Privacy Policy
Arc ("we", "us", "our"), operated by Good Morning Technologies GmbH (GmbH registered in Germany), cares deeply about the privacy of its visitors and users and would like to share the steps it takes to protect your personal information in compliance with applicable data privacy laws, in particular the EU General Data Protection Regulation ("GDPR"), where it applies.
This Privacy Policy describes:
- What information we collect
- How such information is collected
- On what legal bases we process your personal data (for users in the EEA/UK)
- How we use and share such information
- Where we store personal data and how long we retain it
- Your rights as a visitor or user of this site
- Our use of cookies and third-party services
Information may be collected at arc.so (the "Site"). Arc uses this information to deliver the services offered on the Site, to inform you of changes to the Site or your account, to enhance the Site, to prevent illegal or potentially prohibited conduct, and to enforce our Terms of Use (the "Terms"), which incorporate this Privacy Policy by reference.
Before you access or use any of our services, we encourage you to read the entire Privacy Policy. A short summary is below:
- We collect information related to your use of the Site.
- We use this information to provide and improve our services, comply with legal obligations, and protect our legitimate interests.
- You have the right to request access, correction, deletion, and other rights regarding your personal information, and you can contact us at [email protected].
1. Data Controller & Contact Details
For the purposes of applicable data protection laws, the data controller for processing your personal data via the Site is:
Good Morning Technologies GmbH
Legal form: GmbH
Registered address: Linienstr. 41, 10119 Berlin
Country of establishment: Germany
Commercial register / registration details: Registergericht: Berlin (Charlottenburg) - HRB 271522 B. Sitz der Gesellschaft: Berlin
Legal representative: Dmitry Monin
Email for privacy matters: [email protected]
If you have any questions about this Privacy Policy or our data practices, you can contact us at [email protected].
2. What Information We Collect
We collect two main categories of information from visitors and users of the Site.
2.1 Anonymous Information
Unidentified and non-identifiable information ("Anonymous Information") that does not enable us to identify the individual from whom it is collected. Such information mainly consists of technical and aggregated usage information, such as:
- Browser and device information
- Operating system
- General location (e.g., country or region)
- Usage data such as pages visited, actions taken, and time spent
2.2 Personally Identifiable Information ("PII")
Individually identifiable information, meaning information that can identify an individual or may, with reasonable efforts, lead to the identification of an individual ("PII"). This may include, for example:
- Name
- Email address
- User account details
- Communication content when you contact us
- Any other information you choose to provide via forms or interactions on the Site
Please note that your name or other profile information may be publicly available on the Internet when you use some features of the Site, such as user comments, forums, instant messaging, email, or social networking functions. Use your discretion when using these services. It is your responsibility to review what information you wish to share with members and non-members of the Site. You are solely responsible for any public content in your user profile.
You may review, amend, or delete information and content associated with your user account ("User Account") by signing in to your account on the Site. You may also request the deactivation of your User Account by sending an email to [email protected].
3. How We Collect Information
Arc collects information about you only if we have a reason for such collection, such as to provide the services, to communicate with you, or to improve our Site. Information is collected in the following ways:
3.1 Information Collected Automatically
When you visit the Site, certain information is automatically collected about your device and your use of the Site. This may include:
- Log data (e.g., IP address, browser type, referring/exit pages, date/time stamps)
- Usage data and interactions with the Site
- Limited device and connection information
This may be collected directly by us or through third-party service providers, and may involve the use of cookies or similar technologies. Learn more about cookies and third-party services in Section 10 below.
3.2 Information You Provide Directly
We collect information that you voluntarily provide to us, for example when you:
- Create or update a User Account
- Fill out forms on the Site
- Subscribe to any mailing lists (if offered)
- Contact us via email or other communication channels
- Participate in surveys, feedback, or similar interactions
3.3 Information Obtained from Outside Sources
We may receive information about you from third-party services that you choose to connect to our Site (where applicable), or from service providers that assist us with infrastructure, email delivery, or related services, in accordance with their terms and your settings with them.
4. Legal Bases for Processing (GDPR / EEA & UK Users)
Where the GDPR or equivalent data protection laws apply (for example, if you are located in the EU/EEA or the UK), we rely on one or more of the following legal bases to process your personal data:
Contract performance
To provide the services you requested, operate the Site, manage your User Account, and perform our obligations under the Terms.Legitimate interests
To operate, protect, and improve our services; to prevent fraud and misuse; to secure our systems; and to understand how the Site is used, provided that these interests are not overridden by your rights and interests.Consent
Where required by law (for example, for certain marketing communications or optional features), we may rely on your consent. You have the right to withdraw your consent at any time.Legal obligations
To comply with legal obligations, regulatory requirements, or lawful requests from public authorities.
