Back to home

Arcli Privacy Policy

Last updated October 7, 2026

Arcli helps businesses research potential prospects and relevant public conversations. This policy explains what we collect, why we use it, who we share it with, and how to ask us to remove public-source content.

  • We collect what we need to run your account: your email, your website and matching brief, billing status, and technical logs. Card details go to our payment provider, not to us.
  • We also collect limited content from selected public sources (a post’s text, public handle, link, and time) to judge whether it is relevant to a customer. We keep it for 30 days by default.
  • We do not sell personal information, build advertising profiles, collect private messages or contact details, or send outreach to anyone.
  • If a public post or account of yours appears in Arcli, you can ask us to remove it and stop collecting it.
  • You can ask to see, correct, export, or delete your information at any time.

This summary is here to help you find your way around. It does not replace the full text below.

1. Who we are and what this covers

This policy applies to arcli.tech, the Arcli dashboard, and related services (the “Service”). Arcli is operated by an individual sole proprietor (“Arcli”, “we”, “us”), who decides how the information described here is used. For any privacy question or request, contact support@arcli.tech.

It covers two groups of people: customers and visitors who use the Service, and people whose public posts may be collected from supported public sources. If you are in the second group, the section on public-source data is written for you.

Customers decide for themselves how they use a result after reviewing it. They are separately responsible for their own outreach, CRM, and legal obligations.

2. Information we collect

Account and workspace information. Your email address, authentication details, workspace name, role, and settings; your website URL; and the product description, matching brief, review decisions, feedback, and notes you provide.

Billing information. Our payment provider collects your card and billing details. We receive a customer and subscription identifier, your plan, its status, and billing dates. We do not receive or store your full card number.

Your public website. When you submit a website, we read its public pages to prepare your brief.

Pilot applications. If you request a coverage review, we collect your email, company website, a description of your offer and ideal customer, and any buyer-role or geography details you provide. We also keep a limited, pseudonymous rate-limit identifier to prevent abuse.

Selected public-source information. Limited content from supported public sources: a public post’s title and text, public handle, link, source name, and publication time. See the section on public-source data.

Usage and technical information. Logs needed to operate, secure, rate-limit, and troubleshoot the Service, such as IP address, browser and device type, pages requested, and timestamps. We also record aggregate product usage, such as a result being opened or marked done. These usage events never include post text, authors, or links.

Messages you send us. The content of support emails and privacy or removal requests, and the address you send them from.

Integrations. If you connect an integration, such as a CRM webhook, we store the connection details you provide and send it only what you choose to send.

3. How we use information and why

We use information only for the purposes below. Where the law requires a legal basis, the one we rely on is shown beside each purpose.

Providing the Service
Creating and securing accounts, preparing your brief, retrieving and evaluating public discussions, showing results, and answering support requests. Basis: performing our contract with you.
Billing
Starting trials, processing subscriptions, and keeping payment records. Basis: performing our contract and meeting legal obligations.
Public-source matching
Collecting and assessing limited public posts for relevance to a customer’s product. Basis: our and our customers’ legitimate interests in researching public discussion, balanced by the safeguards described below.
Security and abuse prevention
Rate limiting, detecting misuse, investigating incidents, and enforcing our Terms. Basis: legitimate interests and legal obligations.
Improving the Service
Understanding in aggregate which features are used and where results are unhelpful. Basis: legitimate interests.
Optional result emails
Sending website-brief and scan-result emails if you turn them on. Basis: your consent, which you can withdraw in Settings at any time.
Pilot applications
Assessing source coverage, deciding whether a pilot is suitable, replying to you, and agreeing scope. Basis: steps taken at your request before a contract.

We use your account email for sign-in, recovery, security, billing, and other messages needed to operate your account. Applying for a pilot does not create a paid subscription or opt you into marketing emails.

We do not sell personal information, use it for advertising, or use public-source personal data to train Arcli models. We do not make decisions about a person that have legal or similarly significant effects using automated processing alone.

4. AI-assisted processing

To prepare a brief, assess relevance, and draft a suggested, human-editable reply, we send content to an AI service provider: your website content and matching brief, and limited public post text. The provider processes it on our behalf to operate the Service.

A match is a suggestion, not a fact about a person or a recommendation to contact them. Customers must review it, use the original public link, and make their own decision.

5. Who we share information with

We share information only with service providers that help us run the Service, and only what each one needs. The providers we currently use are:

Supabase
Database and account authentication.
Vercel
Hosting of the website and dashboard, and cookieless usage analytics.
DigitalOcean
Hosting of our API and background processing.
Cloudflare
Network security and content delivery.
OpenAI
AI-assisted analysis and drafting, as described above.
Firecrawl
Reading the public pages of the website you submit.
Resend
Delivering emails. It receives the destination address and the message content.
Dodo Payments
Payment processing as merchant of record. It handles your payment details under its own privacy policy.

