Privacy policy

Effective date: October 24, 2026

This policy explains how arandoo, Inc. ("ARANDOO", "we") handles personal information collected through www.arandoo.com.

1. Who we are

arandoo, Inc.
211 Glenwood Street
Malden, MA 02148
USA
E-mail: info@arandoo.com

2. Information we collect

Discovery-call requests and bookings: name, company, e-mail address, optionally phone number, preferred dates, the area of interest and your message.
Technical data: when you visit the site, our hosting provider processes technically necessary data such as IP address, time of access and the page requested, to deliver the website securely.

3. How we use it

We use your information only to answer your request, arrange and hold the meeting, and keep a record of our business correspondence. We do not use it for advertising profiles.

4. Website analytics and session recordings

To understand how visitors use the site and to improve it, we record page views, clicks, scroll depth and similar interactions (first-party analytics, including click heatmaps), and we may record pseudonymized sessions (mouse movements, clicks and page changes; the content of form fields is not recorded). Where consent is required, in particular for visitors from the European Economic Area, the United Kingdom and Switzerland, session recordings only start after you accept in the cookie banner. You can change your choice at any time by deleting the cookies of this site.

5. Cookies

_ms_consent, _ms_gdpr: your cookie choice and region, so we do not ask again (up to 6 months).
_lp_vid, _lp_cid, _lp_profile: a random visitor ID and basic visit context (e.g. referring source) for our analytics (12 months).
_mdb_rec*: whether this visit is part of a session recording sample (up to 2 days).
_mdb_gclid, _mdb_fbclid and similar: only when you arrive from an ad, the ad's click ID, so we can tell which campaigns work (90 days).

We do not use third-party advertising cookies. Fonts are hosted on our own server; no data is sent to font providers such as Google.

5a. Service providers

We use carefully selected providers who process data on our behalf: Vercel Inc. (website hosting), makerspark.io (CRM, website analytics and session recordings) and Cloudflare, Inc. (storage of recordings and files). Data is processed in the United States.

6. No sale or sharing

We do not sell personal information and do not share it for cross-context behavioral advertising.

7. Retention

We keep your information as long as needed to handle your request and for as long as statutory retention periods require, then delete it.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its processing, and to lodge a complaint with a supervisory authority. Visitors from the European Economic Area have these rights under the GDPR; our legal bases are the handling of your request (Art. 6(1)(b) GDPR), your consent for session recordings and analytics cookies (Art. 6(1)(a) GDPR), and our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR). You can withdraw your consent at any time with effect for the future. To exercise your rights, e-mail us; we will not discriminate against you for doing so.

9. International transfers

We are based in the United States, and your information is processed there. Where required, we rely on appropriate safeguards for transfers from the European Economic Area.

10. Children

This website is not directed to children under 16, and we do not knowingly collect their information.

11. Changes

We may update this policy; the effective date above shows the latest version.