Privacy Policy

Arc-Tec Ledger (“we”, “us”) is a project decision-and-handoff ledger operated from India, in private pilot. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have. We act as a Data Fiduciary under India's DPDPA 2023 and as a Data Controller for the purposes of the EU GDPR where applicable.

We collect only what is necessary to operate the Service:

• Account data — email, name, profile image, via Clerk authentication (Google, GitHub, or email).
• User Content — workspaces, blueprints, work items, decisions, comments, and the ledger entries they generate.
• Usage data — pages visited, features used, actions taken, timestamps.
• Device data — browser type, OS, screen size, IP address.

We do not collect payment data — no paid plans are active during the pilot.

• Contract — to deliver the Service you signed up for.
• Legitimate interest — to secure, improve, and debug the Service.
• Consent — for optional features.
• Legal obligation — to comply with tax, audit, and law-enforcement duties.

• Provide, maintain, and improve the Service;
• Authenticate users and secure accounts and workspaces;
• Route notifications to the right people based on the workspace you configure;
• Respond to support requests;
• Detect and prevent abuse, fraud, and security incidents;
• Comply with legal obligations.

We do not sell your personal data and we do not use your data for advertising.

We rely on vetted sub-processors, each handling data only for the purpose stated:

• Clerk (USA) — authentication, session management.
• Convex (USA) — database, serverless functions.
• Vercel (USA) — hosting, edge network, deployment logs.

International transfers are protected by Standard Contractual Clauses or equivalent safeguards where required.

We retain account data and User Content for as long as your account is active. On account deletion, User Content is deleted within 30 days; backups may persist for up to 90 additional days before permanent erasure. Ledger entries are, by design, not individually deletable while a workspace exists — deleting an entire workspace removes its ledger along with everything else in it.

• All traffic is encrypted in transit (TLS 1.2+).
• Data at rest is encrypted by our hosting providers (Convex, Vercel).
• Passwords are never stored by us — authentication is handled by Clerk.

If we learn of a data breach affecting you, we will notify you and the relevant authorities within 72 hours as required by law.

Subject to applicable law (DPDPA 2023, GDPR, CCPA), you have the right to access, correct, erase, and port your data, and to object to or restrict certain processing. To exercise any of these rights, email support@arc-tec.co.in. We respond within 30 days.

We use strictly necessary cookies and localStorage for authentication and session management. We do not use advertising or tracking cookies.

The Service is not directed at children under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy. Material changes will be notified in-app or by email at least 14 days before they take effect.

Privacy questions or requests? Email support@arc-tec.co.in. See also our Terms of Service.