Straight answers
- Does ARound use my business data to train models?
- No. Your business documents, customer information and business records are used to provide ARound to your business. They are not used to train shared models.
- Can another business see my information?
- No. Business records are scoped to the organisation that owns them, and that boundary is enforced in the database rather than only in the application.
- Can Specialists act without asking me?
- Only within the authority you have explicitly given them. You can require them to prepare work and stop, to ask you immediately before anything is sent or published, or to complete repeatable work within limits you set. Contracts, moving money, price changes and anything destructive always come back to you.
- Can I stop Specialist work?
- Yes. You can pause a single Specialist, or stop all outside actions at once, from Safety & Control — and everything they have already done stays recorded.
Your business information, handled properly
You're about to put your customers, your numbers and your documents into someone else's software. Here's exactly how that's looked after — in plain English, without the security theatre.
Your information stays yours
You own what you put into ARound. We don't sell it and we don't hand it to anyone else to use.
- Your business data belongs to your business, not to us.
- We never sell customer lists or contact details. Not to advertisers, not to data brokers, not to anyone.
- If you stop paying, you keep the right to get your data out.
Only your business can see your business
Separation between businesses isn't a setting someone can forget to tick — the database enforces it on every single read and write.
- Every record is tied to the business that owns it, and that ownership is checked in the database itself, not just in the app.
- One business cannot see another's customers, documents, numbers or messages. There is no code path that returns them.
- Your team sees what their role allows, and you decide the roles.
- Our own staff tools sit behind a separate gate, and using them leaves a record.
- Nobody at ARound reads your business data as a matter of routine.
Encrypted in transit and at rest
Standard, unglamorous, essential.
- Everything travels over an encrypted connection (HTTPS/TLS).
- Your data is encrypted where it's stored.
- Connections to your other accounts are stored encrypted and used only for the thing you connected them for.
- Uploaded documents live in private storage — never a public link, and download links expire.
Control over who gets in
Most breaches are somebody's password, not somebody's clever exploit.
- Two-factor authentication is available on every account.
- You choose what each teammate can see and do, and can change or revoke it instantly.
- Removing someone removes their access immediately.
- Permission changes are recorded.
You decide what happens without you
This is the part most owners care about once they've thought about it for a minute.
- You decide how independently your Specialists can work. They can prepare work, ask before completing it, or complete repeatable work within limits you set. High-impact actions such as significant spending, moving money, contracts, price changes, destructive changes, and expanding permissions always come back to you.
- You set the limits. Anything outside them comes to you as an exception rather than happening quietly.
- You can pause everything immediately, at any time.
- Every completed action leaves a record showing what happened, why, and under whose permission.
Your information isn't used to train anything
Your documents, customers and numbers are used to help you. That's the whole list.
- We don't train models on your business data.
- Your information isn't pooled with other businesses' to build a shared product.
- Sensitive details are stripped before anything leaves your workspace.
- Documents you upload are readable by your business only.
Backups and recovery
A backup nobody has restored is a hope, not a backup — which is why a tested restore sits on the launch list below rather than being claimed here.
- Backups run continuously.
- Recovery steps are written down and followed, rather than improvised under pressure.
In place for launch
What we are putting in place for launch: the controls we have not finished yet, stated as commitments rather than claims, and the paperwork businesses need on file before they can buy.
- Self-serve export of your data, in a format you can actually use.
- Deletion on request, including from our backups on their normal cycle.
- A record of sign-in activity you can review yourself.
- A tested restore: the whole database rebuilt from a backup and checked against production, so recovery is proven rather than planned.
- A published privacy policy and terms, in plain English.
- A Data Processing Agreement for businesses that need one on file.
- A named list of the services we rely on to run ARound, and what each one touches.
- A written incident response process, including how and when we'd tell you if something went wrong.
- A security contact for reporting a problem, and a commitment to respond rather than ignore it.
- Documented data retention: how long we keep things, and when they're removed.
Questions about any of this?
Ask us anything about how your information is handled. We'll answer properly, not with a brochure.