ARIS Privacy Policy

Version 1.4 — Effective November 3, 2026

This policy explains what ARIS Trials LLC, a California limited liability company ("ARIS", "we", "us"), collects when you use the ARIS website, account portal, ARIS web application (app.aristrials.com), ARIS Field mobile application, and desktop application, and how we use it. ARIS Trials LLC succeeded to the ARIS business previously operated by its founder as a sole proprietorship and is the business responsible for the personal information described here.

1. What we collect

Account information: email address, password (stored as a salted hash), name, organization, role, and the onboarding answers you give (crops, regions, purposes, tools, trial volume, how you heard about us, and whether you opted into the research network or advisory group).
License and device information: license keys or access codes, plan and trial status, the app and version that contacted our servers, approximate time of contact, and IP address in server logs.
Agreement acceptance records: when you accept the EULA or Terms (on the website or inside an application) we record the version accepted, the time, your IP address, and browser or app identifier, so that we can prove the agreement was formed.
Your trial data: the trial designs, observations, photos, notes, and reports you create or sync with ARIS (see section 2).
Synchronization data: if you use the older phone-to-desktop transfer or trial sharing, encrypted bundles pass through our servers. They are encrypted on your device with a key derived from your access code and email; we hold them only until retrieved, or at most 30 days.
Support and communications: emails you send us and our replies.
Payment: handled by Stripe. We receive plan, amount, and a customer reference, never your card number.

2. Where your trial data is stored

Web application. Trial designs, observations, photos, notes, and reports you create in the ARIS web application are stored on our servers, in a database tied to your account, so you can reach them from any browser. They are encrypted in transit (TLS) and encrypted at rest by our hosting providers. Statistics and reports are calculated on our servers. Other accounts cannot see your data unless you share it. We access it only to run, secure, back up, and support the Service, when you ask us for help, or when the law requires it.

ARIS Field (phone). Ratings, photos, and notes are kept on your phone so you can work offline, and are sent to your account, encrypted in transit, when you sync.

Desktop application. If you use the desktop application, it keeps your data in an encrypted store on your computer and sends it to ARIS only when you use a sync or sharing feature.

Backups. We make a nightly encrypted backup of the database and keep it in private storage for 30 days.

Run in R. The R feature runs inside your browser. It downloads R and R packages from the webR project's public servers (r-wasm.org); your trial data is not sent to them.

Weather. Weather features contact public weather services (CIMIS, Open-Meteo) with the coordinates you enter.

3. How we use information

To create and secure your account, enforce license terms, deliver updates, provide sync and sharing, respond to support, send transactional email (verification, password reset, trial and renewal notices), send occasional product news you can opt out of, and improve the Software using aggregate, de-identified usage. We do not sell personal information and do not use it for third-party advertising.

4. Sharing

We share information only with service providers that host or operate the Service under confidentiality obligations (currently Vercel for hosting and backup storage, Neon for the database, Resend for email, Stripe for payments, GitHub for application distribution), with law enforcement when legally required, and in a merger or sale of the business, in which case this policy continues to apply.

5. Retention

Account information is kept while your account is active and for up to 24 months after closure for legal and accounting purposes, then deleted or de-identified. Trial data in your account is kept while your account is active; if you close your account and ask us to delete it, we delete it from the live database and it leaves our backups within 30 days. Sync bundles are deleted when retrieved or after 30 days. Server logs are kept for up to 90 days. Agreement acceptance records are kept for the life of the account plus six years.

6. Your rights

You may access, correct, export, or delete your account information by emailing cody@aristrials.com. Residents of California and other jurisdictions with privacy laws have additional rights (access, deletion, correction, and non-discrimination), which we honor for everyone. We do not respond to browser "Do Not Track" signals because we do not track you across other sites.

7. Cookies

The portal and web application use a single session cookie to keep you signed in and no third-party or advertising cookies. The web application also keeps display preferences in your browser's local storage.

8. Security

We use encryption in transit (TLS), encryption at rest by our hosting providers, hashed passwords, hashed license keys, encrypted nightly backups, encrypted local storage in the desktop application, and end-to-end encryption for desktop sync bundles. No system is perfectly secure; keep your credentials confidential and export important data regularly.

9. Children

The Service is not directed to children under 16 and we do not knowingly collect their information.

10. Changes

We may update this policy by posting a new version with a new effective date and, for material changes, notifying you by email or in the portal.

11. Contact

ARIS Trials LLC — 2158 Chandler St, Camarillo, CA 93010 — cody@aristrials.com — https://aristrials.com