, legal trouble, or a crisis. Our filters are built to leave these out, and to strip account numbers and other financial details from anything that remains.
• Anything from someone who has told Arlo they are under 18.

Labels for training. Only for people whose AI-training setting is on, a classification service, TypeSafe, labels their conversations with things like the topic, whether Arlo got it right, and whether it touches a sensitive subject. We use these labels to keep sensitive conversations out of training and to choose what is useful to learn from. If the setting is off, your conversations are not sent for these labels.

Licensing de-identified data. Arlo may license approved de-identified datasets to outside AI developers for their own model training. Those developers are independent recipients, not Arlo service providers. Before any delivery, the buyer’s contract must ban any attempt to re-identify anyone, ban unrelated use, and require proper security and deletion. For accounts outside the U.S., Arlo must also name the specific buyer and get any extra consent the law requires before including a record. Arlo publicly commits to keep and use these records only in de-identified form and not to try to re-identify them, except to test that our de-identification works.

Changing your mind. When you turn the setting off, or your browser sends GPC, we stop using new activity and cancel every record that has not yet been delivered. One honest limit: once a model has been trained, the influence of a single example on that model cannot always be removed. A buyer must still delete undelivered and untrained copies when its contract or the law requires.

The AI providers that run Arlo

Arlo uses large AI models made by other companies, such as OpenAI and Anthropic, to understand your requests and act on them. We send them only what a request needs, through their business APIs, under terms that bar them from training their models on it. Some providers may keep inputs briefly to detect safety and abuse problems and then delete them. That no-training promise is the provider’s contractual commitment to us, rather than something we can guarantee on their behalf, and we choose providers on that basis.

How Arlo’s AI works

Arlo is an AI assistant. When you chat, text, or talk with Arlo, you are interacting with artificial intelligence, not a human. On phone and voice calls, Arlo tells people it is an AI at the start of the call.

To understand your requests and act on them, Arlo sends the relevant content, such as your messages, the things you ask Arlo to do, data from tools you connect, and the audio and transcripts of calls or meetings Arlo joins, to the AI providers that run the underlying models (see "Who we share information with"). Arlo also builds a long-term memory to personalize its help. You can see and correct it on the Memory page, ask Arlo to forget something, or email us to get a copy of it or to erase all of it. Deleting your account erases your memory.

Arlo does not make solely-automated decisions that produce legal or similarly significant effects about you. Arlo’s responses are AI-generated and can be inaccurate, incomplete, or out of date, so please double-check anything important. If an automated action affects you and you would like a human to look at it, or you want an explanation of a specific result, contact us at privacy@arlo.sh.

Public profile lookup at signup

When you sign up, Arlo looks you up once with our people-lookup provider, Orbit, so it can start with suggestions that fit your work and life instead of asking you a long list of questions.

What we send. Your mobile number, and an email address when we have one: the one you signed up with, the address of a Gmail or Outlook inbox you connected (only the address, never what is in the inbox), or a work email you wrote to Arlo. If you send Arlo a link to a professional profile, such as LinkedIn, we send that too. We do not send your name. We use your name on our side to check that the profile that comes back is yours.

When we keep nothing. A number or email can belong to more than one person. If more than one person could be you, or the profile’s name does not match the name you gave us, we treat it as no match and keep nothing about any of them. If the lookup finds no profile that matches you, we keep none of the details below, only a record that the lookup ran, which kinds of details it used (for example, phone or email), its outcome, and what it cost.

What we keep. Orbit builds profiles from public web sources and people-data records. From the profile that matches you, we keep only: your name as a suggestion, your role and company, your city, public professional links, a short public bio, character and strengths, interests, accomplishments, life and work events, personal life, education, the first names of family members and how they are related to you, your birthday (month and day, never the year), and your home area (your town or neighborhood, never a street address). We do not keep net worth, a street address, contact details, photos, gender, or public controversies. We drop religious and political views, and any line that reveals health, sexual orientation, ethnicity, union membership, or genetic information, before anything is stored.

How Arlo uses it. Everything kept is a guess, marked with where it came from, when, and how sure we are. It is visible only to you, not to anyone else in a shared workspace. Arlo uses it to shape onboarding and its suggestions to you, never repeats it back to you as fact, and anything you tell Arlo yourself replaces it. It is never used for AI training.

When it runs. Once at signup, and at most once more during onboarding if the first lookup found no one, or matched on your number alone, and you then give Arlo something new: your full name, an email address, a connected inbox, or a work email or profile link you write. It runs only for people who sign up from October 7, 2026 on; accounts created before then are never looked up. We never look up anyone who has told Arlo they are under 18, and if someone tells us that after a lookup, we erase what it found.

