Privacy Policy

Domi Platform · Aruon-ai LLC
Last updated: 21 September 2026 · Version 2026-09-21

This Privacy Policy describes how Aruon-ai LLC (“Aruon,” “we,” “us,” or “our”), a Texas limited liability company, collects, uses, discloses, and protects personal information in connection with the Domi software platform (“Domi” or the “Service”). It applies to landlords and property-management companies (“Customers”), their staff users, and residents who interact with Domi (“Residents”).

1. Our role and scope

1.1 Service provider role. When a Customer uses Domi to manage properties, leases, charges, payments, and maintenance, Aruon processes personal information of Residents and staff on behalf of the Customer. In that capacity Aruon acts as a service provider under the California Consumer Privacy Act as amended and analogous state laws, and processes such information only to provide the Service, as directed by the Customer, and as otherwise permitted by the Data Processing Addendum to the Master Services Agreement.

1.2 Business role for limited direct data. Aruon acts as a business with respect to: (a) account registration and authentication data for staff and Resident users; (b) usage and diagnostic data about how the Service is used; (c) communications sent directly to Aruon support; and (d) information collected via our public websites and marketing channels.

1.3 Geographic scope. Domi is offered in the United States only at launch. We do not knowingly target or offer the Service to individuals located outside the United States, and we do not undertake international data-residency obligations.

1.4 Not covered. This Policy does not apply to third-party websites, services, or applications that link to or integrate with Domi, including Stripe's own privacy practices for payment processing.

2. Information we collect

2.1 From Customers and staff users.

• Account and profile information: name, email, phone, role, organization name;
• Property, unit, lease, and rent-roll data that Customer uploads or imports;
• Resident personal information that Customer uploads or that is generated through use of the Service;
• Billing and subscription information;
• Communications with Aruon support;
• Technical and usage data: IP address, device and browser type, log data, feature usage.

2.2 From Residents.

• Account credentials and profile information you provide;
• Payment-related information necessary to initiate a payment, processed by Stripe; Aruon does not store full bank-account or card numbers;
• Maintenance requests and descriptions you submit;
• Notification preferences;
• Technical and usage data as described above.

2.3 Information we do not collect or hold. Aruon never holds Resident funds. Security deposits are out of scope and are never held or escrowed by Aruon. We do not collect Social Security numbers or government identification numbers as part of standard Domi functionality, and tenant screening is out of scope.

2.4 AI processing. Lease documents, maintenance descriptions, and certain other content may be sent to AI model providers via API for abstraction, classification, summarization, or response generation. Those providers are contractually restricted from using the content to train their general-purpose models.

3. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Service;
• Process payments via Stripe Connect, as instructed by the Customer;
• Send transactional and service-related communications;
• Provide customer support and respond to requests;
• Detect, prevent, and address fraud, security, or technical issues;
• Comply with legal obligations and enforce our agreements;
• Generate aggregated, de-identified, or anonymized insights for benchmarking, analytics, and product improvement. We do not use Customer or Resident data to train general-purpose AI models;
• With appropriate consent, send limited product communications to Customers. We do not send marketing communications to Residents.

4. How we share information

4.1 We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

4.2 We disclose personal information to the following categories of recipients:

• (a) Payment processing — Stripe. When you pay rent through Domi, your payment details are collected and processed by Stripe. Aruon does not receive or store your full bank account or card numbers. Your landlord holds their own Stripe account and receives your funds directly; Aruon never holds your money. Stripe processes this information as an independent controller under its own privacy policy as well as on our behalf.
• (b) Cloud infrastructure and data storage — Supabase. Hosts the Domi database, authentication, and file storage, including your account details, lease and charge records, maintenance requests and any documents or photos you upload.
• (c) Application hosting and delivery — Vercel. Hosts the Domi website and staff console and processes the technical request and log data necessary to serve them.
• (d) Transactional email — Resend. Sends account, payment, maintenance and announcement emails to the address on your account.
• (e) Your landlord or property manager, and their authorized staff — as described in Section 4 of the Resident Terms of Service and Section 1 of this Policy. They are a separate controller of your information and their own privacy practices apply to it.
• (f) Professional advisers, and government or law-enforcement authorities — where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims, or to protect the rights, safety or property of any person.

4.2.1 Features not in use at the date of this Policy. Domi's SMS messaging and mobile push notifications are not active at the date above, and no personal information is disclosed to any SMS or push provider today. Of the AI providers listed below, only Anthropic, PBC is in use — for maintenance-request classification and for reading uploaded lease documents to help build a rent roll, as described in Section 2.4; OpenAI, L.L.C. is listed for planned features and receives no personal information today. Before any inactive provider is switched on, this Policy will be updated and re-dated.

