Legal

Privacy Policy

Last updated: 1 June 2026

Arvo is an all-in-one CRM for service businesses, operated by Jarmos Group Pty Ltd (“Arvo”, “we”, “us”, “our”). This policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

We collect the following kinds of information:

Account & identity information

When you sign up for a trial or an account, we collect your name, business name, email address, phone number, and login credentials (passwords are stored only as a salted hash).

Billing information

If you subscribe to a paid plan, payments are processed by our payment provider (Stripe). We receive limited billing details such as your plan, billing email and the last four digits / card brand — we never store full card numbers on our servers.

Usage & device information

We automatically collect basic technical data when you use Arvo, such as your IP address, browser type, pages viewed, and timestamps, which we use to operate, secure and improve the service.

Communications

If you contact us by email, chat or our contact form, we keep a record of that correspondence so we can respond and support you.

2. How we use information

• To create and manage your account and provide the Arvo service;
• To process subscriptions and payments;
• To provide customer support and respond to enquiries;
• To send service and transactional messages (e.g. sign-in, billing, security and product notices);
• To secure the platform, prevent fraud and abuse, and troubleshoot issues;
• To understand usage and improve features and performance;
• To send marketing about Arvo where permitted — you can opt out at any time (see section 6);
• To meet our legal and regulatory obligations.

3. Data you store in Arvo (“Customer Data”)

Arvo is a tool you use to run your business, so you may store information about your own leads, customers and contacts — names, email addresses, phone numbers, quotes, jobs, invoices, notes and related records.

For this Customer Data, you are the data controller and we act as your processor. We process it only to provide the service to you and on your instructions. You are responsible for having a lawful basis to collect and use the information you put into Arvo, and for providing any notices your own customers are entitled to. We do not sell Customer Data or use it to build advertising profiles.

4. Who we share information with

We do not sell your personal information. We share it only with trusted service providers who help us run Arvo, and only as needed to provide the service:

• Hosting & infrastructure — our cloud server provider (Hetzner) hosts the application and database;
• File storage — Cloudflare R2 stores files and attachments you upload;
• Payments — Stripe processes subscription payments;
• Email delivery — Resend delivers our transactional and notification emails;
• Optional integrations you enable — e.g. Xero (accounting) or email providers you connect, which then exchange the relevant data with Arvo at your direction.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property or safety of Arvo, our users or others. If our business is involved in a merger, acquisition or asset sale, information may be transferred as part of that transaction (and this policy will continue to apply).

5. Cookies & analytics

We use strictly necessary cookies and similar technologies to keep you signed in and to operate the application securely. We may use limited, privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings, though disabling essential cookies may prevent the app from working.

6. Marketing emails & opt-out

We may send you information about Arvo’s features, offers and updates. Every marketing email includes an unsubscribe link, and you can opt out at any time at arvocrm.com/unsubscribe or by replying to ask us to stop. Opting out of marketing does not stop essential service messages (such as billing or security notices).

7. How long we keep information

We keep personal information for as long as your account is active and as needed to provide the service. After you close your account we delete or de-identify personal information within a reasonable period, except where we must retain it to meet legal, tax, accounting or security obligations, or to resolve disputes.

8. Security

We take reasonable steps to protect personal information, including encryption in transit (HTTPS), hashed passwords, access controls, network firewalls and regular backups. No method of transmission or storage is completely secure, but we work to protect your information and to address any incidents promptly.

9. Overseas storage

Some of our service providers store or process data outside Australia (for example, our hosting and file-storage providers may operate servers in the European Union or other regions). Where information is transferred overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

10. Your rights & choices

Subject to applicable law, you can:

• Access the personal information we hold about you;
• Ask us to correct information that is inaccurate or out of date;
• Request deletion of your personal information;
• Opt out of marketing communications;
• Make a privacy complaint.

To exercise any of these, contact us using the details below. We will respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Children

Arvo is a business tool intended for use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of Arvo after an update means you accept the revised policy.

13. How to contact us

This policy is provided for general information and transparency about how Arvo handles data. It is not legal advice.