How long it lasts. Arlo stops using the details from the lookup 30 days after it ran, or 180 days for what it keeps in memory. Until you erase them or close your account, they stay with your account data like the rest of your memory.

How you see it and erase it. The Memory page in the Arlo app lists what Arlo remembers from the lookup, each item marked as coming from a public profile at signup, and you can remove any item there, which stops Arlo using it at once. Your home area and profile links are not kept in that memory, so they are not on that page. To see or erase those, or everything the lookup found at once, tell Arlo to forget it or email privacy@arlo.sh. Once you erase something, a later lookup never sets it again. Deleting your account deletes everything the lookup found along with the rest of your account data.

Your choice. You can object to the lookup at any time by telling Arlo or emailing privacy@arlo.sh, and we will erase what it found. Orbit processes the lookup on our behalf as a sub-processor (see "Who we share information with").

Google user data

When you connect a Google account, Arlo uses the Google data that connection allows only to do what you ask it to, or what you set it up to do for you, such as a morning brief or a calendar check before a trip. That covers Gmail (reading, writing, sending, organizing, and deleting email), Google Calendar (seeing, creating, changing, and deleting events), Google Drive (finding, reading, creating, and changing files), and your Google contacts (finding the people you name). When you clearly ask Arlo to send or change something, it does it and tells you afterwards. It asks you first when the request is unclear, when it would spend money, when it would delete something that can’t be restored, when words it wrote would go out in your name to someone you know who hasn’t seen them, or when the instruction came from an email or a page rather than from you.

We do not use Google user data to develop, improve, or train generalized AI or machine-learning models, including Arlo’s own; we do not sell it; we do not transfer it to data brokers or information resellers; and we do not use it for advertising. We share it only with the sub-processors that run the features you use (the AI providers that process your request under terms that bar them from training on it, Composio, which holds the connection, and our hosting providers). The one exception is the signup lookup: the address of a connected Gmail account can be sent to Orbit, as described in "Public profile lookup at signup". Nothing else from Google is.

People at Arlo do not read your Google data unless you ask us to for a specific message or event, it is needed for security or to investigate abuse, or the law requires it.

Arlo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a Google account at any time on Arlo’s Integrations page or in your Google Account’s security settings. Arlo then stops accessing it, and you can ask us to delete what Arlo kept from it at privacy@arlo.sh.

Recording calls and meetings

Arlo can join phone calls and video meetings for you. When it does, it records and transcribes the audio so it can take notes, follow up, and remember what was discussed. Recording and transcription are handled by our providers, including Recall.ai (meeting recording and transcription), ElevenLabs (voice), Telnyx (calls), and fal (speech-to-text), and the transcript is sent to the AI models that generate Arlo’s responses. Recordings and transcripts are never used to train AI models, never sold, and never handed to anyone to train their models.

We announce it. Before Arlo records, it tells everyone on the call or in the meeting that it is there and that the conversation is being recorded and transcribed. On calls where Arlo speaks, it also tells people up front that they are talking to an AI voice. Anyone who does not want to be recorded can ask to stop the recording or leave.

Everyone has a say. Many places, including California, Florida, Illinois, Pennsylvania, Washington, several other U.S. states, the EU, and the UK, require everyone on a call or in a meeting to agree before it is recorded. If you invite Arlo into a call or meeting with other people, you are responsible for making sure those people are informed and that you have a lawful basis to record them. Our Terms set out this obligation in more detail.

Optional call quality review. If you explicitly share a particular lawfully recorded call for quality review after seeing the review notice, authorized Arlo reviewers and contracted service providers may inspect its recording, transcript, and execution trace to diagnose errors and evaluate and improve our models, prompts, and calling harness. The permission is specific to that call, lasts at most seven days, and can be withdrawn at any time. Review access and your permission are audited. Existing support grants stay limited to support; accepting Terms or allowing recording does not itself enable quality review. Refusing review does not affect your features, price, or usage limits.

Quality review is internal debugging and evaluation, not permission to train model weights on call content, sell or license calls, publish recordings or transcripts, or supply call content to another AI developer for its own training. We minimize the content used and redact personal information where practicable. Participant objections and deletion requests still apply. We do not extend a call’s retention because it was shared for review. A future training use would require separate prospective permission, appropriate participant rights and legal basis, and advance notice; this policy does not authorize training on earlier calls.

