Privacy Policy - ARDNT Solutions

Purpose of This Policy

This policy explains how Ardnt collects, uses, discloses, and protects your personal information. Our goal is to give you the information you need to make an informed decision about sharing your data with us.

Information We Collect

We collect personal information through various channels:

Information You Provide Directly

Name, contact details (including phone numbers), and business information
Account credentials when you register for our services
Information about your preferences, goals, and requirements
Data needed to tailor AI-generated recommendations and build automated solutions for you
Voice recordings and transcripts from interactions with our voice agents
Feedback and survey responses

Information Collected Automatically

Device information (type, operating system, browser)
IP address and approximate location based on IP
Usage data (pages visited, features used, time spent)
Performance data and error reports

Why We Collect Your Data

We collect your personal information for the following purposes:

To create and deliver personalized AI recommendations.
To build and maintain AI-powered automations that meet your needs.
To enable our voice agents to contact you with personalized recommendations.
To improve our products and services, including our voice agent technology.

We will only use your personal information for these stated purposes unless we obtain your explicit consent for a new use.

How We Use AI and Automated Decision-Making

Our AI systems are central to our services. Here is how we use them:

Analyze patterns and preferences to personalize your experience
Generate tailored recommendations based on your goals and requirements
Automate processes and workflows based on your instructions
Power voice agents that can communicate with you via phone
Improve our AI models through machine learning, using anonymized data (this excludes any data received from Google APIs, which is never used to train or improve AI or machine-learning models; see the Google User Data section below). ARDNT Academy conversations and submissions are not used to train any model; see the ARDNT Academy section below.

Your Rights Regarding Automated Decisions:

Request human review of automated decisions that significantly affect you
Obtain an explanation of how the AI reached its recommendations or decisions
Challenge automated decisions if you disagree with them
Opt out of certain types of automated processing (where feasible)

Google User Data

Where our SEO monitoring product connects to Google Search Console on your authorisation, we handle data obtained through Google APIs as described in this section. This section governs data received from Google APIs and takes precedence over the general statements in this policy in the event of any conflict.

What we access: With your consent through Google OAuth, we access your Google Search Console data on a read-only basis using the webmasters.readonly scope. We request no write access and cannot modify your Search Console account, your website, or your Google account. We read search-performance metrics: impressions, clicks, average position, and the associated search queries and pages.
How we use it: Solely to produce the SEO monitoring reports, change journal, and recommendations we deliver to you. We do not use it for advertising, we do not sell it, and we do not use it to train generalised artificial-intelligence or machine-learning models.
How we store it: The product is installed on your own cloud infrastructure (your Cloudflare account). Your Search Console data and the access tokens that retrieve it are stored within infrastructure you own and control. Ardnt does not retain a central copy of your Search Console data.
Third parties: To generate written findings, we send the relevant Search Console data to Anthropic’s Claude API through your own AI Gateway. Anthropic processes it to return the analysis and does not use API-submitted data to train its models. No other third party receives your Google user data.
Retention and deletion: The product operates on rolling 28-day windows and retains only the data needed to produce your reports and trend history. When you offboard, your Google authorisation is revoked and your data is exported or deleted, at your choice, within 30 days.

Limited Use. Ardnt’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

ARDNT Academy

This section covers the ARDNT Academy at academy.ardnt.io, our self-directed course. Where it is more specific than the general statements in this policy, this section applies to the Academy.

What the Academy holds about you

Your membership: your name, email address and business name, which arrive from our CRM when you join, plus the licence number we issue you and whether your access is active or paused.
Your progress: which lessons you have opened and completed, when you signed in, and how many questions you have asked the lesson assistant.
Your conversations with the lesson assistant: the questions you type and the answers you receive, kept per lesson so the assistant can follow the thread.
Your checkpoint results: the outcome of each checkpoint, the reviewer’s reasoning for a pass, and any link you submit as evidence, such as the address of a public GitHub repository.
Sign-in links: we email you a one-time sign-in link. We store only a scrambled (hashed) form of it, and the link expires after 15 minutes.

The Academy holds no payment details. Payments are taken by our CRM provider and its payment processor. The work you build during the course lives in your own accounts (your brain, your CRM and your Cloudflare account), not in the Academy.

Cookies and tracking

academy.ardnt.io sets one cookie, which keeps you signed in. It runs no analytics, advertising or third-party tracking, and its pages load nothing from other websites.

