Privacy Policy
Last updated: May 2026 · Arise Technology Co., Ltd
1. Introduction
Arise Technology Co., Ltd ("we", "us") operates the AriseRFP service. This Privacy Policy explains how we collect, use, store, and protect information when you use our Service, including the Google Workspace Add-on, the web administration portal, and payment processing.
2. Information We Collect
2.1 Account Information
- Google account email address — used for authentication and access control.
- User role and subscription status — managed by your organization's administrator or your subscription plan.
2.2 Documents You Upload
- Vendor documentation (PDF, DOCX, XLSX) uploaded for RFP analysis.
- Past RFP responses uploaded for style context.
- These documents are stored in Google Cloud Storage in your organization's dedicated bucket.
2.3 Usage Data
- Analysis session logs: timestamp, number of rows analyzed, token consumption, cost estimates.
- Skill profile preferences (your customized AI response style).
- These are used for billing, audit, and service improvement.
2.4 Payment Information
- Payment processing is handled entirely by Paddle (paddle.com), our merchant of record.
- We receive from Paddle: subscription status, plan type, and a customer identifier. We do not receive or store your payment card number, CVV, or full billing address.
- Paddle's privacy policy governs the collection of payment data: paddle.com/legal/privacy.
2.5 Data We Do NOT Collect
- We do not access your Google Drive, Gmail, Calendar, or any other Google services beyond Sheets.
- We do not collect personal data beyond your email address and subscription status.
- We do not use cookies for advertising or tracking purposes.
3. How We Use Your Information
- Authentication — to verify your identity and manage access permissions.
- Service Delivery — to process your uploaded documents and generate RFP analysis.
- Subscription & Billing — to verify subscription status with Paddle and track token usage.
- Audit & Compliance — to maintain audit logs of system access and AI analysis runs.
- Service Improvement — aggregated, anonymized usage statistics may be used to improve the Service.
4. Data Processing & AI
How AI Processing Works
When you run an analysis, your RFP requirements and uploaded vendor documents are sent to Google's Gemini AI API for processing. This data is transmitted securely via HTTPS and is subject to Google's Gemini API Terms of Service.
Google's Gemini API does not use your data to train its AI models when accessed through the paid API (as used by AriseRFP).
5. Payment Processor (Paddle)
Paddle as Merchant of Record
AriseRFP uses Paddle as our payment processor and merchant of record. When you subscribe to a paid plan:
- Your payment card information is collected and stored by Paddle, not by Arise Technology.
- Paddle is responsible for PCI-DSS compliance and fraud prevention.
- Paddle may collect and process your name, email, billing address, and payment details per their Privacy Policy.
- We receive webhook notifications from Paddle about subscription events (created, updated, cancelled).
Paddle's Privacy Policy: paddle.com/legal/privacy
6. Data Storage & Security
- Location: All data is stored on Google Cloud Platform in the Asia Southeast 1 (Singapore) region.
- Encryption: Data is encrypted at rest (AES-256) and in transit (TLS 1.3).
- Access Control: Documents are isolated per user. Role-based access control ensures users can only access their own data.
- Retention: Documents and analysis results are retained for the duration of your subscription. Upon subscription cancellation or account deletion, data is removed within 30 days upon request.
7. Data Sharing
We do not sell, rent, or share your data with third parties, except:
- Google Cloud Platform — infrastructure provider (data processing agreement in place).
- Google Gemini AI — for AI analysis processing only (no training on your data).
- Paddle — for subscription and payment management only.
- Legal requirements — if required by law, court order, or governmental regulation.
8. Your Rights
You have the right to:
- Access — request a copy of your stored data.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your data and account.
- Export — download your uploaded documents and analysis results.
- Opt-out — opt out of any non-essential communications.
To exercise these rights, email admin@arise-technology.com.
9. Google API Services Disclosure
AriseRFP's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, AriseRFP:
- Only accesses Google Sheets data in the active spreadsheet where the add-on is running.
- Does not transfer Google user data to third parties except as necessary to provide the Service (AI analysis via Gemini API).
- Does not use Google user data for advertising purposes.
- Does not allow humans to read user data unless with explicit consent, for security purposes, or to comply with applicable law.
10. Children's Privacy
AriseRFP is a business productivity tool not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be communicated by email with at least 14 days' notice.
12. Contact
For privacy-related inquiries:
