privacy policy

Arc — by Arc Labs LLC

1. Introduction

Arc Labs LLC ("Arc Labs," "we," "us," "our") operates Arc, an AI-powered conversational companion. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your data.

We take your privacy seriously. Arc is a product built on trust — you share personal, sometimes vulnerable things with Arc, and we have a responsibility to handle that data with care.

This policy applies to all users of Arc, including registered account holders and trial (anonymous) users.

2. What Data We Collect

2a. Account Information

When you create an account, we collect:

Email address
Password (stored securely via Supabase Auth — we never see or store your plain-text password)

2b. Messages and Conversations

When you use Arc, we collect and store:

Your messages — everything you type and send to Arc
Arc's responses — every message Arc generates for you
Conversation metadata — timestamps, conversation groupings, session information
Emotional metadata — Arc's internal analysis of conversational intensity and emotional themes (used to improve response quality, never shared externally)

2c. Technical and Session Data

Session identifiers
IP address (used for rate limiting only, not stored long-term)
Browser user agent (used for rate limiting only)
Timestamps of activity

2e. Trial User Data

If you use Arc without creating an account (trial mode):

Your messages are not stored in our database
Messages are held temporarily in your browser's local storage and are cleared when you clear your browser data
Your messages are sent to third-party AI services (Anthropic) for response generation during your session
We do not retain trial conversations after your session ends

3. How We Use Your Data

Providing the Service

Generating AI responses to your messages
Storing and retrieving past conversations so Arc can remember context
Personalizing Arc's responses based on your history, facts, and patterns
Performing semantic search to find relevant past messages

Conversation Analysis

Your conversations are periodically analyzed by AI systems to generate summaries, extract key moments, identify themes, and recognize recurring patterns
This analysis runs automatically and is used to improve your personal experience within Arc
The analysis is performed using Anthropic's Claude API

Product Improvement

We may use anonymized, aggregated data that cannot be linked back to any individual user to improve Arc's features, performance, and quality
You may opt out of product improvement use by contacting us at aleforsure@gmail.com

Security and Abuse Prevention

Rate limiting to prevent abuse
Security checks to detect adversarial or manipulative use of the service

4. Third-Party Services

Arc relies on the following third-party services to operate:

Anthropic (Claude API)

What they receive: Your messages and conversation context, sent for AI response generation
Purpose: Core AI functionality
Their privacy policy: anthropic.com/privacy

OpenAI (Embeddings API)

What they receive: Your messages, sent to generate vector embeddings
Purpose: Semantic search
Their privacy policy: openai.com/privacy

Supabase

What they receive: All stored data
Purpose: Database hosting, user authentication, and data storage
Their privacy policy: supabase.com/privacy

Vercel

What they receive: Application hosting and API request routing
Purpose: Hosting the Arc application and API endpoints
Their privacy policy: vercel.com/privacy

We do not sell your personal data to any third party.

5. How We Protect Your Data

All data is transmitted over encrypted connections (HTTPS/TLS)
Passwords are managed through Supabase Auth and are never stored in plain text
Database access is controlled through Row Level Security (RLS) policies
API endpoints are protected by authentication (JWT tokens) and rate limiting
Trial user data is not persisted in our database

While we take reasonable measures to protect your data, no system is 100% secure. We cannot guarantee absolute security of your information.

6. Data Retention

Active Accounts — Your data is retained for as long as your account is active.

Deleted Accounts — Upon account deletion request, all identifiable data is permanently deleted within 30 days.

Trial Users — No data is retained in our systems after the session.

7. Your Rights

Right to Access — You can request a copy of the data we hold about you. Contact us at aleforsure@gmail.com.

Right to Deletion — You can request deletion of your account and all associated data at any time. Deletion is completed within 30 days and is permanent.

Right to Opt Out of Product Improvement — Contact us at aleforsure@gmail.com.

Right to Information — You have the right to know what data we collect, how we use it, and who we share it with.

8. Children's Privacy

Arc is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

If we learn that we have collected data from a user under 18, we will take steps to delete that data as quickly as possible.

9. State-Specific Rights

California Residents (CCPA/CPRA)

Right to Know: You can request details about the categories and specific pieces of personal information we collect.
Right to Delete: You can request deletion of your personal information.
Right to Opt Out of Sale: We do not sell your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at aleforsure@gmail.com.

10. Cookies and Local Storage

Local storage: Used to temporarily store messages on the client side for display purposes and for trial user message history
Cookies: Used for session authentication (JWT tokens) and trial user tracking

We do not use advertising cookies or tracking pixels. We do not serve ads.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you via email or in-app notification.

Your continued use of Arc after changes are posted constitutes acceptance of the updated policy.

12. Contact

Arc Labs LLC
Email: aleforsure@gmail.com