Who processes Academy data

Cloudflare hosts the Academy and its database, and routes requests to the AI model.
Anthropic runs the AI model behind the lesson assistant and the checkpoint reviews. It receives the lesson you are on and the text you type or submit. It does not receive your name, email address or account details from us. Anthropic does not use API-submitted data to train its models.
Resend sends your sign-in emails. It receives your email address and the link.
HighLevel, our CRM provider, handles your purchase, billing and our emails to you.
GitHub: when a checkpoint asks for a link to a public repository, we look that repository up on GitHub to confirm it exists. GitHub receives only the repository address.

These providers process data in the United States. We do not sell Academy data, use it for advertising, or use your conversations or submissions to train any AI model.

How we use it

To give you access to the course and keep your place in it.
To answer your questions in the lesson assistant and to review your checkpoints.
To notice when a member has stalled. ARDNT receives a short daily summary naming members who have stopped making progress, so we can check in.

Checkpoint reviews

Some lessons end with a checkpoint that an AI model reviews against a published rubric, and a pass unlocks the next lesson. If you disagree with a result, email our Privacy Officer and a person at ARDNT will review it.

How long we keep it

Lesson assistant conversations: 90 days, then deleted automatically.
Activity records (lesson views, sign-ins and similar events): 12 months, then deleted automatically.
Sign-in links: removed within a day of being used or expiring.
Your membership details, progress and checkpoint results: for as long as you have an Academy account.

If your membership ends or a payment lapses, your access is paused, not deleted, so you can pick up where you left off if you return. To have your Academy record deleted, email our Privacy Officer. We will delete it and confirm when it is done. Your licence number is retired and never reissued.

Processing Outside of Canada

Some of your personal information may be processed by our service providers located outside of Canada solely to deliver the services you have requested.

We require these providers to protect your personal information to a standard comparable to Canadian privacy laws.
While your data is in another country, it may be subject to the laws of that country.

Data Storage and Security

We implement comprehensive security measures to protect your personal information:

Storage Location: Personal data at rest is stored on secure servers located in Canada, the European Union and the United States, depending on the service. ARDNT Academy data is stored in the United States; see the ARDNT Academy section.
Encryption: We use industry-standard encryption for data in transit and at rest.
Access Controls: Only authorized personnel have access to your information, and only when necessary to perform their job duties.
Security Testing: We regularly conduct security assessments and vulnerability scanning.
Monitoring: We maintain monitoring for suspicious activities and potential security incidents.
Employee Training: All employees receive regular privacy and security training.

While we implement these safeguards, no method of transmission over the Internet or electronic storage is 100% secure. We continuously improve our security practices as technology evolves.

Your Rights

Under Canadian privacy laws, including PIPEDA and the Consumer Privacy Protection Act (CPPA), you have the following rights:

Right to Access: Request a copy of your personal information we hold.
Right to Correction: Request correction of inaccurate or incomplete personal information.
Right to Deletion: Request deletion of your personal data when it is no longer required (subject to legal retention requirements).
Right to Withdraw Consent: Withdraw your consent at any time for any processing based on consent.
Right to Transparency: Request information on how your personal data has been used and disclosed.
Right to Object: Object to processing of your personal data in certain circumstances.

To exercise these rights, please contact our Privacy Officer using the contact information provided below.

Retention of Personal Information

We retain your personal information only as long as necessary to:

Fulfill the purposes outlined in this policy
Comply with legal obligations
Resolve disputes
Enforce our agreements

When personal information is no longer needed, we securely delete or anonymize it according to industry best practices.

Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately so we can take appropriate steps to remove such information.

Changes to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in our practices, technologies, legal requirements, and other factors. When we make material changes, we will:

Post the updated policy on our website
Update the “Last updated” date at the bottom of this policy
Notify you through a service notification or email (for significant changes)

How to Contact Us

For questions about this policy, to withdraw consent, or to exercise your rights, contact:

Privacy Officer
Alun Walker
Email: awalker@ardnt.io

Consent Acknowledgement

By using our services and providing your personal information, you confirm that you:

Have read and understood this policy
Consent to the collection, use, and disclosure of your personal information as described above
Understand that some processing may occur outside of Canada solely to serve your request
Are at least 18 years of age or have the consent of a parent or guardian