Who we are
This website at federis.in is operated by AI Arsenal Private Limited ("AI Arsenal", "we", "us"). We build the Federis sovereign control plane and Federis Studio, an agent and workflow builder.
This policy explains what personal data we collect through this website, why we collect it, how we protect it, and the choices you have. You can reach us about anything in it at [email protected].
What this policy covers
This policy covers the Federis website only: its pages, the contact form and the links that start an email to us. Using the website means you accept this policy.
It does not cover the Federis products. Federis and Federis Studio are deployed inside your own environment, under a separate agreement. In that setting your organisation controls the data the products process, and we do not receive it. Our commercial agreement with you sets out how we handle any data we do access while providing support.
Information we collect
We keep this to the minimum we need. It falls into three categories.
- Contact data. If you use the contact form, your email app opens with a message addressed to us. We receive the name, company, work email address and message you choose to send, once you send it. If you email us, we receive what you write and the contact details the service shows us, such as your email address.
- Technical data. Like any website, the servers that deliver these pages receive your IP address, browser type, the pages you request and the time of each request. This is processed to deliver the site and keep it secure.
- Local session data. The site stores two small items in your browser's session storage so that its animations behave sensibly while you move between pages. They hold no personal information and are cleared when you close the tab.
Sensitive data. We do not ask for sensitive personal data through this website, such as government ID numbers, bank or payment details, or health information. Please do not include any in your messages.
Where it comes from. We collect this data directly from you or from your device when you visit. We do not buy personal data or collect it from other sources. The website has no user accounts, does not run advertising or analytics trackers, and does not set marketing cookies.
How we use your information, and why
Each use has a purpose and a legal basis. Where data protection law requires a basis, this is the one we rely on.
| Purpose | Data | Basis |
|---|---|---|
| Reply to your message and follow up on your enquiry, such as arranging a demo | Contact data | Your consent when you choose to contact us, and our legitimate interest in answering enquiries |
| Deliver the website, keep it secure, prevent abuse and fix faults | Technical data | Our legitimate interest in running a secure website |
| Make page-to-page navigation work smoothly | Local session data | Strictly necessary for the site to work as designed. It holds no personal data |
| Meet legal obligations and respond to lawful requests | Any of the above | Compliance with a legal obligation |
You may withdraw consent at any time by writing to us. We use your contact details only to respond to you. We do not use them for unrelated marketing.
Who we share it with
We share personal data only where it is needed to run the website or handle your enquiry, and only with these kinds of recipients:
- Hosting and email providers that deliver this website and receive the messages you send us.
- Google Fonts. To display the site's typefaces, your browser requests font files from Google's servers, which means Google receives your IP address and browser details under its own privacy policy.
- Advisers and authorities where the law requires it, where we need to protect our rights, or in connection with a sale or restructuring of our business.
These providers act on our instructions or under their own terms. We do not allow them to use your data for their own advertising through us.
We do not sell your data
We do not sell, rent or trade personal data, and we do not share it for third-party advertising.
International transfers
The providers above may process data in countries other than your own. Where we transfer personal data across borders, we do so in line with the data protection law that applies to you and with appropriate safeguards, such as contractual protections or an adequacy decision where one exists.
How long we keep it
We keep an enquiry only for as long as needed to deal with it and to keep a reasonable record of our dealings with you, and then delete it or anonymise it. Technical logs are kept only as long as needed for security and troubleshooting. If you ask us to delete your data, we will do so unless the law requires us to keep it. If you ask us to stop contacting you, we may keep your address on a suppression list so that we honour your request.
Your rights
You can ask us at any time to give you a copy of the personal data we hold about you, correct it, or delete it, and you can withdraw consent you have given without affecting what we did before. Write to [email protected]. We may need to confirm who you are first, and we will reply within the time the law allows.
If you are in India
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- obtain a summary of the personal data we process and who we have shared it with;
- have inaccurate or incomplete data corrected, completed or updated, and have data erased when it is no longer needed;
- withdraw your consent at any time;
- use our grievance contact below for any complaint about how we handle your data, and, if you are not satisfied, complain to the Data Protection Board of India; and
- nominate another person to exercise these rights if you die or cannot do so yourself.
If you are in the EEA or the United Kingdom
Under the GDPR and the UK GDPR, you also have the right to:
- access your personal data and receive it in a portable format;
- have it rectified or erased;
- ask us to restrict how we use it;
- object to processing based on our legitimate interests; and
- complain to your local data protection authority.
We respond to these requests within one month, and we can extend that by up to two further months for complex requests. We will tell you if we do.
How we protect it
We use reasonable technical and organisational measures to protect personal data, including limiting access to the people who need it to respond to you. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will tell you and the authorities as the law requires.
Children
This website is intended for business users. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.
Links to other sites
The website links to other services, such as LinkedIn. We are not responsible for their content or privacy practices, so please read their policies.
Changes to this policy
We may update this policy as the website or the law changes. The date at the top shows when it was last revised. If we make a significant change, we will say so on this page.
Contact and grievances
For questions about this policy, to use your rights, or to raise a grievance about how we handle your personal data, write to [email protected]. We will acknowledge your message and respond within the time the law allows.