Arcandel, LLC builds security awareness tools and threat intelligence platforms. This policy explains how we handle data across our products, services, and website.
Scope
This policy applies to the Arcandel website (arcandel.com) and any Arcandel products or services unless a product has its own specific privacy policy. For product-specific policies, see the links at the bottom of this page.
What We Collect
Website visitors
When you visit our website, we collect minimal data:
- No cookies for tracking or analytics
- No third-party trackers
- Standard server logs (IP address, browser type, pages visited) retained for security purposes only
Product users
Each Arcandel product has its own data practices tailored to its function. Common principles across all products:
- Local-first: Most user data stays on your device
- Privacy-respecting analytics when used (opt-out available)
- No selling of user data
- Optional accounts for sync features only
Contact and inquiries
If you contact us via email, we collect the information you provide (email address, message content) to respond to your inquiry. We retain correspondence for support and legal purposes.
How We Use Data
- To provide and improve our products and services
- To respond to inquiries and support requests
- To detect and prevent security issues
- To comply with legal obligations
We don't use your data for profiling, behavioral targeting, or selling to third parties.
Data Sharing
We may share data with:
- Service providers who assist in operating our products (hosting, analytics, payment processing)
- Legal authorities when required by law or to protect rights and safety
We do not sell personal information.
Data Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), secure storage practices, and access controls. No system is perfectly secure, but we take reasonable precautions to protect your data.
Data Retention
We retain data only as long as necessary for the purposes described in this policy or as required by law. Server logs are retained for up to 90 days. Contact correspondence is retained for up to 3 years unless you request deletion.
Your Rights
Depending on your jurisdiction, you may have rights to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to certain processing
- Export your data in a portable format
To exercise these rights, contact us at privacy@arcandel.com.
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. You may request to know what personal data we have collected and request its deletion by emailing privacy@arcandel.com. We will respond to verified requests within 45 days.
International Transfers
Arcandel is based in the United States. If you access our services from outside the US, your data may be transferred to and processed in the United States. By using our services, you consent to this transfer.
Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to This Policy
We may update this policy occasionally. Material changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance.
Contact
Questions about this policy? Email us at privacy@arcandel.com.