On this page
📅 Last updated: March 8, 2026 🌏 Applies to: buildwitharca.com and all Arca products ⚖️ Governed by: Australian law

Privacy Policy

The short version: We collect only what we need, we never sell your data, and we never use your content to train AI models. Your creative work is yours.

This Privacy Policy explains how Arca ("we", "us", or "our") collects, uses, and protects your personal information when you use our platform at buildwitharca.com. We are committed to protecting your privacy and handling your data transparently and responsibly.

By using Arca, you agree to the collection and use of information as described in this policy.

What We Collect

Information you provide directly

  • Account information: Your name, email address and password when you register
  • Payment information: Billing details processed securely by Stripe — we never store your full card number
  • Brand voice settings: Tone preferences, audience description and style settings you configure
  • Content you create: Prompts, chat messages, generated images, documents and voice recordings while using Arca

Information collected automatically

  • Usage data: Which tools you use, how often, and how long sessions last — used to improve the product
  • Device information: Browser type, operating system, IP address and referring URL
  • Cookies: Session cookies to keep you logged in, and analytics cookies (you can opt out)

How We Use Your Information

  • To provide, maintain and improve the Arca platform
  • To process payments and send billing receipts
  • To send transactional emails (account, billing, usage alerts)
  • To apply your brand voice settings across AI tools
  • To monitor usage against plan limits
  • To detect and prevent fraud or abuse
  • To respond to support requests
  • To send product updates — you can unsubscribe at any time

Who We Share Your Data With

We share your data only with the third-party services necessary to operate Arca:

  • Anthropic, OpenAI, Google, xAI, DeepSeek: Your prompts and messages are sent to these AI providers to generate responses. Each provider has their own privacy policy. We send only what is necessary to generate your response.
  • Stripe: Processes all payments. We do not store your card details.
  • Vercel: Hosts the Arca platform. Your data is stored on their infrastructure.
  • ElevenLabs: Processes voice and text-to-speech requests when you use Voice Studio.

⚠️ We never sell your personal data to advertisers, data brokers or any third party. We never have and never will.

AI & Your Content

🛡️ Your content is never used to train AI models. We have opted out of all AI provider training agreements where possible. Your prompts, outputs and documents belong to you.

When you use AI tools within Arca, your prompts are transmitted to the relevant AI provider (Anthropic, OpenAI, etc.) to generate responses. These providers process your data according to their own terms. We recommend reviewing their privacy policies if you handle sensitive information.

We do not retain copies of your AI conversations beyond what is needed to display your chat history within the app (which you can delete at any time).

Data Retention

  • Account data: Retained while your account is active and deleted within 30 days of account deletion
  • Chat history: Free plan — 30 days. Creator and Team plans — unlimited until you delete it
  • Generated images and documents: Stored while your account is active
  • Payment records: Retained for 7 years as required by Australian tax law
  • Usage analytics: Anonymised and retained for up to 24 months

Your Rights

Under the Australian Privacy Act 1988 and GDPR (for users in the EU), you have the right to:

  • Access the personal data we hold about you
  • Correct any inaccurate information
  • Delete your account and associated data
  • Export your data in a portable format
  • Opt out of marketing emails at any time
  • Object to certain types of data processing

To exercise any of these rights, email us at hello@buildwitharca.com and we will respond within 30 days.

Security

We take reasonable technical and organisational measures to protect your data:

  • All data transmitted between your browser and Arca is encrypted via HTTPS/TLS
  • Passwords are hashed using industry-standard algorithms — we cannot see your password
  • Payment data is handled entirely by Stripe and never passes through our servers in full
  • We conduct regular security reviews of our infrastructure

No system is 100% secure. If you discover a security vulnerability, please email hello@buildwitharca.com — we take all reports seriously.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data:

This policy was last updated on March 8, 2026. We will notify you by email if we make material changes.