Privacy Policy

1. Roles

We are the controller of storefront data. Payment processors handle payment credentials independently. This notice is intended for US interstate commerce, CCPA/CPRA where applicable, and GDPR for EEA/UK visitors.

2. Data we collect

Identifiers (name, email, company); commercial information (tier, amount, timestamps); internet activity (IP, user agent); and messages you send. Card numbers are collected by the payment processor, not stored on Arcevo servers.

3. Purposes and legal bases

We fulfill licenses, send receipts, prevent fraud, keep tax records, and operate the site. GDPR bases include contract, legitimate interests, legal obligation, and consent for non-essential cookies.

4. Sale and sharing

We do not sell personal information and do not share it for cross-context advertising. Hosting, email, and fraud vendors process data under contract. International transfers occur because we are a US merchant.

5. Retention and security

Transaction records are kept at least seven years for US tax purposes. We apply reasonable security measures appropriate to a digital-goods merchant.

6. CCPA rights

California residents may request to know, delete, or correct personal information. Email contact@arcevo.net with subject “CCPA Request.” We do not sell or share personal information for advertising.

7. GDPR rights

EEA/UK residents may request access, rectification, erasure, restriction, portability, and objection, and may complain to a supervisory authority.

8. Children and changes

The storefront is for adult business purchasers. We do not knowingly collect data from children under 13. Material updates will change the effective date on this page.