Privacy Policy
Effective date: 2026-07-03. Data controller: TTQ Bartłomiej Kapuściński, Poland.
1. What we collect
- Account & identity: your email address, a password (stored only as a hash), your display name, and the legal entity your account belongs to, including the entity's business details (name, VAT number, address) where you provide them.
- Verification: one-time codes sent to your email or phone to verify those channels.
- Billing: your credit balance and a record of purchases and usage, including the VAT determination and country evidence for each purchase, retained as long as tax law requires.
- Operational data: the agents and workloads you deploy and the data they process on your behalf.
2. Why we use it
To operate your account and entity, provide and bill for the platform, verify your contact channels, meet tax and accounting obligations, and keep the service secure and reliable. We do not sell your personal data, and we do not use advertising.
3. Where it lives
Arcantos is self-hosted. Identity and credentials are held by our identity service; application data and the billing ledger are held by our application-data service; both run on our own infrastructure. Payment card details, when card payments are enabled, are handled by our payment processor and are not stored by us.
4. Retention
Account and billing records are kept for as long as your account is active and thereafter as required by law (tax records are kept for the statutory retention period). Agent data follows the retention rule in our Terms: a deployment suspended for non-payment is retained for up to 30 days and then permanently deleted.
5. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Some data must be retained where the law requires it (for example, issued invoices). To exercise these rights, contact us.
6. Sharing
We share personal data only with processors necessary to run the service (for example, a payment processor and an outbound email provider) and where required by law. Any third-party model endpoints you choose to connect to your agents are outside our control and governed by that provider's terms.
7. Contact
Privacy enquiries: legal@arcantos.ai.