Aristo — Privacy Policy

Aristo is a product of Phoenixhalo, Inc. · Effective 2026-06-30

Aristo is built on one promise: care, not surveillance. Aristo acts only as the signed-in user, only when they tap, and every number a leader sees is a whole team at a time, anonymized — never an individual.

Who we are

Aristo is operated by Phoenixhalo, Inc. (“PhoenixHalo”, “we”). For any privacy question or request, contact privacy@phoenixhalo.com.

What Aristo accesses, and why

With your Microsoft 365 administrator’s explicit consent, Aristo reads Microsoft 365 usage signals through the Microsoft Graph to recommend Copilot “recipes” for each person and to measure adoption at the team level. When Aristo performs an action (for example, drafting a summary), it acts as the signed-in user, only after that user taps — never autonomously.

What we do NOT do

We do not sell your data. We do not read the content of your messages or files for monitoring. We do not show managers any individual’s activity — every leader view is aggregated across a whole team and suppressed unless it covers at least five people. We do not use your tenant’s data to train shared models.

Data we store

Aristo stores the minimum needed to do its job: which recipes were offered and tried (per user, to avoid repeating), team-level adoption counts, your tenant’s configuration, and an aggregate governance ledger. Records carry a time-to-live and age out automatically.

Your choices and rights

Any user can say “forget me” in Aristo and their personal records are erased. Administrators can purge a whole team’s data. You may request access to, or deletion of, your data at any time via privacy@phoenixhalo.com. Aristo’s nudges are opt-out, always honored.

Where your data lives & who processes it

Aristo runs on Microsoft Azure. Our sub-processors are Microsoft (hosting and Microsoft Graph) and the AI provider(s) used to generate recommendation text. Your tenant’s data is isolated per tenant and encrypted in transit and at rest.

Security

We follow least-privilege access, per-tenant isolation, and encryption. Aristo requests only the Microsoft permissions it needs, and explains each one in plain words before you grant it.

Changes

If we change this policy, we will update the date above and, for material changes, notify your administrator.

This page is the privacy policy referenced in the Microsoft commercial marketplace listing for Aristo. Phoenixhalo, Inc.