Privacy Policy

1. Introduction

Arcwork ("we," "us," or "our") operates the Arcwork platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

We collect information you provide directly, such as when you sign up for an account, use the Service, or contact us:

• Account information (name, email, company name, job role)
• Pharmaceutical artwork files and associated metadata
• Workflow and approval data
• Communications you send to us

We also collect information automatically through your use of the Service, including IP address, browser type, pages visited, and timestamps.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send transactional and account-related emails
• Respond to your inquiries and customer support requests
• Monitor and analyze trends, usage, and activities
• Comply with legal obligations

4. Data Security

We implement administrative, technical, and physical security measures to protect your personal information:

• Encryption of data in transit (TLS) and at rest (AES-256)
• Role-based access controls (RBAC)
• SOC 2 Type II (in progress)

5. Data Retention

We retain personal information for as long as necessary to provide the Service and comply with legal obligations. Artwork files and compliance audit logs are retained for 7 years to meet regulatory requirements (FDA 21 CFR Part 11).

6. Sharing Your Information

We do not sell your personal information. We may share information with:

• Service providers who assist in operating our Service (hosting, analytics)
• Legal authorities if required by law
• Your organization's administrators if you are an organizational user

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Opt-out of marketing communications
• Data portability

To exercise these rights, contact us at founders@arcwork.app.

8. GDPR & Data Processing

For users in the EU/EEA, we comply with the General Data Protection Regulation (GDPR). We act as a data processor on behalf of our customers who control the artwork data. We are working to implement Standard Contractual Clauses for international data transfers.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at: