1. Who we are

Arion is an online booking product from Noethera Studio ("we"). This policy applies to arion.id, public business booking pages, the owner dashboard, and related services.

2. Data we collect

We may process the following categories:

• Business account data: name, login email, role, business settings
• Booking data: guest name, contact, dates/slots, package, status, notes
• Chat data: messages between guests and the AI assistant on the booking page
• Technical data: server logs, session cookies, device/browser for security
• Payment data: confirmation status (payments follow your business policies; card data is not stored in Arion unless a future integration is disclosed separately)

3. Purposes

Data is used to run reservations, auto-confirmations, Telegram/email notifications, operational analytics, customer support, and product improvement. We do not sell your guests' personal data to third parties.

4. Storage & security

Data is stored on cloud infrastructure (including Supabase) with role-based access and Row Level Security. We apply reasonable security practices; no system is 100% risk-free.

5. Sub-processors

• Supabase (database & authentication)
• Application hosting & monitoring providers
• Telegram (notifications if you enable them)
• AI providers for the chat assistant (message content is processed to generate replies)

6. Retention

Booking and account data is kept while your business actively uses Arion and as required by law. You may request deletion or export by contacting us.

7. Your rights

As a business owner, you can access, correct, or request deletion of account and booking data via the dashboard or support email. Guests should contact the operating business for reservation-related requests.

8. Contact

Privacy questions: admin@noethera.com or WhatsApp on the Contact page. We respond within a reasonable time.