Privacy Policy
This Privacy Policy explains how Arch Security ("Arch", "we", "us" or "our") collects, uses and shares personal information when you sign in to and use the Arch Security platform and related services (the "Service").
1. Information we collect
- Account information. When you sign in, we receive your email address and, if you provide it, your name.
- Google account profile. If you choose to sign in with Google, Google shares your basic account profile with us, such as your name and email address.
- Support messages. When you send a message from the "Contact Arch" form in the Service, we receive your message, your name, your email address and your organization, so that our support team can answer you.
- IP address and request logs. When you use the Service, our systems record technical information about each request, including your IP address, the date and time of the request, the address requested and your browser type.
2. How we use information
We use personal information to:
- sign you in, keep your account secure and provide the Service;
- operate, maintain, troubleshoot and improve the Service;
- detect, investigate and prevent security incidents, fraud and abuse;
- communicate with you about the Service, for example to send service notices or to answer your requests; and
- comply with our legal obligations.
3. Cookies
We use cookies that are needed to sign you in and to keep your session secure. We do not use cookies for advertising.
4. How we share information
We do not sell personal information. We share it only in these cases:
- Service providers. Providers that process personal information for us so that we can run the Service: a sign-in provider that authenticates users for us, a cloud hosting provider that runs our infrastructure, and a team messaging provider where our support team receives the messages you send from the "Contact Arch" form.
- Your organization. If you use the Service as a member of an organization, that organization's administrators can see your name and email address.
- Legal reasons. When the law requires it, or when it is needed to protect the rights, property or safety of Arch, our users or others.
- Business transfers. As part of a merger, acquisition or sale of all or part of our business, in which case this Privacy Policy continues to apply to the information.
5. Information that organizations bring into the Service
Organizations that use the Service decide which of their systems to connect and what information to bring into it. We process that information on the organization's behalf, to provide the Service to it. If you have a question about that information, please contact the organization first.
6. Retention
We keep personal information for as long as your account is active or as needed to provide the Service. After that, we keep it only as long as we need it to meet our legal, security and accounting obligations.
7. Security
We use technical and organizational measures designed to protect personal information, including encryption in transit. No system is completely secure, so we cannot guarantee the security of information.
8. International processing
We and our service providers may process personal information in countries other than the one where you live.
9. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict some processing of it. To make a request, email privacy@arch.security. We may need to verify your identity before we respond. If your organization manages your account, we may refer your request to it.
10. Children
The Service is designed for businesses and is not directed to children. We do not knowingly collect personal information from children.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and change the effective date above. If a change is material, we will give reasonable notice before it takes effect.
12. Contact
Questions or requests about this Privacy Policy can be sent to privacy@arch.security.