Privacy Policy

ARCHIET LTD is a private limited company registered in England and Wales (incorporated 18 June 2026). It is the controller of the personal data described in this policy for the archiet.ai website and the Archiet platform — the Architecture Intelligence Platform and its modules Iyene, Etione, and Ifiok.

• Company: ARCHIET LTD
• Company number: 17283576
• Registered office: 7 Springfield Court, Stonehouse, GL10 2JF, England

For any privacy question or to exercise your data-protection rights, contact hello@archiet.com. Given our size we are not required to appoint a Data Protection Officer under UK GDPR, but a data-protection contact is reachable at that address for any question about how we handle personal data.

We collect personal data in a small number of specific places, and nothing beyond them:

• Newsletter sign-up. Your email address and first name (required); last name and location (optional); the interest topics you select; your marketing-consent choice; and a reCAPTCHA verification token supplied by Google to protect the form from abuse.
• Contact form. Your name, email address, and message (required); company name, industry, job role, company size, and operating locations (optional); and any files you choose to attach.
• Product accounts. When you create an account on the Archiet product applications, we receive your name, email address, and profile picture from Google if you sign in with Google, or the credentials you register with our Keycloak identity service, together with the workspace and organisation details you create.
• Billing. When you buy a subscription, payment is taken by our payment providers — Flutterwave, with Stripe provisioned as a second provider. We receive transaction records (who paid, which plan and seats, amount, and status). Your full payment-card details are handled by the payment provider, not stored on our systems.
• Usage data. If you accept analytics on the cookie banner, Microsoft Clarity collects information about how you use the marketing site (pages viewed, interactions, approximate device and browser details). See the Cookie Policy for details.

We do not ask for special-category data (such as health or biometric data), and the site does not serve third-party advertising.

We process personal data in accordance with UK GDPR and the Data Protection Act 2018, on the following bases:

• Answering your enquiry (contact form) — our legitimate interest in responding to you, or steps taken at your request prior to entering a contract.
• Sending the newsletter — your consent, given via the sign-up form. You can withdraw it at any time using the unsubscribe link in any email.
• Providing the platform (accounts, workspaces, modules) — performance of our contract with you.
• Billing and business records — performance of the contract and our legal obligations under UK tax and company law.
• Security and abuse prevention (including reCAPTCHA on public forms) — our legitimate interest in keeping the service safe.
• Analytics — your consent, given via the cookie banner.

We do not sell personal data. We share it only with the service providers (sub-processors) who process it on our behalf to run the service:

• Microsoft Azure — cloud hosting for the platform (UK/EU region).
• Google — sign-in with Google (OAuth) on the product applications, and reCAPTCHA on the newsletter form.
• Microsoft Azure Communication Services and Resend — sending transactional and notification email.
• Namecheap Private Email — hosting of our email mailbox (hello@archiet.com).
• Microsoft Clarity — product and website analytics on the marketing site, activated only after you consent.
• Flutterwave — payment processing (active).
• Stripe — payment processing.

We also operate a Keycloak identity service on our own hosting to manage account credentials. We keep this list current as our providers change.

We may also disclose personal data where the law requires it, or as part of a corporate transaction such as a merger or acquisition, in which case this policy would continue to apply to the data transferred.

ARCHIET LTD is based in the United Kingdom, and we host the platform in a UK/EU region. Some of the providers above (for example Google, Microsoft, Flutterwave, and Stripe) may process personal data outside the UK. Where a transfer outside the UK takes place, we rely on recognised safeguards — the UK’s adequacy regulations, the UK International Data Transfer Agreement, or the International Data Transfer Addendum to the EU Standard Contractual Clauses — as applicable to the provider, so that your data continues to receive an equivalent level of protection.

• Newsletter data — until you unsubscribe, after which it is removed within a reasonable period, keeping only what is needed to honour the opt-out.
• Contact-form enquiries — retained for around 24 months so we can follow up on your enquiry, then deleted.
• Account and workspace data — kept for the life of your account and, after account closure, deleted or anonymised (subject to any statutory retention period).
• Billing and transaction records — retained for 6 years to meet UK tax and accounting law.

Under UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing;
• receive your data in a portable, machine-readable format; and
• withdraw consent at any time where processing is based on consent (this does not affect processing before withdrawal).

To exercise any of these rights, email hello@archiet.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would welcome the chance to address your concern first.

We protect personal data with technical and organisational measures appropriate to the risk, including encryption of data in transit and access controls limiting who inside Archiet can see it. No method of transmission or storage on the internet is completely secure, so we cannot promise absolute security; if a breach affecting your data occurs, we will notify you and the ICO as UK GDPR requires.