InfiniHub · Privacy
InfiniHub privacy policy.
How InfiniHub, the Infinisync Hub platform, handles the information organisations and their people put into it: where it runs, what reaches an AI model, and what is recorded.
InfiniHub is a product of Infinisync by Arotech. Last updated 1 November 2026.
Who decides
Your organisation controls its data
InfiniHub is the Infinisync Hub platform: an AI layer that connects to an organisation's own systems and documents, answers questions across them and runs automated agents. Organisations buy it; their staff use it.
The organisation that uses InfiniHub decides which systems, documents and people are connected, and why. For that data, the organisation is responsible for how it is used, and Infinisync processes it on the organisation's behalf, under our agreement with them.
If you use InfiniHub through your employer or another organisation, contact them first about your personal information. You can also contact us.
Where it runs
A separate environment for each customer
Infinisync hosts and operates each customer's Hub on Microsoft Azure, in Infinisync's Azure subscription, in the EU (Sweden Central region).
Every customer gets its own environment: its own application, its own database and its own key vault for secrets. Customer data is not shared between environments.
Infinisync staff who operate the service can access a customer's environment to deploy, maintain, monitor and support it.
What it handles
Information in a Hub
Business records brought in from the systems an organisation connects (for example its CRM or ERP), documents and files people upload, and the conversations people have with the Hub, including attachments.
User accounts: people sign in with their organisation's Microsoft Entra ID account. We store an account identifier and the roles that decide what each person can see.
Messages from chat channels an organisation connects. For these, the sender is stored as a one-way coded value, not as a phone number or name.
Connections a person chooses to authorise for their own use, such as their calendar or email, are made with their permission and only to services the organisation has allowed.
AI models
What reaches an AI model
Answers are produced by Azure OpenAI models running in Microsoft's EU data zone, on Infinisync's Azure account. Microsoft does not use this data to train its models.
Before anything is sent to a model, names of people and organisations, email addresses and phone numbers are replaced with placeholders, and the real values are put back only in the answer shown to the user. The table linking placeholders to real values is never sent or logged.
Each kind of information has a rule set with the organisation. Information the organisation marks as never to be sent is not sent, with no exceptions.
Search indexing of documents is done inside the customer's own environment; document text is not sent out to be indexed.
The record
Every request is recorded
Every request to an AI model and every action the Hub takes is written to a permanent audit record in the customer's environment, including the request as sent (after names and contact details were replaced), who asked, and when. The organisation can read this record.
Application logs are kept in the customer's environment for 30 days. Database backups are kept for 7 days.
How long
Keeping and deleting
Data stays in a Hub for as long as the organisation uses the service, unless the organisation sets a shorter retention period for a type of record, or a person deletes their own conversations or uploads.
We do not sell personal information, use it for advertising, or use one customer's data for another customer.
Infinisync
Our general privacy policy
This page adds to Infinisync's general privacy policy. A signed agreement with your organisation takes priority over both.
Contact
Questions about InfiniHub and your data.
Write to team@theinfinisync.com. If we change this page, we will update it here and change the date at the top.