Legal
Privacy Policy
Effective date: 1 March 2025 · Last updated: 1 March 2025
1. Who we are
Arion Flow Ltd is a company registered in England and Wales. We operate the Mnemo platform at arionflow.com and associated subdomains. We are the data controller for personal data collected through our website and platform.
If you have questions about this policy or how we handle your data, contact us at: privacy@arionflow.com
2. What data we collect
We collect the following categories of personal data:
Account data
When you create an account: your name, email address, job title, and organisation name. If you sign up using Google or Microsoft OAuth, we receive the name and email associated with that account.
Usage data
Information about how you use the Mnemo platform: features accessed, queries submitted, documents uploaded, timestamps, session duration, and browser/device information.
Document content
If your organisation uses Mnemo and you upload documents, those documents are stored and indexed within your organisation's deployment environment. This may contain personal data if the documents include references to individuals.
Communications
If you contact us through our contact form or by email, we retain those communications.
Billing data
If you subscribe to a paid plan, billing and payment information is processed by our payment provider (Stripe). We do not store full card details.
3. How we use your data
- ›To provide and operate the Mnemo platform
- ›To authenticate your identity and manage your account
- ›To process payments and manage subscriptions
- ›To respond to support requests and enquiries
- ›To send service notifications (account alerts, billing notices)
- ›To monitor platform performance and fix technical issues
- ›To comply with legal obligations
We do not use your data for advertising, and we do not sell your data to third parties.
4. Legal basis for processing (GDPR Article 6)
Article 6(1)(b) — Contract performance
Processing necessary to provide the Mnemo service under our Terms of Service.
Article 6(1)(c) — Legal obligation
Processing required to comply with applicable law (e.g. tax records, regulatory requests).
Article 6(1)(f) — Legitimate interests
Platform security monitoring, fraud prevention, and service improvement.
Article 6(1)(a) — Consent
Where we send optional marketing communications (you can withdraw consent at any time).
5. Data retention
We retain personal data for as long as your account is active or as needed to provide the service. If you close your account:
- ›Account data is deleted within 30 days of account closure
- ›Usage logs are retained for up to 12 months for security and audit purposes
- ›Billing records are retained for 7 years as required by UK tax law
- ›Document content held in platform workspaces is deleted within 30 days of account closure
6. Third-party processors
We use the following third-party processors to operate the platform:
Supabase
Database and authentication infrastructure
Stripe
Payment processing
Vercel
Web hosting and deployment
All processors are bound by Data Processing Agreements and operate under GDPR-compliant terms.
7. Your rights
Under UK GDPR and EU GDPR, you have the following rights:
- ›Right of access — request a copy of the personal data we hold about you
- ›Right to rectification — request correction of inaccurate data
- ›Right to erasure — request deletion of your personal data
- ›Right to portability — receive your data in a machine-readable format
- ›Right to object — object to processing based on legitimate interests
- ›Right to restrict processing — request that we limit how we use your data
To exercise any of these rights, email privacy@arionflow.com. We will respond within 30 days.
8. How to complain to the ICO
If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113. EU residents may contact their local supervisory authority.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email to registered users. The effective date at the top of this page will be updated.
10. Contact
Arion Flow Ltd
Email: privacy@arionflow.com