We do not create voiceprints. Arlo does not build or store a voiceprint or other voice fingerprint to identify people by their voice.

Turning recording off. You can tell Arlo not to record your calls, all of them or just the next one. If you do, or if anyone on the line says they don’t want to be recorded, Arlo stops recording, deletes what the phone carrier saved of that call, and keeps no transcript or memory of what was said.

Participants, including people who do not use Arlo, can ask us to delete a recording or transcript, including the copies held by our providers, by emailing privacy@arlo.sh.

Information about people who don’t use Arlo

Sometimes Arlo processes information about people who are not Arlo users: for example, other participants in a meeting Arlo records, people an Arlo user asks Arlo to text or call, the senders of emails Arlo handles, or the first name of a family member and how they are related to a user, when the public profile lookup at that user’s signup returns it. This section is the notice the law requires us to give those people (UK and EU GDPR Article 14).

If this is you: the categories of your data we process are typically your name, contact details, and the content of the call, meeting, or message involved. The source of that data is the Arlo user who invited Arlo or directed the action. That user is the controller of the data, and Arlo acts on their behalf to provide the requested feature. We use it to provide the requested feature and, only where separately authorized and supported by the required participant rights and legal basis, the optional call quality review described above. We never use it for AI training. We rely on the same lawful bases described above (mainly the user’s contract with us and our and the user’s legitimate interests in running the requested feature), share it only with the providers listed below, may transfer it to the United States under the safeguards described below, and keep it no longer than needed.

You have the same rights set out in "Your rights" below, including to ask what we hold, object, or have it deleted. Contact privacy@arlo.sh and we will help, and point you to the relevant Arlo user where they are the controller.

Who we share information with

We do not sell your personal information, and we have not sold it in the last 12 months.

Advertising measurement. On public marketing, signup, onboarding, and trial confirmation pages, we use advertising and analytics tags from Meta (Meta Pixel), X (X Pixel), and Google (Google Analytics and Google Ads) to see whether ads are working. California and some other states call this "sharing" for cross-context behavioral advertising. In the last 12 months, we have shared these categories with those companies for that purpose: identifiers (such as cookie and device IDs and IP address) and internet or network activity (such as the pages you visited and whether you signed up). We do not send your email address, phone number, messages, calls, recordings, transcripts, connected-account data, memory, or sensitive information to advertising platforms, and we do not load these tags inside signed-in pages. We do not knowingly sell or share the personal information of anyone under 16.

Your choices. You can turn off advertising measurement and AI training at Privacy Choices ("Do Not Sell or Share My Personal Information"). We honor Global Privacy Control (GPC) for both, and Do Not Track turns off advertising tags. Licensing de-identified data, described in "AI training: your choice", is not a sale of personal information, because the data cannot reasonably be linked to you; you can still stop it by turning AI training off.

Service providers. To run Arlo, we use trusted companies ("sub-processors") that handle data on our behalf, only to provide and improve the Service, under contracts that bind them to service-provider or data-processor terms. Because of those contracts, sharing data with them is not a "sale" or "share" under California law. They fall into these categories:

• AI models: OpenAI and Anthropic, through their own APIs (OpenAI also makes and edits images, turns text into voice notes, and creates the embeddings behind memory); and TypeSafe, for short classification checks, such as whether a request is clear, and, for people who take part in AI training, for labeling conversations before training. For model testing only: OpenRouter (see "How we make Arlo better").
• Web search, maps, and browsing: Exa, Serper, Google (search, places, routes, and weather), Anchor Browser, Kernel, Parse.bot.
• Messaging and voice: Linq (iMessage and texts), Photon (iMessage and WhatsApp), Meta (WhatsApp Business), Balsio, Telnyx (phone calls), ElevenLabs (voice), Apple (app notifications), Resend (email).
• Video and speech: fal (video, speech-to-text, and text-to-speech).
• Meeting recording and transcription: Recall.ai.
• Integrations and sign-in: Composio (connected apps), WorkOS (sign-in), Cloudflare Turnstile (bot protection at signup), Slack, Microsoft, Plaid (read-only bank connections you choose to make).
• Travel, bookings, and errands you ask for: Jinko and LiteAPI (flights and hotels), AgentRouter, Calendly, Uber, FlightAware, EasyPost, seats.aero, ScrapeCreators.
• Public profile lookup at signup: Orbit.
• Hosting, compute, and storage: Railway, Vercel, Neon, Cloudflare R2, Daytona.
• Operations: Sentry (error reports), PostHog (product analytics), Momentum (our customer records).
• Payments: Stripe, including Stripe Link.

