What we collect, why, who helps us process it, how long we keep it, and the rights you have over it. Written to be read, not skimmed past.
ARYS Intelligence ("we", "us") is a technology advisory practice based in Chicago, Illinois, USA, run by Ravi Rooprai. We are the controller of the personal data described here. For anything about your data, email [email protected]. We are a small practice and have not appointed a data protection officer or an EU or UK representative; write to the address above and a person will answer.
What you give us. When you use the contact form or send the readiness check, we receive what you enter: your name, work email, title, organization, and your answers or message. The readiness check calculates your result in your own browser. Your answers only reach us if you choose to send them.
What we look up about your organization. When you contact us, we may gather public information about your organization, not about you personally, to prepare for a useful conversation: for example its website, the technology visible on it, and IRS Form 990 filings published by ProPublica's Nonprofit Explorer. We use an AI service (see section 4) to help summarize it into notes for Ravi. Nothing is decided automatically about you: the notes are read by a person.
What is collected automatically. Our web server keeps standard access logs (IP address, browser type, the page requested, time) for security and troubleshooting. If you allow it, Google Analytics measures how the site is used with cookies. Cloudflare Turnstile, which protects our forms from spam, processes technical signals from your browser to tell people from bots.
We do not collect special-category data, and we ask you not to include any in free-text answers.
| Purpose | Legal basis (EU and UK GDPR) |
|---|---|
| Replying to your inquiry, sending your readiness check result, and preparing for a conversation you asked for | Steps taken at your request before any contract (Art. 6(1)(b)), and your consent for the readiness check email (Art. 6(1)(a)) |
| Following up once about your inquiry | Our legitimate interest in responding to business inquiries (Art. 6(1)(f)). You can tell us to stop at any time. |
| Researching public information about your organization | Our legitimate interest in preparing for a meeting you requested (Art. 6(1)(f)) |
| Site analytics with Google Analytics | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Spam protection and security logs | Our legitimate interest in keeping the site and forms secure (Art. 6(1)(f)) |
We do not sell your personal information, share it for cross-context behavioral advertising, or add you to a mailing list. We do not use your data to train AI models.
We use a small number of service providers, each bound to process data only on our instructions:
Inquiry records and research notes are stored on servers we operate ourselves, in the United States.
We are based in the United States, so information you send from the EU, EEA, UK or Switzerland is transferred there. Where a provider is certified under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), we rely on that certification; otherwise we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) in the provider's data processing terms.
Depending on where you live, you have the right to access your personal data, correct it, have it deleted, restrict or object to how we use it, receive a portable copy, and withdraw consent at any time without affecting what happened before. To use any of these, email [email protected]. We will reply within one month. We may ask you to confirm your identity first.
If you are in the EU, EEA or UK, you can also complain to your local data protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to fix things first.
US residents. Whichever state you live in, you can ask what we hold about you and ask us to delete or correct it, and we will honor it. We do not sell or share personal information as those terms are defined in state privacy laws, and we do not use sensitive personal information.
The only non-essential cookies on this site are Google Analytics cookies. Visitors from the EU, EEA, UK and Switzerland get no analytics cookies unless they accept. Everyone can change their choice at any time: . Cloudflare may set a strictly necessary cookie to protect the site. Cal.com sets its own cookies only if you open the booking calendar.
Traffic to this site is encrypted, form submissions are checked for bots and verified with a signature between our systems, and access to inquiry records is limited to Ravi and the tools he uses to run the practice. No system is perfectly secure; if something goes wrong that affects you, we will tell you and, where required, the relevant authority.
This site is for professionals and is not directed at anyone under 16. We do not knowingly collect their data.
If we change this notice, we will update the date at the top. If a change is significant and we have your email because you contacted us, we will tell you.