Data inside the product

When your organization subscribes and connects an accounting system, that workspace data is governed by the Terms of Service and this section. For this data, Arodus acts as your processor under the Data Processing Addendum.

Arodus reads three categories of data from your accounting system: your vendors, what you pay them, and your company profile. Arodus only sends read requests to your system and changes nothing in it.

Your vendors: who you pay. Arodus keeps each vendor's name, category, website domain, street address, phone, and city, state and country, and uses the address and phone only to match vendors. Contact names, contact emails and account numbers are used to match vendors and aren't kept.

What you pay them: bills, payments, credits and refunds with your vendors, including payments made straight to a vendor by card, check or cash. For each, Arodus keeps the vendor, the date, the amount, how it was paid and which bills a payment settled. The paying bank or card account isn't kept. Line items are kept only if you turn them on.

Your company profile: your company's name, location and website domain, and your book-close date. Arodus uses your company's details to set up your account and to recognize your company if it also appears as a vendor in Arodus; that link is visible only to your workspace. Street address, phone and contact email are deleted once your account is set up. Your book-close date is used only to tell which payments sit in closed periods.

That's the whole scope: your vendors and what you pay them. Payments to anyone who isn't a vendor, such as employee reimbursements, are discarded before they're stored.

Line items (what was bought, its amount, the item or account it was coded to, and quantity) are kept only if your organization turns on line-item storage. It's off by default. Turning it off stops collection and deletes stored line items within 30 days. Line items stay in your workspace and never feed network signals.

Arodus doesn't request payroll, income statements, balance sheets or employee records.

Your identifiable records and spend figures stay in your workspace. Network-level signals are derived only as anonymized, relative aggregates, and only where enough buyers contribute that no single account can be identified. Vendors who are individuals rather than businesses never enter the shared network.

On cancellation or written request, your account and connected-system data are deleted within 30 days, and backup copies expire within a further 30 days. If a payment fails and is not resolved, the workspace is retained read-only for 90 days, then follows the same deletion path. Arodus's subprocessors are listed at arodus.com/subprocessors, and the Data Processing Addendum is at arodus.com/dpa.

Your Arodus account

Account and sign-in: your name, work email and role, and whether you sign in with Google or Microsoft.

Billing: your plan and billing contact. Card details are collected and held by Stripe; Arodus sees the card brand, last four digits and expiry date.

Product usage: pages and features used, and performance data, tied to a pseudonymous user ID and your email domain. Used to run and improve the product.

AI-assisted research: when you add a vendor that isn't in the Arodus catalog, its business name and website domain go to an AI model hosted on Amazon Bedrock, which drafts a research summary for a person to review. Nothing that identifies your organization is sent.