5. Why We Use Information (Purposes of Processing)
We use Anonymous Information and PII so that Arc may provide and improve the services on the Site. This includes, but is not limited to:
- Providing and operating the Site and related services
- Managing your User Account and authentication
- Communicating with you, including service-related messages and responses to your inquiries
- Providing customer assistance and technical support
- Adapting and improving the Site and our services based on usage and feedback
- Creating aggregated statistical data from Anonymous Information which Arc or its partners may use to provide or improve their respective services
- Monitoring and enhancing data and fraud security capabilities
- Complying with applicable laws and regulations
Arc will not sell, license, rent, or otherwise disclose your PII except as stated in this Privacy Policy, or under the following circumstances:
- You have given your consent.
- We previously notified you of the disclosure in this Privacy Policy or when you provided your information on the Site.
- We are compelled by law, legal process, or court order to disclose.
- Disclosure is required to identify, contact, or bring legal action against someone who may cause harm to, or interference with, Arc's rights or property, our users, or anyone else.
- To respond to an inquiry, request, or complaint that you have made.
Arc may cooperate with internet service providers and other third parties to identify users whenever required to comply with law, to enforce compliance with this Privacy Policy or the Terms, or to protect the Site, our customers, and others.
6. Where We Store Data & International Transfers
6.1 Hosting in the EU
We store most of the data related to the Site on servers provided by our hosting provider located in the European Union (for example, infrastructure hosted on a Hetzner instance within the EU). This means that your data is generally processed and stored within the EU/EEA.
6.2 Use of Google Cloud Services
We also use certain Google Cloud services (for example, for infrastructure, storage, or related technical operations). Depending on the specific service and configuration, this may involve processing within the EU/EEA and, in some cases, may involve transfers of personal data to other countries.
Where personal data is transferred to a country outside the EU/EEA that does not provide an adequate level of data protection, we take appropriate safeguards to protect your personal data in accordance with applicable data protection laws (for example, by relying on standard contractual clauses where appropriate, or other legally recognized transfer mechanisms).
6.3 Email Delivery via Postmark App Service
For sending transactional emails (such as account-related notifications, password reset emails, or other service-related communications), we use the Postmark App Service (a third-party email delivery provider). This may require transferring your email address and relevant message content to this provider, which may process data in countries outside the EU/EEA.
Where required by law, we take steps to ensure that such transfers provide an adequate level of protection for your personal data, in line with applicable data protection requirements.
6.4 Security Measures
Arc uses industry-standard technologies to safeguard your data (both Anonymous Information and PII) from unauthorized use and disclosure and to help prevent security breaches of the Site. These measures may include encryption, access controls, and technical safeguards.
However, no website, computer system, or online communication is completely secure. Arc cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. Your use of the Site is at your own risk.
7. Retention of Personal Data
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of:
- Providing and maintaining our services
- Complying with legal, accounting, or reporting obligations
- Resolving disputes and enforcing agreements
In determining the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements.
When we no longer need personal data for the purposes for which it was collected, we will either delete or anonymize it. If deletion is not possible (for example, because the data is stored in backup archives), we will securely store the data and isolate it from any further processing until deletion is possible.
8. Your Rights (Including GDPR Rights)
Upon written request, Arc will provide you with information about whether we hold any of your PII. You may access, correct, or request deletion of your PII by emailing [email protected]. We will respond to your request within a timeframe imposed by local laws or, where no specific timeframe is imposed, within a reasonable time.
If you are located in countries that fall under the scope of the GDPR or similar data protection laws, you may have the following rights, subject to statutory conditions and exemptions:
- Right of access – to obtain confirmation as to whether or not we process your personal data and, if so, to access it.
- Right to rectification – to request correction of inaccurate or incomplete personal data.
- Right to erasure – to request deletion of your personal data in certain circumstances ("right to be forgotten").
- Right to restriction of processing – to request that we limit the processing of your personal data in certain circumstances.
- Right to data portability – to receive the personal data you provided to us in a structured, commonly used, and machine-readable format and have it transmitted to another controller where technically feasible.
- Right to object – to object to certain processing activities based on our legitimate interests, and to object at any time to the processing of your personal data for direct marketing purposes.