We may also disclose information where the law requires it, to protect people or the Service from harm or misuse, or to a successor if the business is reorganised or sold, in which case this policy continues to apply to information already collected.

Results that customers see include the public post’s text, public handle, and link, since reviewing the original source is the purpose of the Service. We do not sell or rent personal information to anyone.

6. Public-source data and people who are not customers

Arcli looks at selected public discussions so that a business can find conversations about problems its product may solve. If you posted publicly on a supported source, a limited copy of that post may be collected and shown to a customer for whom it appears relevant.

Sources. We collect only from configured public sources through their public interfaces. These currently include public discussion and developer platforms such as Hacker News, Stack Exchange, GitHub, Bluesky, Lemmy, and X. The list changes over time.

What we take. A post’s title and text, public handle, link, source name, and publication time.

What we do not take. Private accounts, private groups, direct messages, profile biographies, or contact-enrichment data. We redact clear email addresses and telephone numbers from text before storage, and exclude posts that clearly concern minors or sensitive personal topics.

How it is used. Only to assess whether the discussion may be relevant to a customer’s product and to show that customer the source. We do not contact authors. Any contact a customer makes is their own separate, human decision.

Notice. We do not hold contact details for authors, and obtaining them only to send a notice would mean collecting more personal data. We publish this policy instead.

Removal. If a public post or account of yours should not appear in Arcli, use our public-source data removal form or email support@arcli.tech with the public link. We confirm requests before acting, to protect people from fraudulent removals. Once a request is verified and completed, we delete matching records and suppress future collection of the same public post, handle, or link where technically possible.

7. How long we keep information

Public-source content
30 days by default. When that period ends we delete the record and the related copies in lead briefs and buyer-language research.
Account and workspace data
For as long as the account is active. After a verified request to close the account, we delete or anonymise it within 30 days.
Billing records
For as long as tax, accounting, and dispute-handling rules require. Our payment provider keeps its own records under its own policy.
Removal requests
90 days after a request is resolved, we anonymise the requester’s email, rate-limit identifier, and free-form explanation. We keep only the suppression identity needed to avoid collecting the same item again.
Result-email records
Delivery and preference records are kept for 90 days to honour your choice, troubleshoot delivery, and prevent duplicate messages.
Pilot applications
180 days, unless the applicant becomes a customer or asks us to delete it sooner.
Technical logs
A limited period needed for security, troubleshooting, and abuse prevention.

We may keep a small amount of information for longer where it is needed for security, to handle a dispute, or to meet a legal obligation.

8. Your privacy rights

Depending on where you live, you may have the right to:

  • ask what information we hold about you and receive a copy of it;
  • have inaccurate information corrected;
  • have your information deleted;
  • object to or restrict how we use it, including our use of public-source content about you;
  • receive information you gave us in a portable format;
  • withdraw a consent you gave, without affecting what was done before;
  • complain to the data protection authority where you live.

To use any of these rights, email support@arcli.tech. We may need to verify your identity before acting. We respond within one month, or tell you if we need longer where the law allows it. We do not charge for a request or treat you differently for making one.

California residents. We do not sell personal information or share it for cross-context behavioural advertising, and have not done so in the past 12 months. The categories we collect, their sources, and their purposes are described above.

9. Email choices

Optional website-brief and scan-result emails are off until you turn them on in Settings, and you can turn them off there at any time. They report only website hosts and aggregate outcomes and contain no promotions.

Turning them off stops future result messages and causes pending, unsent notifications to be skipped. An email already being sent cannot be recalled. If you change your account email, you must enable result emails again for the new address.

Account, security, and billing messages are separate, because we need them to run your account.

10. Cookies and analytics

We use only the cookies and browser storage needed to run the Service, and cookieless analytics that do not track you across other sites. Our Cookie Policy lists them.

11. International processing

Arcli and its providers process information in countries other than your own, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses agreed with the provider.

12. Security

We use technical and organisational measures designed to protect information from unauthorised access, loss, or misuse. These include encrypted connections to the Service, access rules that confine each workspace to its own data, limited operator access, and minimising and redacting public-source content before it is stored. Our security practices page describes the boundaries of the product.

No system is completely secure. If a security incident is likely to affect you, we will tell you and the relevant authorities as the law requires.

13. Children and sensitive information

Arcli is a business service and is not directed to children or intended for anyone under 18. Customers must not use the Service to target, profile, or contact minors.

We also prohibit using Arcli to target people on the basis of sensitive personal data, including health, religion, ethnicity, political views, sexual orientation, gender identity, or disability.

14. Changes and contact

We may update this policy when the Service, our providers, or legal requirements change. The date at the top shows the latest version, and we will tell customers by email or in the dashboard before a change that materially affects how we use their information.

Questions and requests can be sent to support@arcli.tech.

See also: Terms of Service · Cookie Policy · Removal request form