Our customer records. When you sign up, we keep your name, email, phone number, and any company and title you give us in our customer-records tool, Momentum. For accounts that look like a business, we may also read your company’s public website and search for your public LinkedIn profile, so we understand who uses Arlo and can follow up about Arlo for work. This never sends you automatic email. If someone at Arlo writes to you about Arlo for work, you can ask us to stop at any time, and you can object to this step at privacy@arlo.sh.

Your own keys. If you add your own key for another service, such as a search or CRM tool, Arlo sends that service what your request needs, under that service’s terms with you.

When you ask Arlo to book, buy, or contact something, it shares what that task needs with the business or service you chose, such as an airline, a restaurant, or a person you asked it to text. For a flight or hotel, that can include the traveler’s name, date of birth, and contact details. We may also disclose information if the law requires it, to protect people’s safety, or as part of a merger or sale of our business, in which case this policy keeps applying to your data.

We keep a current list of our sub-processors, with what each one does and where it processes data. If you would like it, email privacy@arlo.sh and we will send it to you.

International data transfers

Arlo’s AI and infrastructure run mainly in the United States, so when you use it your personal data may be transferred there and to other countries. Where we transfer personal data out of the UK or the EEA, we protect it using:

the EU-US Data Privacy Framework (and its UK extension) where the receiving provider is certified; and

the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum or IDTA, for providers that are not certified under the Framework, backed by a transfer risk assessment.

To request a copy of the safeguards we rely on, email privacy@arlo.sh.

How we keep it safe

We protect your information with encryption in transit and at rest, strict separation between accounts, and access limited to the people who need it. Saved passwords, passports, and access tokens are encrypted separately and never sent to the AI models. No system is perfectly secure, so if a breach ever affects your personal information, we will tell you and the authorities as the law requires.

How long we keep information

We keep personal information only as long as we need it for the purposes described in this policy, then delete or de-identify it. Concretely:

• Account details: kept while your account is open. When you delete your account, we hold it for 30 days in case you change your mind, then delete it. If someone tells us they are under 13, we delete their account without the 30-day wait.
• Proof of deletion and do-not-contact: we keep a record of each deletion request, including the phone number and email it came from, so we can show we honored it. If you asked us never to call or text you, we keep your number and the date on a do-not-contact list so we never do.
• Deleted-account fingerprints: when an account is deleted, we keep a keyed, one-way fingerprint of the phone numbers, email addresses, and messaging-app account IDs it signed up with. It is not the number, address, or ID itself; it only lets us recognize the same person signing up again, so new-account free credits go to new people. We use it for nothing else and keep it for as long as we offer new-account credits.
• Messages, memory, and transcripts: kept so Arlo can be useful to you, until you have them erased or close your account; then removed from live systems within 30 days and from backups within 90 days.
• Call and meeting audio recordings: stored by our calling and meeting providers (Telnyx for calls, Recall.ai for meetings). A call recording is deleted right away when recording was turned off or someone on the call refused it. Meeting recordings are removed by Recall.ai on its own storage schedule. Otherwise we delete a recording, including the provider’s copy, whenever you or a participant asks at privacy@arlo.sh. Deleting your account deletes the transcripts, notes, and files Arlo keeps, but not the providers’ copies of the audio, so ask us if you want those gone too.
• Public profile lookup results: Arlo stops using them 30 days after the lookup, or 180 days for what it keeps in memory. Until you erase them or close your account, they stay with your account data like the rest of your memory.
• Quality grades and test results: kept with your account data and deleted with it.
• Billing and tax records: kept for up to 7 years where tax and accounting law requires.
• Security and abuse-prevention logs: kept only as long as needed to keep the Service safe, then deleted.
• Undelivered AI-training records: kept for no more than 30 days, then purged; turning AI training off or sending GPC cancels them sooner. Records with nothing that identifies you may be kept after you close your account.
• Conversations prepared for training Arlo’s own models: deleted if you turn AI training off before they are used, and deleted with your account.
• Approved de-identified datasets: kept only under the buyer agreement and deletion schedule recorded for that dataset.

Your rights

Depending on where you live, you have rights over your personal information, and we honor the rights below for everyone, wherever you are.

If you are in the UK or EU (GDPR), you have the right to: access your data; have it corrected; have it erased; restrict or object to processing, including processing based on our legitimate interests such as quality checks and the profile lookup; receive a portable copy; and withdraw consent at any time, including for AI training (withdrawing consent does not affect processing we already did). You also have the right to complain to a supervisory authority (see "Complaints").

