Privacy Policy

When you run an audit on Arcus, we collect the domain string you submit, plus standard request metadata (user-agent, approximate region, timestamp). When you request an invoice, we collect your email address and company / domain name.

We do not ask for credit card numbers, government IDs, or passwords. Payment happens off-platform via Payoneer.

We use the information you provide to:

• Generate the audit you requested and store the result in your workspace.
• Send you the Payoneer invoice and any project communication you opted into.
• Improve the product with aggregate, anonymised usage analytics.

We never sell personal information, and we never use it for unrelated marketing.

To deliver the service we rely on the following providers:

• Supabase — Postgres database and authentication.
• Google AI Studio (Gemini) — receives only the domain string for audit generation.
• Resend — transactional email delivery.
• Vercel / Cloudflare — edge hosting and CDN.

Each sub-processor is bound by their published Data Processing Agreement.

Audit records are retained indefinitely so you can compare progress over time. You can request deletion of any audit or order record at any time by emailing business@vaarcus.com; we will remove it within 30 days.

If you are in the EU, UK, California, or any other jurisdiction with comparable rights, you may request access, correction, portability, or deletion of your personal information. We will respond within 30 days, and we never charge a fee for first-party requests.

We use cookies and localStorage only for functional purposes — remembering you dismissed the install prompt, persisting theme settings. No third-party advertising cookies, no cross-site tracking.

If we materially change this policy, we will update the Effective date above and email all active clients at least 14 days before the change takes effect.