Privacy Policy

1. Information We Collect

Information You Provide

• Account information (name, email address, password)
• Organization and company name
• Billing information processed via Stripe (we do not store credit card numbers on our servers)
• CRM data you connect or upload (pipeline, forecasts, transcripts, deal information)
• Integration credentials for connected services (Salesforce, HubSpot, Gong, etc.), encrypted at rest using AES-256-GCM
• Support communications via email

Information Collected Automatically

• Usage patterns including utility runs, features accessed, and interaction data
• Device and browser information, IP address
• Authentication cookies required for session management

Information from Third Parties

• Google OAuth authentication provides name, email, and profile identifier only
• Data synced from your connected CRM and call intelligence platforms

2. How We Use Your Information

• Operate, maintain, and improve the Service
• Process payments and manage subscriptions
• Generate AI-powered analyses, reports, and recommendations
• Send transactional notifications (account updates, billing confirmations)
• Monitor and debug service performance
• Develop new features and improve existing capabilities
• Respond to support requests
• Enforce our Terms of Use and Purchase Terms

3. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers: Vercel (hosting), Supabase (database and authentication), Stripe (payments), Anthropic (AI processing), Inngest (background jobs)
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing (e.g., shared reports via share links)

4. AI Data Processing

Your CRM data, transcripts, and uploaded files are processed by AI models (Anthropic Claude) to generate analyses and recommendations. This data is sent to Anthropic's API for processing and is subject to Anthropic's privacy practices. We do not use your data to train AI models. Processed outputs are stored in your account and are accessible only to you and users you explicitly share them with.

5. Data Security

• Passwords are hashed using bcrypt
• Integration tokens encrypted with AES-256-GCM
• All data transmitted over HTTPS/TLS
• User-level data isolation at the database query level
• Shared reports protected by token-based access with optional password protection

6. Data Retention

Account data is retained while your account is active. Utility run outputs and uploaded data are retained for the duration of your account. Upon account deletion, your data will be removed within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

7. Your Rights

• Access and update your account information via Settings
• Delete your account and associated data by contacting support
• Disconnect CRM integrations and revoke access at any time
• Opt out of non-essential communications

California residents and individuals in the EEA/UK may have additional rights under applicable data protection laws (CCPA, GDPR). To exercise these rights, contact us at the address below.

8. Cookies

We use essential cookies for authentication and session management. Third-party services (Stripe, analytics) may set additional cookies. We do not use cookies for advertising.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy, contact us at support@tryarchway.ai.