Individual Entrepreneur Uladzislau Kremeneuski (identification number 300435303, Georgia) is the controller of the personal data of users of the Ariflame service (ariflame.com and the Telegram bot @ariflame_ai_bot). This Policy is prepared in accordance with the Law of Georgia on Personal Data Protection and describes what data we collect, why, with whom we share it and how we protect it.
1. Data controller
The controller of your personal data is Individual Entrepreneur Uladzislau Kremeneuski, registered in Georgia, identification (registration) number 300435303, registered with the National Agency of Public Registry (NAPR) of Georgia; address: Tbilisi, Zvezsubani settlement, XI micro/district, III quarter, building 54a apt 46, 0178 Georgia. Questions about data processing: support@ariflame.com.
2. Data we collect
You provide it
- your Telegram ID and username, if you use this sign-in method;
- your name, email address and Google account ID when you sign in with Google; your email address when you sign up with email;
- the content of your conversations with the agent: the tasks you give it and the files you send it;
- information you ask the agent to remember: goals, projects, preferences.
From services you connect
If you connect a service (for example Gmail, Google Calendar, Google Drive, Notion or Instagram), we receive the data that service makes available within the permissions you grant. See Sections 5 and 6.
Collected automatically
- IP address and time of request — to protect against brute-force attempts and abuse;
- technical information about your browser when you use your account on the website;
- a log of token charges: what was run, when and at what price.
We do NOT collect bank card details: they are processed by the payment provider and are not passed to the Operator.
3. Why we process data
- to perform the agreement: provide access to the agent and keep records of payments;
- to make the agent work: without the content of the conversation it cannot perform a task or remember context;
- to perform the tasks you request with the services you have connected;
- to protect the Service and its users from abuse;
- to answer support requests;
- to comply with legal requirements, including tax accounting.
4. Legal bases
We process data on the basis of the agreement with the User, the User's consent, the Operator's legal obligations, and the Operator's legitimate interests in protecting the Service from abuse.
5. Connected services
Signing in with Google gives us only your profile data and does not give access to Gmail, Google Calendar or Google Drive. Access to these services, Google Tasks, contacts, Notion, Instagram and other services is granted separately on the connection page, which lists the requested permissions. The data obtained is used only for the tasks you give the agent.
You can disconnect a service at any time in Connections (ariflame.com/connectors): access is revoked immediately. Google services share one connection, which is stated when you disconnect; your Google sign-in is kept in that case.
6. Instagram data
You can connect your Instagram professional account (Business or Creator) to Ariflame using Instagram Login. Connecting is optional and happens only at your request.
Once connected, we access the following data only as permitted by the permissions you grant on the Instagram consent screen:
- profile information: account ID, username, name, profile picture and account statistics such as follower and media counts;
- your media: posts, reels and carousels, with their captions;
- comments on your media;
- direct messages in your account's inbox;
- insights: reach, views, saves and other statistics of your account and media.
We use this data only to perform the tasks you request from your agent:
- publishing the posts, carousels and reels you ask the agent to publish;
- replying to comments and direct messages on your behalf;
- automatic replies to comments and direct messages that you set up yourself;
- analytics and reports about your account, for you.
We do not sell Instagram data, do not use it for advertising and do not share it with anyone except the processors needed to perform the task you requested (for example, the AI model provider that drafts a reply — see Section 7).
Instagram access tokens are stored separately from your conversations and are not shown to the agent. When you disconnect Instagram in Connections, we immediately revoke access and delete the access token. Instagram data that is part of your conversations and task results is deleted when you request deletion of your data (see Data Deletion Instructions).
Our access to and use of Instagram data complies with the Meta Platform Terms and Developer Policies.
7. Who we share data with
We share data only with those without whom the service cannot be provided, and only to the extent necessary. These are our processors:
- AI model providers — the text of a task and the attached files go to the provider that performs it. Contact details may be included in a task if you attached them yourself or asked the agent to work with your email and contacts;
- integration providers — services that connect the accounts you link (for example Google services, Notion or Instagram) and pass the agent's requests to them;
- Telegram — as a channel of communication with the agent;
- payment providers — the amount, the purpose of the payment and a contact for the receipt;
- Yandex Metrica (web analytics) — anonymized information about website visits: page address, device, referral source, the analytics cookie. The content of your conversations with the agent is not sent there, and session recording (Webvisor) is turned off;
- hosting providers where the Service's servers are located.
We do not sell personal data and do not share it for advertising.
8. International data transfers
Some of our providers, including AI model providers and hosting providers, are located outside Georgia and outside your country of residence. By sending a task to the agent, the User agrees to the transfer of the content of that task to the provider that performs it. The data transferred depends on the content of the task and the services the User has connected.
9. How long we keep data
- conversations and the agent's memory, including data received from connected services as part of them — while the User has a subscription and for 30 days after it ends, or until the User requests deletion;
- access to connected services — revoked as soon as the User disconnects the service; connection records are deleted together with the account;
- records of token charges and payments — 5 years, as required by law;
- sign-in attempt logs — 30 days.
10. How we protect data
Each user's environment is isolated from the environments of other users. Sign-in to the Service is via Google, Telegram or a verified email; authorization in the account on the website is maintained by a secure session cookie. Access to the servers is by keys only. Connections are protected with TLS. Access keys to providers are stored separately from conversations and are not given to the agent.
11. Your rights
The User has the right to know how their data is processed, to request its correction, blocking or deletion, and to withdraw consent. Send your request to support@ariflame.com from the email address linked to your account; it is considered within 30 days.
Withdrawing consent ends the provision of services: the Service cannot work without processing data.
You can also lodge a complaint with a data protection supervisory authority; in Georgia this is the Personal Data Protection Service.
12. Deleting your data
To disconnect Instagram or another service, or to delete your account and all your data, follow the Data Deletion Instructions. In short: disconnect a service in Connections, or email support@ariflame.com (or send “Delete my data” to @ariflame_ai_bot), and we delete your data within 30 days, except the records we must keep by law (Section 9).
13. Drafts stored on your device
To keep your task while you go through sign-in and payment, your browser stores the text, the selected skills and settings in the storage of the current tab, and attached files locally on your device, for up to 24 hours. Files are removed from the local draft after they are passed to the chat or when you sign out. Payment details are not stored there.
14. Changes to this Policy
A new version is published on this page with its date. Continuing to use the Service means agreement with the revised version. Current version: Version 1.0 of 26 October 2026.
15. Contact
Questions about this Policy and requests about your data: support@ariflame.com.
Individual Entrepreneur Uladzislau Kremeneuski
Tbilisi, Zvezsubani settlement, XI micro/district, III quarter, building 54a apt 46, 0178 Georgia