About us

A small company in Auckland with one product.

Arrivo is built and operated by Memphis Limited, a New Zealand company based in Auckland. It was started by Sid, who still builds it and still answers the demo calls.

It came out of a simple observation: most small businesses run their front door on a paper book and their roster on a spreadsheet, and the tools that would fix that are built for much larger companies in other countries. Arrivo is built here, for New Zealand privacy and employment rules, for the person who runs the desk and the roster themselves.

We're early, and we'd rather say that plainly. What you get in return is a product that changes quickly when you tell us something's wrong, and a founder you can email.

CompanyMemphis Limited
Auckland, New Zealand
Security

How Arrivo keeps your data where it belongs.

Last updated 1 September 2026.

Permissions are enforced by the server, not the screenEvery request from the Portal, Go or the assistant is checked against the signed-in user's role and sites before any data is returned. Nothing is hidden only on the client.
The assistant acts as the logged-in userArrivo Intelligence has no service account and no separate data store. It calls the same permission-checked APIs as the person asking. Actions are proposed, confirmed by that person, then logged under their name.
Health data is excluded at code levelArrivo does not store clinical or patient records, and there is no API path from the assistant to any health information. This is not a configuration option and cannot be switched on.
EncryptionAll traffic between kiosks, phones, browsers and our servers uses TLS 1.2 or higher. Data at rest, including backups, is encrypted with AES-256.
Hosting and backupsArrivo runs in secure cloud data centres in the Asia-Pacific region. Databases are backed up daily and retained for 30 days. Access to production systems is limited to named Memphis Limited staff using multi-factor authentication.
Accounts and accessPasswords are stored as salted hashes and never in plain text. Sessions expire. Administrators can remove a user's access instantly, and a removed staff member loses Go access on every device at once.
Reporting a security problemEmail siddharth@arrivo.co.nz. We acknowledge reports within two business days and you will hear back from the person who can fix it.
Privacy policy

How we handle personal information.

Effective 1 September 2026. Written under the New Zealand Privacy Act 2020.

1. Who we are

Arrivo is operated by Memphis Limited, Auckland, New Zealand ("we", "us"). We are the agency responsible for personal information collected through the Arrivo Kiosk, Arrivo Portal, Arrivo Go app and Arrivo Intelligence (together, "the Service"). Questions about this policy go to siddharth@arrivo.co.nz.

2. Two kinds of people

The Service holds information about staff of the businesses that subscribe to Arrivo, and about visitors who sign in at those businesses. The subscribing business decides what is collected and how long it is kept. We hold and process that information on its behalf and under its instructions, and we hold account information about the business's own users.

3. What we collect

Visitors: the details the business has chosen to ask for on its sign-in form, which may include name, company, the person being visited, contact details, agreements accepted, and the time of sign-in and sign-out.

Staff: name, role, contact details, sites, rostered shifts, leave requests and balances, clock-in and clock-out times, and timesheets, as entered by the business or by the staff member in Go.

Account and technical: login details, device and browser type, IP address, and usage logs needed to run and secure the Service. Questions typed into Arrivo Intelligence are processed to produce an answer and stored in the account's history.

4. Health information

Arrivo is not a clinical system. We do not collect, store or process patient or clinical health information, and Arrivo Intelligence has no technical path to any such data. A clinic using Arrivo records that a person arrived, not why.

5. How we use it

To run the Service: signing visitors in and out, notifying the person being visited, publishing rosters, processing leave and timesheets, producing an evacuation list, and answering questions and carrying out confirmed actions in Arrivo Intelligence as the signed-in user. We also use account and technical information to keep the Service secure, fix problems and improve it. We do not sell personal information and we do not use it for advertising.

6. Who can see it

Within a business, access follows the roles the business sets up: staff see their own information in Go, managers see the sites they are responsible for in the Portal. Arrivo Intelligence can only see what the person using it can see. Memphis Limited staff access customer data only to provide support the business has asked for, or to investigate a security or reliability problem.

7. Where it is stored and who helps us

Data is stored with our cloud hosting provider in secure data centres in the Asia-Pacific region, encrypted in transit and at rest. We use a small number of service providers for hosting, email and push notifications, and a language-model provider to process questions asked of Arrivo Intelligence. Each is bound by contract to use the information only to provide its service to us. Because some providers operate outside New Zealand, we only use providers that offer protections comparable to the Privacy Act 2020.

