Privacy Policy
Last updated 1 August 2026 · Holmes AI, Inc.
We collect the least we can get away with and still answer your question: your email, your ZIP code, your household size, and whether you rent or own. That is what picks your benchmark.
Documents you upload are used to answer one question and then discarded, unless you explicitly tell us to keep them. Memory of your preferences is off by default. We do not sell your data, ever, to anyone.
1. Who we are
Artho is operated by Holmes AI, Inc. ("Artho", "we", "us"). If you have a question about this policy or want your data removed, email privacy@artho.ai.
2. What we collect
Information you give us
- Account details — your email address and a password. Passwords are hashed by our authentication provider; we never see or store the plain text.
- Your profile — name, ZIP code, household size, and whether you rent or own. These are not decoration: they are the fields that select which peer group you are compared against. Without them we can only give you a range.
- Your questions — what you ask Artho, and the answers we give, so you can return to a conversation.
- Documents you upload — receipts, bank statements, bills. See section 4, which is the part most people care about.
Information we generate
- A picture of your household, if and only if you turn memory on. Preferences, spending patterns, family structure. This is off unless you switch it on, and switching it off erases it.
- Basic technical logs — IP address, browser type, timestamps. Standard security and abuse prevention.
Information from your bank, if you connect one
Bank connections are handled by Plaid. Access is read-only. Artho can see transactions; Artho cannot move money. We never receive or store your banking credentials — those go to Plaid, not to us.
3. Why we collect it
- To answer your question against the right peer group rather than a national average.
- To keep your conversation history so it is there when you come back.
- To secure the service and investigate abuse.
- To contact you about the service itself. We will ask separately before sending marketing.
We do not sell personal information, and we do not share it with advertisers or data brokers.
4. Documents you upload
This is the part worth reading twice.
When you attach a document, we extract the text so Artho can answer your question about it. By default that text is used for the answer and then discarded. Nothing is written to your account.
It is kept only if one of these is true:
- You say so in the conversation, in response to Artho asking whether to keep it; or
- You have turned on document retention in your account settings.
Saved documents live in private storage that only your account can reach. You can delete them at any time, and deletion is real deletion, not a hidden flag.
5. Who processes your data
We use a small number of subprocessors. Each one sees only what it needs to do its job.
| Provider | What it does | What it sees | Where |
|---|---|---|---|
| Supabase | Database, login, file storage | Account, profile, conversations, saved documents | United States |
| Vercel | Hosting | Technical request logs | United States |
| DeepSeek | Writes the answers | Your question and the context assembled for it | China |
| Reads scanned images and photos of documents | Images you upload | United States | |
| Zep | Optional memory of your preferences | Only what you tell Artho, and only if memory is on | United States |
| Bright Data | Web lookups for current prices | A search query. Not your identity | United States / Israel |
| Plaid | Bank connection, if you use one | Your bank credentials and transactions | United States |
Please note where the answers are written. Artho's answers are generated by DeepSeek, whose infrastructure is in China. The text of your question — and any document text needed to answer it — is sent there for processing. If that is not acceptable to you, do not upload sensitive documents, and consider whether this service is right for you. We would rather tell you plainly than hide it in a list.
6. How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Conversations | Until you delete them, or your account |
| Uploaded documents, not saved | The length of one answer. Not written to disk |
| Uploaded documents, saved | Until you delete them |
| Memory / persona | Until you switch memory off or erase it |
| Technical logs | Up to 90 days |
| Waitlist email | Until launch, or until you ask us to remove it |
7. Your rights
Wherever you live, you can ask us to show you what we hold, correct it, or delete it. Much of this you can do yourself from your account page — view what Artho has learned, erase it, or delete saved documents.
If you are in California, the CCPA gives you the rights to know, delete, correct, and opt out of sale. We do not sell data, so there is nothing to opt out of. If you are in the EEA or UK, the GDPR gives you rights of access, rectification, erasure, restriction, portability and objection; our lawful bases are performance of a contract and, for optional memory, your consent.
We will not treat you differently for exercising any of these. To make a request, email privacy@artho.ai.
8. Children
Artho is not for anyone under 18, and we do not knowingly collect their information. If you believe a child has given us data, email us and we will remove it.
9. Changes
If we change this policy materially, we will update the date above and tell registered users by email. Continuing to use Artho after a change means you accept the revised policy.