4.3 SMS. Domi does not use SMS at launch. If SMS is added, the provider will be added as a subprocessor and this Policy will be updated together with appropriate consent and opt-out mechanisms.

4.4 Corporate transactions. We may transfer information in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and continuity of protection.

5. Retention and deletion

5.1 We retain personal information for as long as necessary to provide the Service, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements.

5.2 After a Customer terminates. The Customer may export data for thirty (30) days. Thereafter we delete or de-identify Customer Data within ninety (90) days, except: (a) payment, billing, and financial records retained for seven (7) years or longer where required by law or accounting standards; (b) data retained as necessary for legal claims, audits, or compliance; and (c) residual copies in encrypted backups that are overwritten in the ordinary course.

5.3 Resident deletion requests where the Customer must retain records. A Resident's deletion request may conflict with the Customer's own legal and accounting obligations to keep payment and lease records. We apply the following rule rather than deciding case by case.

On a verified Resident deletion request, the following are deleted within thirty (30) days: profile information not required for the tenancy record (photograph, biography, phone number where an email address is on file), notification preferences, saved device and session data, free-text maintenance descriptions and any photographs attached to resolved tickets, and support correspondence with Aruon. Any autopay enrollment is also deactivated, so no further payments are drawn from a payment method the Resident had saved.

The following are retained, because the Customer requires them to meet its own legal, tax, and accounting obligations and because they establish the existence and performance of a tenancy: the Resident's name, unit and property association, lease start and end dates, the record of charges raised and payments made including dates and amounts, and the fact and status of maintenance tickets without their free-text descriptions. Payment and financial records are retained for seven (7) years under Section 5.2(a).

Retained records are dissociated from live account access: the Resident's login is disabled and the retained data is held as a tenancy record belonging to the Customer, not as an active Domi account. Where the applicable state law provides an exception for records necessary to complete a transaction, comply with a legal obligation, or exercise or defend legal claims, we rely on that exception and tell the Resident which categories were retained and why.

Because Aruon acts as a service provider for most of this data, we will notify the Customer of any such request and coordinate the response. Where the applicable law requires the Customer, as the business, to respond, we will direct the Resident to the Customer and assist the Customer in doing so.

6. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, multi-tenant isolation enforced by row-level security policies in the database, and limits on employee access. No method of transmission or storage is completely secure and we cannot guarantee absolute security.

6.1 Incident notification. If we confirm a security incident involving unauthorized acquisition of or access to personal information, we will notify affected Customers without undue delay and in any event within seventy-two (72) hours of confirmation, and will notify Residents and regulators where required by applicable law. Our notice will describe the nature of the incident, the categories of data affected to the extent known, the measures taken, and a contact point.

7. Your privacy rights

7.1 Depending on your state of residence, you may have rights under state privacy laws, including those of California, Virginia, Colorado, Connecticut, Utah, and Texas, to:

• Request access to or a copy of personal information we hold about you;
• Request correction of inaccurate personal information;
• Request deletion of personal information, subject to the exceptions in Section 5.3;
• Opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising;
• Limit the use and disclosure of sensitive personal information, to the extent we collect any;
• Appeal a decision regarding your request, where the applicable law provides an appeal right.

7.2 How to exercise rights. You, or an authorized agent, may submit a request to privacy@aruon.ai or through any in-app or web form we make available. We will verify your identity and respond within the timeframes required by applicable law. If the request concerns data we process solely as a service provider to a Customer, we may direct you to the Customer or coordinate the response with the Customer.

7.3 California residents. California residents have additional rights under the CCPA as amended, including the right to know, delete, correct, and opt out of sale or sharing, and a private right of action for certain data breaches involving nonencrypted or nonredacted personal information. We do not sell or share personal information as those terms are defined under that law.

7.4 We will not discriminate against you for exercising privacy rights.

8. Children

Domi accounts are for individuals aged 18 or older. Occupants under 18 are covered through the account of the primary leaseholder and do not hold accounts of their own. Domi is not directed to children and we do not knowingly collect personal information directly from children. If we learn that we have done so without appropriate consent, we will take steps to delete it.

9. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date and, where appropriate, by additional notice by email or in-app. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

10. Contact us

Privacy requests: privacy@aruon.ai
General and legal notices: team@aruon.ai · 833-545-7058

Aruon-ai LLC, 5900 Balcones Drive, OFC 100, Austin, Texas 78731