Privacy Notice
Last updated: May 13, 2026
1. Who we are
Arcset ("Arcset", "we", "us") provides the oI Studio platform. Arcset is the data controller for personal data collected through the Service. Contact us at hello@arcset.ca for any privacy inquiries.
2. What we collect and why
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email, password hash | Account creation, authentication, support |
| Workspace data | Contacts, deals, invoices, notes you create | Providing the Service |
| Usage & telemetry | Pages viewed, features used, error logs | Service improvement, debugging, security |
| Device & network | IP address, user-agent, device identifiers | Security, fraud prevention, audit logs |
| Communications | Support messages, in-app feedback | Customer support |
| Billing context | Plan tier, subscription status, invoice IDs | Subscription management (payment data is collected by Paddle, not Arcset) |
3. Legal basis
We process personal data on the following bases:
- Contract performance - to deliver the Service you signed up for;
- Legitimate interests - to secure, improve, and support the Service;
- Legal obligation - to comply with tax, accounting, and regulatory requirements;
- Consent - for any optional communications, where applicable.
4. Who we share data with
- Service providers / subprocessors - hosting (Supabase / Cloudflare), email delivery (Resend), AI processing (Google, OpenAI), error monitoring;
- Paddle, our Merchant of Record, for sale of the Service, subscription management, payments, tax compliance, and invoicing;
- Professional advisers - accountants, lawyers, auditors, where necessary;
- Authorities - where we are legally required to disclose data.
We do not sell personal data.
5. International transfers
Our subprocessors may process data outside Canada, including in the United States and the European Union. Where applicable, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service. When your account is deleted, we delete or anonymize your personal data within a reasonable period, except where we are required to retain certain records (e.g., billing records for tax compliance).
7. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Request deletion of your data;
- Restrict or object to certain processing;
- Receive a copy of your data in a portable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data protection authority.
You can exercise the access, export, and deletion rights directly from Settings → Security in the app, or by emailing hello@arcset.ca. We respond within 30 days.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, role-based access controls, audit logging, two-factor authentication, and security alerts on sensitive events.
9. Cookies
We use essential cookies required to keep you signed in and to operate the Service. We do not use third-party advertising cookies. Analytics cookies, where used, are aggregated and do not identify individual users.
10. Changes
We may update this Privacy Notice from time to time. Material changes will be communicated by email or in-app notice.
11. Contact
Privacy questions or requests: hello@arcset.ca.