What ARIA does with your information
Before you type anything into the chat, or give your email for a written proposal, you are entitled to know exactly what you are handing over and what happens to it. This page is the whole picture, in the order you would ask about it.
The short version. The chat is kept in your own browser, not on our servers. If you ask for a written proposal, we receive your name, your business name if you give it, your email address and the conversation — we use them to write and email the proposal, nothing else. We ask for no card details, ever. Email hello@scalesmes.com with the subject “my data” and we delete what we hold within 7 days, and tell you in writing the one thing, if anything, we are required to keep.
Who we are
ARIA is a service of ScaleSMEs, run by Kyly CST Pte Ltd, a company registered in Singapore (UEN 201942481M). That company is the organisation responsible for your information. One address covers everything on this page — seeing what we hold, correcting it, deleting it, or complaining about it: hello@scalesmes.com. A person reads that inbox and we reply within 1 working day.
What ARIA receives from you
- The chat. What you type is sent to our server and passed to an AI model provider (DeepSeek, or OpenRouter as a fallback) so it can write ARIA’s reply. The conversation itself is kept in your own browser — the “Clear conversation” button in the chat wipes it — and we do not store it on our servers.
- The written proposal, if you ask for one. We then receive your name, your business name if you give it, your email address, and the conversation. ARIA writes the proposal from them, it is saved in our database so your private link keeps working, and it is emailed to you. We also send ourselves an internal copy, so a real enquiry is never missed, and we store a scrambled one-way version of your IP address to stop the form being abused — it cannot be turned back into you.
- What we never ask for: card numbers, passwords, API keys, identity numbers, or anything about your own customers. Nothing on this site takes a payment and the 30-day trial takes no payment details. If anyone asks you for a secret “on ARIA’s behalf”, that is not us — write to the address above.
Where it is held — and why that crosses a border
- This website
- served by Vercel, a global hosting network — outside Singapore.
- Proposals we write for you
- stored in our database (Supabase, managed PostgreSQL) — outside Singapore.
- The AI that answers and writes
- DeepSeek, or OpenRouter as a fallback — their servers, outside Singapore.
- sent through Resend, and received in a Google Gmail mailbox, where messages are stored on Google’s servers — outside Singapore.
- Domain and mail routing
- Cloudflare.
Under Singapore’s Personal Data Protection Act (PDPA) that means your information may be transferred out of Singapore. We use providers bound by their own data-protection terms, and by sending us your details or asking for a proposal you consent to that transfer. If you would prefer something to stay inside Singapore, ask — we will say plainly what we can move and what we cannot (mail storage, for example, we cannot).
How long we keep it
- A proposal and its conversation: 24 months from the day it is written, then deleted. The internal copy we email ourselves goes with it.
- The chat in your browser: kept until you clear it — one button in the chat, or your browser’s own settings.
- If you never asked for a proposal, we hold nothing about you at all beyond an ordinary web-server log entry, which is rotated automatically.
- If you become a client and we invoice you, Singapore tax law requires the billing records to be kept for 5 years after the last invoice — that is the law, not our preference, and we will tell you so in writing if it is the one thing we cannot delete.
Cookies, counters and tracking
This site sets no cookies of ours, and we have put no analytics, advertising or social-media script on it — that is why you have not seen a cookie banner here: there is nothing to consent to. Your conversation lives in your own browser’s storage, which you can wipe with one button. Any page you reach from here (Airwallex, for instance, or scalesmes.com) is a different site with its own notice.
About the AI, said plainly
ARIA’s replies and your written proposal are generated automatically by an AI model from what you wrote — they are not written by a person before you read them. A person does read the mailbox above and answers you. We do not use your conversations to train anything of ours. What DeepSeek, OpenRouter, Google or Cloudflare do inside their own systems is described in their notices, not ours — we cannot honestly speak for their internals.
Your four rights, and how to use them
Email hello@scalesmes.com with the subject “my data” and say which one you want. We confirm within 1 working day.
- See it — we send you what we hold about you. The PDPA gives us 30 days; in practice it is usually the same week.
- Correct it — tell us what is wrong and we fix it the same way.
- Withdraw consent — a single reply ends any further contact, and it does not affect the work already agreed with you.
- Delete it — we remove the proposal, the conversation and everything else we hold about you within 7 days, and we tell you in writing which record, if any, we are still required to keep and why.
What we never do
We do not sell, rent or trade your details — not with advertisers, not with data brokers, not with anyone. We do not profile you, we do not make automated decisions about your business, and we do not follow you around other websites.
Honest limits
- We are a small Singapore business and we make no security-certification claim — if you need ISO 27001 or a signed data-processing agreement before you buy, ask, and we will tell you honestly that we cannot offer it today.
- The AI can be wrong. Check any figure in a proposal against your own books before you act on it — the proposal is written from the numbers you gave, and if you gave none we say so rather than guess.
- If something goes wrong with your information and it is likely to affect you, we will tell you — and Singapore’s Personal Data Protection Commission, as the law requires.
If you spot a gap
If a sentence on this page contradicts what you have seen us do, write and tell us. We will fix the page rather than argue about it.
Related: talk to ARIA · Terms of service · ScaleSMEs