- Right to withdraw consent – where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint – to lodge a complaint with a supervisory authority, in particular in the EU/EEA Member State or UK where you live, work, or where an alleged infringement of data protection law has occurred.
Arc strives to respect these rights for all visitors and users, where applicable. To exercise any of these rights, please contact us at [email protected].
Please note that permanently deleting your Arc User Account erases all of your information from our system. After completing this process, your User Account and all its data will be removed permanently, and Arc will not be able to restore your User Account or retrieve your data in the future.
9. Cookies and Similar Technologies
9.1 Current Use of Cookies
As of now, the Site does not use any non-essential cookies and does not use Google Analytics, Meta (Facebook) Pixel, or similar marketing or analytics tracking cookies. Because only strictly necessary cookies (if any) are used, we are currently exempt from the requirement to obtain user consent for non-essential cookies.
However, this may change in the future. If we begin using non-essential cookies or similar technologies, we will update this Privacy Policy and, where required by law, will obtain your consent before placing such cookies.
9.2 General Information About Cookies
Some features on the Site may contain "cookies" or similar preference-tracking technologies. A cookie is a small data file stored by your internet browser, provided that your computer or device is set to accept cookies. Cookies can help improve the user experience by, for example:
- Remembering your preferences
- Helping us understand how you use the Site
- Improving performance and security
Most modern internet browsers allow you to change your settings to:
- Prevent the storage of new cookies
- Receive warnings before cookies are stored
- Delete existing cookies
Please review your browser’s instructions for more information. Be aware that if you disable cookies, some portions of the Site may not function properly.
9.3 Third-Party Content and Links
The Site may embed or contain links to third-party websites or services. Similarly, third-party websites may link to or embed our Site. Arc cannot control and is not responsible for the privacy practices or content on any non-Arc websites. Arc is therefore not liable for your use of and exposure to such third-party websites and any content or advertisements they contain.
You should familiarize yourself with the privacy policies and terms of use of these third parties to better understand their information management policies.
Where permitted by local data laws, Arc may disclose or otherwise allow others to access your PII pursuant to a legal request, such as a subpoena, legal proceedings, search warrant, or court order, or in compliance with applicable law. If we have a good-faith belief that the law requires disclosure, we may disclose your PII, with or without notice to you.
10. Children and Privacy
This Site is not directed towards children under the age of 13. Arc, operated by Good Morning Technologies GmbH, recognizes the importance of maintaining the privacy of children, especially those under the age of 13.
Where US law applies, Arc is committed to complying with the Children’s Online Privacy Protection Act ("COPPA"), 15 U.S.C. § 6501 et seq. Where EU/EEA or UK law applies, we also take into account GDPR requirements concerning children’s data and local age thresholds for consent.
Except in limited circumstances allowed by COPPA, GDPR, or other applicable law, Arc does not and will not knowingly request, collect, store, maintain, or share any personally identifiable information of children under the age of 13 (or a higher age where required by local law) without first obtaining the consent of a legal guardian. In those limited instances, Arc will only collect reasonably necessary information and will not share with third parties any personally identifiable information of a child under the applicable age without the explicit consent of a legal guardian, or as permitted by law.
You may revoke your consent and request the removal of your child’s information at any time. If you are the legal guardian of a child under the applicable age threshold and discover that your child has submitted their personally identifiable information without securing your consent, Arc will use commercially reasonable efforts to remove this information. If at any point you wish to review, amend, or request the removal of your child’s information, please send an email to [email protected] and provide the name and account information for your child’s User Account.
11. Changes to This Privacy Policy
Arc may at any time, and in its sole discretion, add, modify, or remove any feature, function, or portion of the Site, the Terms, and/or this Privacy Policy, in whole or in part, with or without notice to you. Any changes to this Privacy Policy will be effective as of the posting date on the Site.
Arc will provide prominent notice on the Site of any major changes to this Privacy Policy, where required by law. Your continued use of the Site after Arc posts any modifications to this Privacy Policy shall be deemed your explicit acceptance of those modifications and shall constitute your agreement to comply with this Privacy Policy, as modified.
12. Contacting Us
If there are any questions regarding this Privacy Policy or our data practices, you may contact us using the information below:
Arc
Operated by Good Morning Technologies GmbH (GmbH)
Linienstr. 41, 10119 Berlin
Germany
Website: arc.so
Email: [email protected]
Last updated: 2025-12-11