Privacy Policy

We collect information you provide directly, information collected automatically, and information from third parties:

• Account information. Name, email address, password (stored as a salted hash — we never store plain-text passwords), and profile details you choose to provide.
• Billing information. Payments are processed by Stripe, Inc. We do not store full payment card numbers on our servers. We retain limited billing records such as your subscription plan, invoices, and payment status.
• Content you submit. Credit-related information you voluntarily enter (business details, goals, checklists), documents you upload to your encrypted Document Vault, credit report text or files you submit for AI analysis, and messages you send to our AI Credit Coach or contact forms.
• Usage data. Log data, device and browser type, IP address, pages viewed, feature usage, and diagnostic information collected via cookies and similar technologies, including product analytics.
• Communications. Support requests, contact form submissions, and email interactions.

• Provide, operate, maintain, and improve the Services.
• Create and manage your account, authenticate you, and secure the Services.
• Process subscriptions, payments, invoices, and billing through Stripe.
• Generate AI-powered outputs you request (e.g., report analysis, coaching responses, dispute letter templates). Your inputs are sent to our AI service providers solely to produce the requested output.
• Send transactional emails (account verification, password resets, receipts, service notices) and respond to your inquiries.
• Monitor usage, prevent fraud and abuse, and enforce our Terms of Service.
• Comply with legal obligations and maintain audit records.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

ArcaCentum Credit uses artificial intelligence to provide educational analysis and guidance. When you use AI features, the content you submit is transmitted to enterprise AI infrastructure providers under contractual confidentiality obligations to generate a response. AI outputs are informational and educational only — they are not financial, legal, or credit repair advice. We do not use your private content to train publicly available AI models.

We share personal information only with service providers who need it to operate the Services on our behalf:

• Stripe — payment and subscription processing (see Stripe's privacy policy at stripe.com/privacy).
• Email delivery providers — transactional email delivery.
• AI infrastructure providers — generation of AI outputs you request.
• Cloud hosting and storage providers — application hosting, database, and encrypted file storage.
• Analytics providers — aggregate product usage analytics.

We may also disclose information when required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case this policy will continue to apply to your information).

If you opt in to receive SMS (text) messages from ArcaCentum, we collect your phone number and your consent record solely to deliver the messages you requested. ArcaCentum, Inc. does not share mobile numbers, text messaging originator opt-in data, or consent with any third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services. Message and data rates may apply. You may opt out at any time by replying STOP to any message, and you may reply HELP for assistance or contact us at support@arcacentum.com.

We use cookies and local storage to keep you signed in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings; disabling them may affect functionality such as staying logged in.

• Documents uploaded to the Document Vault are encrypted at rest.
• Passwords are hashed with industry-standard algorithms; authentication uses signed, expiring tokens.
• All traffic between your browser and our servers is encrypted in transit (TLS/HTTPS).
• Access to production systems is restricted, and sensitive administrative actions are audit-logged.

No method of transmission or storage is 100% secure, but we work continuously to protect your information and will notify you of any breach as required by applicable law.

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations (e.g., tax and billing records), resolve disputes, and enforce agreements. You may request deletion of your account and associated data at any time by contacting support@arcacentum.com.

Depending on where you live (including under the California Consumer Privacy Act and similar U.S. state laws, and the GDPR if applicable), you may have the right to:

• Access, correct, or delete the personal information we hold about you.
• Receive a copy of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Not be discriminated against for exercising your rights.

To exercise any of these rights, email us at support@arcacentum.com. We will verify your identity and respond within the timeframe required by applicable law.

The Services are intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us personal information, contact us and we will delete it.

The Services are operated from the United States. If you access the Services from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes will be communicated by email or in-product notice. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.