Privacy Policy

Last updated: March 20, 2026

1. Introduction

Arc Stack Inc. (“Arc Stack”, “we”, “us”, or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer engagement platform, website, and related services (collectively, the “Service”).

This policy applies to businesses using the Arc Stack dashboard (“Customers”), end users interacting via the embeddable chat widget (“End Users”), and visitors to our website.

2. Information We Collect

2.1 Information You Provide

Account information: Name, email address, company name, and password when you create an account
Billing information: Payment details processed through our third-party payment provider
Communication data: Messages, conversations, and files exchanged through the Service
Support data: Information you provide when contacting our support team

2.2 Information Collected Automatically

Usage data: Pages visited, features used, actions taken, and timestamps
Device information: Browser type, operating system, device type, and screen resolution
Network information: IP address, approximate location, and referring URL
Cookies and tracking: Session identifiers and preferences stored via cookies and similar technologies

2.3 Information from End Users

When End Users interact with the Arc Stack chat widget on a Customer’s website, we may collect the End User’s name, email (if provided), messages, browser and device information, and session data. This data is processed on behalf of the Customer.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process transactions and manage your subscription
Send transactional communications (account verification, billing notices, support responses)
Analyze usage trends to improve user experience and product features
Detect and prevent fraud, abuse, or security incidents
Comply with legal obligations

We do not sell your personal information to third parties.

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

Service providers: Third-party vendors who assist with hosting, payment processing, analytics, and customer support (e.g., AWS, Clerk, Helcim)
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction
Legal requirements: When required by law, subpoena, or government request, or to protect the rights, property, or safety of Arc Stack, our users, or others
With your consent: When you explicitly authorize us to share information with a third party

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may retain certain information after account deletion as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes.

Conversation data processed on behalf of Customers is retained in accordance with the Customer’s account settings and subscription plan. Customers may request deletion of their data by contacting us.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain session state, remember preferences, and analyze how the Service is used. You can control cookie settings through your browser. Disabling cookies may affect the functionality of the Service.

We use essential cookies required for the Service to function and analytics cookies to understand usage patterns. We do not use advertising or behavioral tracking cookies.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information, subject to legal retention requirements
Portability: Request a machine-readable copy of your data
Withdraw consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, contact us at privacy@arcstack.ca. We will respond within 30 days.

9. Canadian Privacy Law (PIPEDA)

Arc Stack complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We collect personal information only for identified purposes, with your knowledge and consent. You have the right to access your personal information held by Arc Stack and to challenge its accuracy.

10. International Data Transfers

Our Service is hosted on infrastructure located in the United States and Canada. If you are accessing the Service from outside these countries, your information may be transferred to, stored, and processed in a jurisdiction with different data protection laws. By using the Service, you consent to such transfers.

11. Children’s Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

12. Third-Party Services

The Service may contain links to or integrations with third-party services (e.g., Shopify, WhatsApp, ShipStation). This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party service you use in conjunction with Arc Stack.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. Data Processing on Behalf of Customers

When Customers use Arc Stack to communicate with their End Users, Arc Stack acts as a data processor on behalf of the Customer (data controller). Customers are responsible for ensuring that their collection and use of End User data through the Service complies with applicable privacy laws, including obtaining any necessary consents.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Arc Stack Inc.
Email: privacy@arcstack.ca