Privacy Policy | Aribase

Who we are and scope

This Privacy Policy explains how Aribase LLC ("Aribase", "we", "us") collects, uses, shares, and protects information when you visit aribase.com, submit a form, or sign in to your account (together, the "site"). It covers personal information about you and the information sellers give us about their data assets. It does not cover other websites that the site links to. The rules for using the site are in our Terms of Use.

Information we collect

Forms. Every form on this site collects your name, an email address, an optional phone number, and a message. The assessment form asks for a work email, your company if you wish to give it, and the data categories you hold, with a quantity for each and an exact amount if you give one. Where it applies it also asks how many repositories or years of history you have, and it asks three quality questions for each category. It sends your answers, the indicative range shown for them when there is one, your confirmation that you hold the rights to license the data, and the description you write. The buyer form asks for a work email, your organization, and what your model needs. The contact form asks for your company and your reason for writing. The expert form asks for your area of expertise and your experience and availability, and it has no company field. Each form also sends, with your submission, the address of the page you were on and any campaign parameters from the link that brought you there.

Voice messages. When you request an assessment you may also record and send a voice message. Including a voice message is optional. A recording is uploaded to Aribase when you stop recording, before you send the form, and removing it in the form only clears the copy kept in your browser. What happens to a recording that is never sent with a form is explained under Retention below.

Your account. To sign in, you enter your email address and we send you a sign-in link or a one-time code. When you open an account you may add optional details such as your name, your company, and whether you hold data or are looking to license it. Your browser keeps a session so that you stay signed in, and it remembers display choices such as paused motion.

Asset information. If you are a seller, we collect the information you submit about your assets, for example what the data is, how it was created, its size and format, the category it belongs to, and the rights you hold in it. In their accounts, sellers can also upload sample files and buyers can attach requirement documents.

Catalog searches. When you search the catalog, including from the Requirements page, we record the search (what you typed or chose, how many listings it found, and when) along with your account if you are signed in, a random identifier that your browser keeps for this purpose, the email or campaign link that first brought your browser to the site, and your IP address, for our internal use. When you sign in, we link the searches your browser made before you signed in to your account.

Analytics. We use Google Analytics and PostHog for analytics, including product analytics, to understand how the site is used. They may collect technical information such as the pages you visit, your approximate region, your device and browser type, and the page that referred you, and they may use cookies and similar technologies to do so. When you sign in, we link your account email to your analytics activity in PostHog. PostHog also records an event when you submit the assessment, buyer, contact, or expert form, and for the assessment form that event includes the data categories you chose and, for the first category in the order shown on the page, its size tier (small, medium or large). The size tier is left out when that category's quantity is Not sure.

Advertising measurement and chat. We use the Meta Pixel for advertising measurement. The Meta Pixel is told of page views on the site. When you submit the assessment form or the contact form, the Meta Pixel sends Meta a submission event, which may name the first data category you chose on the assessment form, in the order shown on the page, but does not include what you write or your contact details. A live chat widget appears on the site only if live chat is enabled.

Error reports. The site sends technical error reports from your browser to Aribase's platform so that we can diagnose problems. Each error report includes the page address, details of the error (the message, the stack trace, and the failing script or address with its status), and the browser type. Because a page address can carry personal information, such as an email address in a sign-in link, an error report may contain it.

Network and device data. With each form submission, voice upload, and error report, our platform stores a hash of your IP address and your browser's user agent. We use the hashed IP address to rate-limit submissions and error reports, and to prevent spam on forms. We also use invisible checks on forms, such as a hidden field and the time taken to complete a form, to filter out automated spam.

How we use information

We use the information we collect to:

respond to your inquiry and to contact you about the matter you wrote to us about;
assess the data assets you submit and prepare initial assessments and estimates;
match assets with buyer demand and experts with projects;
open and operate your account and let you sign in;
operate, secure, and improve the site, and prevent spam and abuse; and
meet our legal obligations and protect our rights.

Submissions and voice messages may be checked, transcribed, or classified by automated systems, which can include AI service providers.

We do not sell your contact information.

How we share information

Service providers. We use service providers for hosting, email delivery, customer relationship management (CRM), analytics, and the automated processing described above, which can include AI service providers. These providers handle information on our behalf and are bound to process it for the purposes we set.

Meta. Meta, which receives page views and a submission event from the assessment form and the contact form through the Meta Pixel, processes that data under its own terms and not on our behalf.

Buyers. Buyers see assets only in anonymized form, without your company's name. We name a seller to a buyer only with the seller's consent, typically at contract time.

Legal requirements. We may disclose information when the law requires it, or when we believe disclosure is needed to protect the rights, property, or safety of Aribase, our users, or others.

Corporate transactions. If Aribase is involved in a merger, financing, or sale of its business or assets, information may transfer as part of that transaction, under protections equivalent to those in this policy.

Confidentiality of asset information

Descriptions of data assets submitted for assessment are treated as confidential business information. Assets are not listed publicly. Registered buyers can read anonymized catalog entries, which do not name your company, and your company is named only with your consent. Samples, data room access and prepared material are shared with a buyer only after the buyer accepts a non-disclosure agreement.

Retention

We keep inquiry records, account details, and asset information for as long as we need them to serve the relationship, to carry out an assessment and any licensing process, and to meet our legal obligations. We do not apply one fixed retention period to all information. A voice recording that is never attached to a submitted form is deleted after a limited period. You can ask us to delete your personal information, as described under your rights and choices below.

Security

We use reasonable technical and organizational measures to protect the information you give us against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, write to hello@aribase.com.

Your rights and choices

You may ask us to:

give you access to the personal information we hold about you;
correct information that is inaccurate or out of date; and
delete your personal information, unless we need to keep it to meet a legal obligation.

You may also opt out of marketing messages at any time. To make any of these requests, write to hello@aribase.com. We may need to confirm your identity first. Depending on where you live, local law may give you further rights, and we will handle your request in line with the law that applies.

International transfers

Aribase and its service providers may handle information in countries other than the one where you live, and those countries may have different data protection rules. By using the site or submitting information, you understand that your information may be transferred to and handled in those countries.

Children

The site is intended for business users and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has given us personal information, write to hello@aribase.com and we will take reasonable steps to remove it.

Changes to this policy

We may update this policy from time to time. We post the updated policy on this page and change the date at the top, which shows the latest revision. Your use of the site after an update takes effect is subject to the updated policy.