Privacy Policy

Effective Date: April 27, 2026 · ArcosAI Inc., Ottawa, ON, Canada

Contents

01 Introduction

ArcosAI Inc. ("ArcosAI", "we", "our", or "us") is committed to protecting the personal information of our clients and users. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you access or use our platform, website, and related services (collectively, the "Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not access or use our Services.

02 Information We Collect

Information You Provide Directly

When you sign up for or use ArcosAI, we collect information you voluntarily provide, including:

• Full name and contact information (email address, phone number)
• Business name, website URL, and primary business location(s)
• Social media handles and review platform profile links
• Competitor names and market context provided during onboarding
• Billing information processed through our third-party payment processor, Stripe

Information from Third-Party Public Sources

To deliver our business intelligence services, we collect publicly available information from third-party platforms and directories, including:

• Publicly posted reviews from Google Business Profile, Yelp, Facebook, TripAdvisor, and similar platforms
• Public business listings, directories, and web search results
• Publicly available competitor information and market data

All third-party data we collect is publicly available and collected in accordance with the terms of service of the relevant platforms.

Automated Data Collection

At this time, ArcosAI does not use cookies, tracking pixels, web beacons, or third-party analytics tools on its website. If this changes in the future, this Privacy Policy will be updated accordingly and you will be notified.

03 How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your ArcosAI account and deliver our Services
• To generate AI-powered insights, reports, and recommendations tailored to your business
• To monitor and analyze publicly available reputation data, competitor activity, and market trends on your behalf
• To send you scheduled reports, alerts, and service-related communications
• To process payments and manage your subscription
• To improve, maintain, and optimize the performance of our platform
• To respond to your inquiries and provide customer support
• To comply with applicable legal obligations

We do not use your personal information for advertising purposes, and we do not sell your personal data to third parties.

04 Artificial Intelligence and Automated Processing

ArcosAI uses third-party artificial intelligence providers, including Anthropic (Claude) and OpenAI (ChatGPT), to process data and generate insights. When your business information or publicly available data is processed through these AI systems, it is used solely to produce outputs for your account.

We take reasonable steps to ensure that our AI providers maintain appropriate data handling standards. However, AI-generated outputs are provided for informational purposes only and should not be relied upon as professional legal, financial, or business advice. You retain full responsibility for any decisions made based on AI-generated insights.

05 Data Storage and International Transfers

ArcosAI is incorporated in Ontario, Canada and operates in Canada and the United States. Your data may be stored and processed using third-party infrastructure, including:

• Airtable (data storage) — hosted in the United States
• n8n (workflow automation) — hosted in the United States
• Stripe (payment processing) — hosted in the United States
• Anthropic and OpenAI (AI processing) — hosted in the United States

By using our Services, you consent to the transfer, processing, and storage of your information in the United States and other jurisdictions outside your country of residence. ArcosAI takes reasonable steps to ensure that any cross-border transfers comply with applicable Canadian privacy legislation, including PIPEDA.

06 Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: We share data with trusted third-party vendors who assist us in operating our platform. These providers are contractually obligated to protect your information.
• Legal Obligations: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger or acquisition, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
• Protection of Rights: We may disclose information where necessary to protect the rights, property, or safety of ArcosAI, our clients, or others.

07 Email Communications

ArcosAI sends email communications on its own behalf for the purpose of acquiring new clients and delivering service-related reports and alerts to existing subscribers. ArcosAI does not send marketing or outreach emails on behalf of its clients, nor does it send emails to its clients' customers.

All outreach conducted by ArcosAI is designed to comply with applicable anti-spam legislation, including Canada's Anti-Spam Legislation (CASL) and the United States CAN-SPAM Act. Recipients may unsubscribe at any time by following the instructions in any email.

08 Data Retention

We retain your personal information for as long as your account is active or as necessary to provide you with our Services. Upon written request for deletion, we will remove your personal information from our active systems within a reasonable timeframe, subject to any legal obligations to retain certain records.

09 Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete information.
• Right to Deletion: You may request that we delete your personal information, subject to applicable legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.
• Right to Complain: You have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact us at support@arcosai.tech. We will respond within 30 days.

10 Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information. No method of transmission over the Internet is completely secure. In the event of a data breach that affects your rights, we will notify you and the relevant authorities as required by applicable law.

11 Children's Privacy

Our Services are intended for use by businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete it promptly.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date and notify you by email or through our platform. Your continued use of our Services after any changes constitutes your acceptance of the updated Policy.

13 Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us: