Privacy Policy

Last updated October 24, 2026

This policy explains what information Arara Search LLC ("Arara" or "we") collects and what we do with it. It covers ararasearch.com and the Arara service, which helps local businesses publish pages about their locations, collect reviews from their customers, and keep their business listings accurate.

The short version

• We do not sell personal information, and we do not use it for advertising.
• Businesses that use Arara own the information they put into it. We process it on their behalf and on their instructions.
• Location pages we publish for a business live on that business's own website.
• A business can export its data at any time and take it with it when it leaves.

This website

ararasearch.com does not use cookies or tracking tools of any kind. Like any website, our hosting provider receives technical information when you load a page, such as your IP address and browser type, and keeps it briefly in server logs for security and troubleshooting.

If you email us, we keep your message and address so we can reply.

The waitlist. If you join the waitlist, we keep your name, email address, restaurant name, city and state, and your current website if you give it. We use them to invite you to Arara and to set up your account once you accept. To stop automated sign-ups, we also keep a scrambled code made from your IP address, which can't be turned back into the address. Joining the waitlist sets no cookies. We keep a sign-up until we invite you, or until you ask us to remove it at privacy@ararasearch.com.

Information we collect when a business uses Arara

Account information. The name and work email of each person at a business who signs in to Arara, along with their role, plus billing contact details. Card and bank details are handled by our payment processor; we never see or store full card numbers.

Business and location information. Addresses, phone numbers, hours, menus, photos, descriptions and similar details a business provides or connects from its own systems, such as its point-of-sale or ordering software.

Customer information for review requests. When a business asks its customers for reviews, it gives us the customer's email address or mobile number and the time of the visit or order. We use these only to send that business's review request. Order numbers are stored only in scrambled form. Contact details are deleted after 90 days.

Reviews. When someone leaves a review through a business's Arara review form, we collect the rating, the review text, any photo they add, and the name they choose to display. Reviews are published on that business's website and kept until the business or the reviewer asks us to remove them.

Sign-in codes by text. A person who signs in to Arara can choose to receive a 6-digit sign-in code by text message at a mobile number they enter. We send a code only when that person asks for one, and we use the number only to send sign-in codes. Message and data rates may apply. Reply HELP for help or STOP to stop texts; you can still sign in with a code by email. We do not share mobile numbers or text message consent with anyone for marketing.

Text message consent. We send texts only to people who have agreed to receive them from the business. We record when and how that consent was given, and a reply of STOP ends all texts from that business right away.

Information from Google, Apple, Meta and Microsoft

A business can connect its Google Business Profile, Apple Business, Facebook, Instagram or Bing Places accounts to Arara. When it does, we access only what is needed to keep its listings accurate and to let it read and reply to reviews in one place: business details, posts, reviews, questions and basic performance figures for its own locations.

Arara's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. In particular:

• We use Google data only to provide the features the business turned on.
• We do not use it for advertising, and we do not sell it.
• No person at Arara reads it unless the business asks us to for support, we need to for security, or the law requires it.
• We do not use it to train general artificial intelligence models.

Reviews and other content from Google and other platforms are held only as long as each platform's terms allow, and are never republished on location pages.

Businesses we contact

Arara looks at the public websites of local businesses that might benefit from the service, so it can show them what could be improved. When we do, we use only information the business has already made public:

• The business's name, address, phone number, email address and website, as published on its own site.
• Links to its social media accounts, as published on its own site.
• The name of the owner or manager, from the business's own website or from public state business records.
• Technical details about the website, such as the software it runs on and the company that built it.

We never log in to private accounts, get past a login or paywall, or collect information that isn't publicly available. Our scanner identifies itself as AraraScanner. It follows each website's robots.txt instructions and any limits a site publishes for automated tools, such as llms.txt. If a site asks not to be scanned, we don't scan it.

We use this information to prepare a report about the business's website and to contact the business about Arara by mail, email, phone or in person. We do not collect personal social media accounts, home addresses or anything about a person's private life. We do not sell this information or share it with advertisers.

If the business does not become an Arara customer, we delete this information 90 days after we last contacted it. To have it deleted sooner, or to ask us not to contact your business or scan its website again, write to privacy@ararasearch.com and we will do so right away.

How we use information

• To run the service: publish pages, send review requests, sync listings and show reports.
• To bill for the service and to provide support.
• To keep Arara secure and to stop fraud and fake reviews.
• To meet legal obligations.

Arara drafts some text, such as suggested replies to reviews, with artificial intelligence that runs on our own servers. A person at the business approves every reply before it is published.

To measure how AI assistants describe a business, Arara sends questions such as "best hot chicken in Brookfield, CT" to services like ChatGPT, Gemini, Perplexity and Claude. Those questions contain the business's public name and location, never personal information about its customers.

Who we share information with

We share information only with service providers that help us run Arara, under contracts that limit what they can do with it:

• Cloudflare, for hosting and network delivery
• Google Workspace, for our own email
• Stripe, for payments
• Telnyx, for text messages

We also share information when a business tells us to, for example by connecting a listing platform, and when the law requires it. If Arara is ever sold or merged, this policy will continue to apply to the information we hold.

How long we keep information

Customer contact details for review requests are deleted after 90 days. When a business cancels, we keep its site and data for 90 days so it can restart where it left off, and it can export everything during that time. After 90 days we delete its data, other than records we must keep for tax and legal reasons. A business can ask us to delete its data sooner, and we will. Information about businesses we contact is deleted 90 days after our last contact unless the business becomes a customer. Server logs are kept for a short period for security.

Security

Data is encrypted in transit and at rest. Each business's data is kept separate from every other business's at the database level, access is limited to the people who need it, and backups are encrypted.

Your choices and rights

If you are a customer of a business that uses Arara, that business controls your information, and you can contact it directly. You can also write to us and we will pass your request along or handle it ourselves.

Signing in with Google, Microsoft or Facebook. If you sign in to Arara through one of these, we keep your name, your email address and the account identifier that service gives us, and nothing else from it. To remove that connection and delete what we keep from it, write to privacy@ararasearch.com and we will do it within 30 days. You can also remove Arara from the connected apps in your Google, Microsoft or Facebook settings.

Depending on where you live, you may have the right to see the personal information we hold about you and to have it corrected or deleted. You may also be able to object to how it is used. Write to privacy@ararasearch.com. We respond within 30 days and do not charge for requests.

Children

Arara is a service for businesses and is not directed to children under 13. We do not knowingly collect their information.

Where information is stored

Arara stores information in the United States.

Changes to this policy

If we make a material change, we will update the date at the top of this page and tell businesses that use Arara by email before the change takes effect.

Contact

Arara Search LLC
16 Railroad Place #1148
Westport, CT 06880
privacy@ararasearch.com