Privacy Policy
Last updated July 31, 2026
What we collect, why, who else processes it, and what you can ask us to do about it. Workspace data is isolated at the database level, and we do not use one customer's data to train models for another.
Draft — not yet in effect
This document is a prepared baseline awaiting legal review and the registered entity details. It does not yet form a binding agreement. Self-serve signup remains closed until it does.
1. Scope
This policy explains how [LEGAL_ENTITY] handles personal data in Arc Studio, for both the people who use the service and the people whose records a customer stores in it.
Where a customer uses the service to process data about their own contacts, the customer is the controller of that data and we act as their processor.
2. What we collect
Account data: name, email address, workspace and organisation details, and authentication records.
Workspace content: the CRM records, campaigns, approvals, media, and settings a customer creates or imports.
Usage data: pages viewed, features used, agent run records, and AI processing volume for billing.
Acquisition data: which channel referred a visit — campaign parameters, the referring site's host, and the landing page. This describes a channel, not a person: it never contains a name, an email address, or an IP address, and the referrer is reduced to its host before storage.
Billing data: handled directly by Stripe. We store a customer identifier and subscription status, never card details.
3. Why we process it
To provide the service: authenticating you, storing your records, running the agent, and delivering the messages you approve.
To bill you correctly and to apply the plan limits you agreed to, which requires measuring AI processing volume per workspace.
To keep the service secure, investigate abuse, and diagnose faults when something breaks.
To communicate with you about the service, including changes that affect you and notices about your plan or usage.
4. AI processing
Operating the agent means sending relevant workspace content to AI providers so they can draft and reason over it. Those providers are listed on the Subprocessors page.
We do not use one customer's workspace data to train models for other customers, and we do not sell workspace data.
Because the agent drafts rather than sends, AI output stays inside your workspace until a human approves it.
5. Sharing
We share personal data with the subprocessors listed on the Subprocessors page, each acting under contract and only to perform its function.
We may disclose data where legally required, or to protect rights and safety. We will tell affected customers where we are permitted to.
If the business is acquired, data may transfer as part of that transaction; the successor remains bound by this policy or an equivalent one.
6. Isolation and security
Each workspace's data is isolated at the database level through row-level security, not only in the interface, so one workspace's queries cannot reach another's records.
Credentials for connected services are stored encrypted and are readable only by the workspace that supplied them.
Access to production systems is limited to personnel who need it. No system is perfectly secure, and we do not claim otherwise.
7. Retention and deletion
We keep workspace data while the account is active. After termination we retain it for a limited period so it can be exported, then delete it.
You can request export or deletion of a workspace's data at any time by contacting us. Some records may be retained where the law requires it, such as billing records.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing.
To exercise a right, contact privacy@arc-studio.ai. If you are a contact stored in a customer's workspace, please contact that business directly — they control that data, and we will assist them in responding.
9. Cookies
We use a session cookie to keep you signed in, and a first-party cookie that records which channel referred your visit. The latter holds campaign parameters, a referring host, and a landing path — no personal data.
We do not use third-party advertising or cross-site tracking cookies.
10. International transfers
Our subprocessors are primarily based in the United States, and data may be processed there. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
11. Changes and contact
We will post material changes to this policy and update the date below.
[LEGAL_ENTITY], [REGISTERED_ADDRESS]. Privacy questions: privacy@arc-studio.ai. Security reports: security@arc-studio.ai.