Privacy Policy

We use the information we collect to:

• Create and maintain your account and provide the Service
• Sync your product listings across connected marketplaces
• Process payments and manage subscriptions through Stripe
• Send transactional emails (account confirmation, password reset, billing receipts)
• Respond to your support requests
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Debug errors and improve the reliability and performance of the Service
• Comply with legal obligations
• Analyze aggregate, anonymized usage trends to improve features

We do not sell your personal information. We do not use your listing content or business data to train machine learning models for any purpose other than features you explicitly use within the Service (such as AI-powered item identification).

ARC uses artificial intelligence to help identify items, generate listing titles, descriptions, and tags from photos you upload. When you use these features:

• Images are sent to Anthropic's Claude API for processing. Anthropic's privacy policy governs how they handle this data.
• Images are not stored by Anthropic beyond the immediate API request.
• We do not use your images or generated content to train our own AI models.
• AI-generated content is suggestions only — you review and control what gets published.

We do not sell, rent, or trade your personal information. We share your data only in these limited circumstances:

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account
• Listing and inventory data: Retained until you delete it or close your account
• Error logs: Automatically purged after 90 days
• Payment records: Retained for 7 years as required by tax and accounting regulations
• Deleted account data: Permanently deleted within 30 days of account closure, except where retention is required by law

We take the security of your data seriously and implement industry-standard safeguards:

• All data is encrypted in transit using TLS/HTTPS
• Database access is restricted by row-level security policies
• Authentication tokens and OAuth credentials are stored encrypted
• Access to production systems is limited to authorized personnel only
• We regularly review our security practices and update them as needed

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If we become aware of a data breach that affects your information, we will notify you as required by applicable law.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing of your data
• Withdrawal of consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at privacy@arcautomation.app. We will respond within 30 days.

You can disconnect any marketplace integration at any time from your Settings page, which immediately revokes our access to that platform's data.

We use cookies solely for operating the Service:

• Authentication cookies: Keep you logged in during your session (required for the Service to function)
• Preference cookies: Remember settings like your selected location or view preferences

We do not use advertising cookies, tracking pixels, or cross-site tracking of any kind. You can disable cookies in your browser settings, but doing so will prevent you from logging in to the Service.

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us at privacy@arcautomation.app and we will delete it promptly.

ARC Automation is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

For users in the European Economic Area (EEA) or United Kingdom, we rely on Standard Contractual Clauses and other appropriate safeguards for cross-border data transfers where required.

The Service may contain links to third-party websites or integrate with third-party platforms. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information to them.

If you connect your Shopify store to ARC, the following additional terms apply:

• We access your Shopify store data only to perform functions you explicitly request (publishing listings, syncing inventory, importing products)
• We request only the minimum Shopify API scopes needed: read_products, write_products, read_orders
• We do not share your Shopify store data with any third party except as described in Section 4
• Your Shopify access token is stored encrypted and used only to make API calls on your behalf
• You can revoke our access at any time by disconnecting Shopify in Settings or uninstalling the app from your Shopify admin
• Upon disconnection or account deletion, your Shopify access token is permanently deleted from our systems within 30 days

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to your registered email address
• Show a notice within the Service for at least 30 days

Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you may close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.