Privacy Policy
Last updated: April 9, 2026
This Privacy Notice for Araneo s.r.o ("we," "us," or "our") describes how and why we collect, store, use, and share your personal information when you use our services ("Services"), including when you:
- Visit our website at araneo.io
- Use Araneo's AI-powered lead qualification and CRM platform
- Interact with our Facebook Messenger screening conversations as a tenant applicant
Questions or concerns? Contact us at hello@araneo.io.
1. What Information Do We Collect?
From rental agents (platform users)
- Name, email address, and password
- Billing information (processed and stored by Stripe — we do not store card numbers)
- Facebook Page credentials and Page Access Token (required to send Messenger messages and publish listings on your behalf)
- Listing content you create: title, description, rent, property details, neighbourhood, and photos
From tenant applicants (via Facebook Messenger)
When a tenant messages a Facebook Business Page connected to Araneo, we may collect the information they voluntarily provide through our conversational screening flow, including:
- Full name, email address, phone number
- Number of occupants, desired move-in date
- Monthly rent budget
- Employment type and monthly income
- Self-reported credit score range
- Guarantor availability and documentation readiness
- Optional details: smoker status, pets, additional notes
- Facebook Page-Scoped User ID (PSID) — an anonymous identifier assigned by Meta
Information collected automatically
We automatically collect certain information when you visit our website, including IP address, browser and device characteristics, operating system, language preferences, and usage data. This information is used to maintain the security and operation of our Services.
2. How Do We Process Your Information?
We process personal information to:
- Facilitate account creation, authentication, and account management
- Deliver the lead qualification and screening Services
- Send automated Messenger responses to tenant applicants on behalf of connected agencies
- Publish listing posts to agency Facebook Business Pages via the Facebook Graph API
- Retrieve and display post performance analytics (impressions, reach, clicks) from Facebook
- Process subscription payments through Stripe
- Send administrative and billing communications
- Respond to support inquiries
- Comply with our legal obligations
3. Legal Bases for Processing
We process your personal information when we have a valid legal reason, including:
- Consent — for analytics cookies and marketing communications
- Contract performance — to provide the subscribed Services
- Legitimate interests — to improve the Services and prevent fraud
- Legal obligation — to comply with applicable laws
In some cases under Canadian law, we may process information without consent, such as for fraud detection, investigations, or compliance with legal process (subpoenas, court orders).
4. When and With Whom Do We Share Your Information?
We do not sell your personal information. We may share your information with:
- Meta (Facebook/Messenger) — to deliver Messenger messages, publish posts, and retrieve analytics via the Facebook Graph API
- Stripe — to process subscription payments. See Stripe's Privacy Policy
- Supabase — database hosting (PostgreSQL, ca-central-1 region, Canada)
- Anthropic and OpenAI — to power AI lead scoring features. Lead data may be processed by these providers subject to their terms
- Legal authorities — where required by law, subpoena, or to protect the rights and safety of users or the public
- Business transfers — in connection with a merger, acquisition, or sale of company assets
5. Cookies and Tracking Technologies
We use cookies and similar technologies to collect information when you interact with our website. For a complete list of cookies we use and instructions on how to manage your preferences, see our Cookie Policy.
We use Google Analytics 4 (Measurement ID: G-7ZX4HNDYC6) to understand how visitors interact with our website. Google Analytics is only loaded after you explicitly accept cookies via our consent banner. If you decline, no analytics data is collected about your visit. You can also opt out via Google's opt-out tool.
6. Artificial Intelligence Features
As part of our Services, we offer AI-powered lead qualification features. These features are provided through third-party AI service providers, including Anthropic and OpenAI. Tenant applicant data (including screening responses) may be processed by these providers to generate lead scores and qualification assessments.
AI-generated outputs are for informational purposes only. We do not guarantee their accuracy. You are solely responsible for how you use AI outputs in your rental decisions, and for ensuring compliance with the Ontario Human Rights Code and applicable human rights legislation.
7. Facebook Page Posting
Araneo enables rental agencies to publish listing posts directly to their connected Facebook Business Pages. When a listing is published:
- Listing content is posted to the agency's Facebook Page via the Facebook Graph API
- Property addresses are never included in Facebook posts
- Araneo acts as an authorized posting tool on behalf of the Page administrator
- Post analytics (impressions, reach, clicks, engagement) are collected periodically and displayed to the agency in their dashboard
8. How Long Do We Keep Your Information?
We retain your personal information for as long as your account is active and for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.
Lead and tenant data is retained for the duration of the agency's subscription. Upon account termination or deletion request, we delete or anonymize your data within a reasonable period, except where we are required to retain it by law.
9. How Do We Keep Your Information Safe?
We implement appropriate technical and organizational measures to protect your personal information, including encrypted data storage, access controls, and HTTPS transmission. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee that unauthorized third parties will never defeat our security measures. Transmission of personal information to and from our Services is at your own risk.
Data is stored in Canada (Supabase ca-central-1 region) in compliance with PIPEDA data residency practices.
10. Do We Collect Information from Minors?
We do not knowingly collect data from or market to individuals under 18 years of age. By using the Services, you represent that you are at least 18 years old. If we learn that personal information from a minor has been collected, we will deactivate the account and delete the data promptly.
11. Your Privacy Rights (Canada — PIPEDA)
We operate in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. As a Canadian resident, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request correction of inaccurate or incomplete information
- Deletion — request deletion of your personal data (subject to legal retention obligations)
- Withdraw consent — withdraw consent for data processing at any time, subject to legal or contractual restrictions
- Object to automated decisions — if a decision producing significant effects on you is made solely by automated means, you may request human review
To exercise these rights, contact us at hello@araneo.io or use our Data Deletion page.
Tenant applicants may also opt out of automated messaging at any time by replying STOP to a Messenger message.
12. Controls for Do-Not-Track
Most web browsers include a Do-Not-Track ("DNT") feature. We do not currently respond to DNT signals as no uniform technology standard has been finalized. If a standard is adopted that we must follow, we will update this Privacy Notice accordingly.
13. Updates to This Notice
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top. We will notify you of material changes either by posting a prominent notice or by sending you a direct notification. We encourage you to review this Privacy Notice periodically.
14. Contact Us
For privacy questions, requests, or concerns:
Araneo s.r.o
4 Chalupkova, Bratislava-Staré Mesto, Bratislavský kraj 811 09, Slovakia
hello@araneo.io