8. How long we keep it

Visitor records are kept for the period the business sets in the Portal, and 12 months by default, after which they are deleted. Staff records are kept while the person is active in the account and for 7 years after, to meet New Zealand employment and tax record-keeping requirements, unless the business asks us to delete them sooner where the law allows. When a business cancels, its data can be exported and is deleted 90 days after the account closes.

9. Your rights

Under the Privacy Act 2020 you have the right to ask for a copy of the personal information we hold about you and to ask us to correct it. If you are a visitor or a staff member, the quickest route is usually the business you dealt with, since it controls its own account. You can also contact us directly at siddharth@arrivo.co.nz and we will respond within 20 working days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

10. Cookies and analytics

The Portal uses essential cookies to keep you signed in. Our website uses privacy-respecting analytics that do not identify you or track you across other sites. We do not use advertising cookies.

11. If something goes wrong

If a privacy breach is likely to cause serious harm, we will notify the affected businesses and the Privacy Commissioner as soon as practicable, as the Act requires, and help the business tell the people affected.

12. Changes to this policy

If we change this policy we will post the new version here with a new effective date, and tell account administrators by email where the change is material.

Terms and conditions

The agreement between you and us.

Effective 1 September 2026. Governed by New Zealand law.

1. The agreement

These terms are a contract between Memphis Limited ("Arrivo", "we") and the business that subscribes to the Service ("you"). By creating an account or using the Service you accept them. If you are accepting on behalf of a business, you confirm you have authority to do so.

2. The Service

The Service is Arrivo Kiosk, Arrivo Portal, the Arrivo Go app and, where included in your plan, Arrivo Intelligence, as described on our website for the plan you choose. We may improve or change features over time. We will not remove a feature you are paying for without at least 30 days' notice.

3. Your account and users

You are responsible for the people you add to your account, for keeping login details secure, and for removing access when someone leaves. You must give us accurate business and billing details. You may not use the Service to break the law, to collect information you have no right to collect, or to interfere with the Service or other customers.

4. Your obligations to your visitors and staff

You decide what your sign-in form asks and what you tell visitors about it. You are responsible for meeting your own obligations under the Privacy Act 2020 and employment law, including keeping wage and time records and paying leave correctly. Arrivo helps you keep those records; it does not replace your judgement or your payroll provider.

5. Arrivo Intelligence

Arrivo Intelligence answers questions and proposes actions using the permissions of the signed-in user. It does not act without that user's confirmation. Answers are generated from your live data but may occasionally be incomplete or wrong; you should check anything that matters before relying on it. You remain responsible for decisions made using it.

6. Fees and billing

Plans are priced per site per month, in New Zealand dollars, plus GST. Fees are billed monthly in advance to the payment method on your account. You can change plan at any time; the new price applies from the next billing date. If a payment fails we will let you know and give you 14 days to fix it before restricting access. We may change prices with 60 days' notice.

7. Your data

Your data belongs to you. You give us a licence to store and process it only to provide the Service, as set out in our Privacy policy. You can export your data from the Portal at any time. After cancellation we keep your data for 90 days so you can export it, then delete it, except where the law requires us to keep it longer.

8. Availability and support

We aim for the Service to be available 99.9% of the time each month, excluding planned maintenance, which we schedule outside New Zealand business hours and announce at least 48 hours ahead. Support is by email from Auckland, Monday to Friday, 8am to 6pm NZT. Pro plan customers receive priority handling.

9. Cancellation

You can cancel at any time from the Portal or by emailing us; the Service continues until the end of the period you have paid for and no further charges are made. We may suspend or end your account if you breach these terms and do not fix the breach within 14 days of our notice, or immediately where the breach is serious.

10. Liability

We will provide the Service with reasonable care and skill. To the extent the law allows, we are not liable for indirect or consequential loss, and our total liability to you in any 12-month period is limited to the fees you paid us in that period. Nothing in these terms limits rights you have under the Consumer Guarantees Act 1993 or the Fair Trading Act 1986 where those Acts apply. Because you are acquiring the Service for business purposes, you agree the Consumer Guarantees Act does not apply.

11. Intellectual property

Arrivo, its software, design and documentation belong to Memphis Limited. You may use them only as part of the Service. Feedback you give us may be used to improve the Service without obligation to you.

12. Changes and disputes

We may update these terms; material changes will be emailed to account administrators at least 30 days before they take effect. These terms are governed by New Zealand law and the New Zealand courts. If there is a dispute, we will both try to resolve it directly first. Contact siddharth@arrivo.co.nz.