Arca

Privacy Policy

Last Updated: November 2025

Our Commitment to Privacy

Arca is built on the principle that your data is yours. We provide infrastructure for private data storage, but we fundamentally believe in user ownership and control of personal information.

1. Data We Collect

Account Information

When you create an Arca account, we collect:

  • Email address (required for authentication)
  • Name (optional)
  • Authentication credentials (managed securely by WorkOS)

Your Vault Data

All data stored in your Arca vault is yours:

  • Structured data (tables, skills)
  • Vector embeddings and semantic memories
  • AI-generated skill documentation

This data is stored in an isolated namespace specific to your account and is not shared, analyzed, or used for any purpose other than providing you service.

Usage Information

We collect minimal usage data to operate the service:

  • API request logs (for debugging and security)
  • Error logs (to improve service reliability)
  • Basic analytics (page views, feature usage)

2. How We Use Your Data

We use your information only to:

  • Provide and maintain your Arca vault
  • Authenticate your access to your data
  • Process API requests from authorized AI assistants
  • Improve service reliability and performance
  • Send essential service communications
  • Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Storage and Security

Your vault data is stored in AWS S3 with the following protections:

  • Isolation: Each user has a dedicated storage namespace
  • Encryption: Data is encrypted at rest and in transit
  • Access control: Short-lived credentials limit exposure
  • Exportability: You can export your data in standard formats at any time

4. Third-Party Services

Arca uses the following third-party services:

  • WorkOS: Authentication and user management
  • AWS: Data storage infrastructure
  • OpenAI: Embedding generation for vector storage (your content is not used for training)

5. Your Rights

You have the right to:

  • Access all data stored in your vault
  • Export your data in standard formats (Parquet, CSV, LanceDB)
  • Delete your data and account at any time
  • Revoke AI assistant access to your vault
  • Request information about how your data is used

6. Data Retention

We retain your data as long as your account is active. Upon account deletion, we will:

  • Delete your vault data from active storage within 30 days
  • Remove data from backups within 90 days
  • Retain minimal logs as required by law

7. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through the Arca dashboard.

8. Contact Us

If you have questions about this privacy policy or your data, contact us at:

Email: privacy@arca.build