If you are in California or another U.S. state with a privacy law (such as Colorado, Connecticut, Oregon, Texas, or Virginia), you have the right to: know and access the categories and specific pieces of personal information we have collected (with a 12-month lookback in California), where it came from, why, and who we shared it with; delete it, including your Arlo memory; correct inaccurate information; opt out of any sale, of sharing for cross-context behavioral advertising, of targeted advertising, and of AI training, through Account Settings, Privacy Choices, or GPC; limit the use of sensitive information (we already limit it to running and improving the Service); appeal if we turn down your request, by replying to our decision or emailing privacy@arlo.sh with "Appeal" in the subject; and not be discriminated against for using your rights. You get the same Arlo, at the same price. You can also use an authorized agent to make a request for you.

To use any right, email privacy@arlo.sh. You can also delete your account yourself at arlo.sh/delete-account, and turn AI training off in Account Settings. To stop texts, reply STOP (or CANCEL, END, QUIT, or UNSUBSCRIBE) to any text.

How to make a request, and our timelines

Requests are free of charge. We may need to verify your identity before we act, and if an authorized agent makes a request for you we may ask you to confirm you gave them permission.

For UK and EU (GDPR) requests, we respond within one month, and can extend by up to two further months for complex requests (we will tell you if we need to).

For U.S. state requests, we acknowledge within 10 business days and respond within 45 calendar days, extendable once to a total of 90 days with notice. We act on opt-out and "limit sensitive information" requests within 15 business days, and we honor texting opt-outs (STOP) within 10 business days at the latest, usually immediately. We answer appeals within the time your state’s law sets, and if we deny an appeal, we will tell you how to contact your state attorney general.

Complaints

If you have a concern about how we handle your data, please contact us first at privacy@arlo.sh. We will acknowledge your complaint, look into it, and respond.

You also have the right to complain to a data protection authority. In the UK, that is the Information Commissioner’s Office (ico.org.uk). In the EU, it is your local supervisory authority. We would appreciate the chance to address your concern directly first, but you do not have to contact us before going to a regulator.

UK and EU representatives

Where Article 27 of the UK or EU GDPR requires Arlo to appoint a local representative, that representative’s contact details will be published in this section. You can contact Arlo directly about any data-protection matter at privacy@arlo.sh.

For business customers

If you use Arlo for a team or organization, a Data Processing Agreement is available that includes the data-processing terms required by Article 28 of the GDPR, our sub-processor list, and our transfer safeguards. Contact privacy@arlo.sh to request one. Conversations in team and organization workspaces are never used for AI training. Our Terms of Service explain the rest of the business relationship.

Children and teens

Under 13: not allowed. Arlo is not for children under 13, and we do not knowingly collect their personal information. If someone tells Arlo they are under 13, Arlo stops the conversation, and we delete their account and data within minutes. If we learn some other way that a child under 13 has used Arlo, we delete their data too.

13 to 17: allowed, with protections. Signing up on our website is for adults: it asks for your date of birth or for you to confirm you are 18 or older. Texting Arlo does not ask your age, and Arlo never guesses it from how you write. When someone tells Arlo they are 13 to 17, or says something that shows they are under 18, Arlo remembers it and from then on:

• will not buy or pay for anything for them, save a card, or connect a payment wallet (a call paid from their Arlo balance still works);
• will not look them up, and erases what the signup lookup found;
• will not get them past a website’s age check;
• keeps every conversation age-appropriate: no romantic or sexual talk, and no help getting alcohol, drugs, vapes, gambling, or weapons;
• takes it seriously if they mention hurting themselves, and points them to a trusted adult and to 988, the Suicide & Crisis Lifeline (U.S.), or local emergency services;
• never uses their conversations for AI training.

We do not sell or share the personal information of anyone we know is under 18, for advertising or anything else. Our advertising tags run only on public pages, never inside signed-in pages.

For parents. If you are a parent or guardian and want to know what Arlo holds about your child, want it deleted, or want your child’s account closed, email privacy@arlo.sh with "Parent request" in the subject. We will ask you to confirm you are the parent or guardian, and we will act within the timelines below.

How to reach us

Questions or requests about privacy? Email privacy@arlo.sh. Arlo is operated by Arlo AI, LLC. See also our Terms of Service, including the messaging and recording terms.

See also our Terms of Service, privacy choices, and your AI training setting.