Last updated: [DATE]
[LEGAL ENTITY NAME] ("Arc-Squared", "we") is the data controller for the personal data described here. We are a company registered in England and Wales (company number [COMPANY NUMBER]), registered office [REGISTERED OFFICE], registered with the UK Information Commissioner's Office (registration number [ICO REG NUMBER]). For any privacy question or to exercise your rights, contact admin@arc-squared.com.
| Category | Examples |
|---|---|
| Account | Name, email address, company, optional VAT number, notes. |
| Billing | Credit balance, transaction history, Stripe customer reference. We do not store card details — payments are handled by Stripe. |
| Submissions | The model files you upload and process, file names/sizes, processing settings, and the resulting output files (retained for a limited period — see Retention). |
| Technical | Login (magic-link) tokens, a strictly-necessary authentication cookie, IP address and server logs used for security and to operate the service. |
| Sign-in | If you choose "Continue with Google", we store your Google account identifier and, optionally, the name and profile picture Google provides, so we can recognise you on return visits. We never see or receive your Google password. |
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Providing the processing service and managing your account and submissions | Performance of a contract |
| Taking payment and managing credits | Performance of a contract |
| Keeping financial and transaction records | Legal obligation (UK tax/accounting) |
| Security, fraud prevention, malware scanning, service operation and improvement | Legitimate interests (running a secure, reliable service) |
| Service emails about your submissions (e.g. files ready) | Performance of a contract; you can turn these emails off in your profile |
We do not currently send marketing email and do not use your data for advertising. We would only do so with your consent.
We use a single strictly-necessary cookie to keep you logged in, and your browser's local storage to save an in-progress submission so you can resume it. These are essential to the service you have asked for, so under the Privacy and Electronic Communications Regulations they do not require a consent banner. We do not use analytics, advertising or tracking cookies. If that changes, we will ask for your consent first.
We do not sell your data. We share it only with the service providers (processors) needed to run the service, under data-processing agreements:
We may also disclose data where required by law.
Some of our providers (including Stripe, Google and Cloudflare) process data outside the UK, including in the United States. Where they do, the transfer is protected by an appropriate safeguard — the UK Extension to the EU-US Data Privacy Framework and/or the UK International Data Transfer Agreement (IDTA) / Standard Contractual Clauses. [Confirm the exact mechanism for each provider.]
Under UK GDPR you have the right to access, correct, erase, restrict or object to our processing of your personal data, and to data portability, subject to our legal retention obligations (we cannot, for example, delete financial records we must keep). To exercise any right, contact admin@arc-squared.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to help first.
We protect your data with measures including encrypted connections (HTTPS), restricted access, malware scanning of uploads, and secure handling of credentials. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the ICO of a personal-data breach where the law requires.
The service is intended for businesses and professionals and is not directed at children.
We may update this policy; the current version is always available here, with the date shown above.
Data protection enquiries: admin@arc-squared.com.