Privacy Policy

1. Introduction

Welcome to Archways ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS management platform.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide to us, including but not limited to:

• Name and contact information (email address, phone number)
• Account credentials
• Organization details
• Payment information (processed securely through our payment providers)
• Communications you send to us

2.2 Usage Information

We automatically collect certain information when you use our services:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and preferences
• Performance data

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session
• Remember your preferences
• Analyze usage patterns (with your consent)
• Provide customer support (with your consent)

3. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Process transactions and manage subscriptions
• Send important service updates and notifications
• Respond to your requests and provide customer support
• Improve and personalize our services
• Ensure security and prevent fraud
• Comply with legal obligations
• With your consent, send marketing communications

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

• Contract: To provide our services and fulfill our agreement with you
• Legitimate Interests: To improve our services, ensure security, and conduct business operations
• Consent: For marketing communications and analytics
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties that help us operate our business (e.g., Supabase for data storage, Clerk for authentication, Vercel for hosting)
• Analytics Providers: PostHog for product analytics (with your consent)
• Customer Support: Intercom for customer communications (with your consent)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data
• Withdraw Consent: Where processing is based on consent

To exercise these rights, please contact us at privacy@archways.ai

8. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When determining retention periods, we consider:

• The duration of our relationship with you
• Legal and regulatory requirements
• The nature of the data collected
• Potential legal claims

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions
• Other lawful transfer mechanisms

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Cookie Policy

We use the following types of cookies:

• Necessary Cookies: Essential for website functionality
• Analytics Cookies: Help us understand usage patterns (requires consent)
• Marketing Cookies: Used for customer support and communications (requires consent)

EU users will be presented with a cookie consent banner to manage their preferences.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

For EU residents: You have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your personal data appropriately.