Capira Labs
Privacy Policy
Arishem is a product of Capira Labs (Iyeronic LLC dba Iyer Enterprise) (“Capira Labs”, “we”). This policy says what we collect and why.
Data Collection & Use
What we collect and how we use it.
- What we collect: your name, work email address, mobile phone number (only if you give it), the organization you belong to, and what you do in Arishem (cards, comments, time entries, tool calls) so the service works and can be billed to your organization. For sign-in and security we also keep the one-time codes we send you for a few minutes, and sign-in times and devices.
- How we use it: to run the service, to verify it is you, to send you the notices your organization chooses, to keep the service safe, and to meet legal duties. Text messages are used only to send one-time verification codes.
- Text messages (SMS): if you give your mobile number and agree, we text you verification codes. Message frequency varies with sign-in activity. Message and data rates may apply. Reply STOP at any time to stop and HELP for help. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile information is not shared with third parties or affiliates for marketing or promotional purposes.
- Who processes it for us: service providers that deliver or store data for us, for example our text-message and email delivery providers and our cloud hosts. They may use it only to provide those services to us.
- How long: codes are deleted when they expire or are used; account data is kept while the account exists and as the law requires.
- Your choices: you can ask to see, correct or delete your data, and you can opt out of texts with STOP. Contact: privacy@capiralabs.com.
- Last updated: 2026-10-06.
Security & Governance
Privacy built into every layer.
Arishem AI Enterprise isolates customer data by tenant and organization. We implement strict role-based access controls, zero credential leakage policies, and cryptographic verification of all identity assertions.
- Tenant isolation ensures data never crosses organization boundaries.
- Attributed actions link every system interaction to a verified individual or associate.
- Zero-knowledge handling of authentication secrets and instant code expiration.