The details

Privacy Policy

How Arc AI handles enquiries, website data, analytics and your privacy choices.

Last updated:

Who we are

This website is operated by Arc AI LTD, trading as Arc AI. We are the controller of the personal data described in our Privacy Policy.

Contact requests

When you use the contact form, we receive your name, email address, optional phone number and message. We also record the form language, submission time and IP address. Name, email and message are needed to handle the form request; you can leave the phone field empty or contact us by email instead.

Messages are stored in our website database and are available to our authorized team in a private admin inbox. A notification is also sent to our business email. Marking a message as seen does not delete it.

We use this information to respond and discuss possible work. Where you ask us to take steps toward a contract with you, the basis is those pre-contractual steps. For other business enquiries, it is our legitimate interest in responding and managing business communications. We may also retain information where required by law or necessary for legal claims.

Site security and reCAPTCHA

We use session and request-security cookies, request limits and Google Cloud reCAPTCHA to protect the website and contact form against abuse. The site and its hosting services may process technical request information, including IP addresses, browser information and timestamps, for security and troubleshooting.

reCAPTCHA processes browser, device and interaction signals and may set a security cookie called _GRECAPTCHA. Google processes reCAPTCHA customer data on our behalf for security, fraud and abuse prevention. Our basis for this processing is our legitimate interest in keeping the service safe.

An automated risk assessment can prevent a form submission. This does not decide whether we will provide services to you. If the form rejects a legitimate request, email [email protected] so a person can review it.

Optional analytics

When enabled on the live website, Google Analytics 4 helps us understand visits, page usage, referral sources, approximate location and device or browser categories. Analytics can use cookie identifiers to distinguish visits and sessions.

We load Google Analytics only after you accept analytics cookies. Rejecting analytics does not prevent you from using the website or contacting us. You can change your choice through Cookie settings in the footer. Withdrawing consent stops future collection; it does not make earlier consent-based processing unlawful.

We do not deliberately send the contents of contact messages, names, email addresses or phone numbers to Analytics. Google’s documentation explains how it processes measurement data and uses IP addresses to derive approximate location before discarding them.

Cookies and browser storage

Necessary cookies support sessions, form security and abuse prevention. Session cookies normally expire after 120 minutes of inactivity. Google may use its reCAPTCHA security cookie when protecting the contact form.

Our arcai_analytics_consent cookie remembers your analytics choice for 180 days across the English and Bulgarian pages. If cookies cannot be stored, your choice may not be remembered on the next page.

After acceptance, Analytics may set _ga and _ga_* cookies. Google’s default expiry is two years, although browsers or Analytics settings can shorten this. Rejecting or withdrawing analytics deletes Analytics cookies accessible to this website. Browser settings also let you inspect or remove cookies; blocking necessary cookies can affect form or sign-in functionality.

Recipients and international processing

Our authorized team and service providers for hosting, email, website support, Google Analytics and reCAPTCHA may process the data needed for their roles. We may disclose relevant information where the law requires it or for establishing, exercising or defending legal claims.

Google and other providers may process data outside the European Economic Area. Where such a transfer occurs, applicable transfer requirements must be met, including an adequacy decision or appropriate safeguards such as standard contractual clauses. Contact us for information about the safeguards relevant to your data.

How long information is kept

Retention of enquiries depends on the time needed to handle the conversation and any resulting work, applicable record-keeping duties, and the need to establish or defend legal claims. You can ask us about the retention criteria for your specific enquiry or request deletion where applicable.

Email copies and backups can have separate retention cycles. Analytics user and event data follow the retention settings of the Analytics property; aggregate reports can remain longer. Cookie lifetimes are described above and are separate from retention of reports or messages.

Your rights

Depending on the circumstances, you can request access to your personal data, correction, erasure, restriction of processing or a portable copy. You can object to processing based on legitimate interests and withdraw consent where processing relies on consent.

Send requests to [email protected]. We may need proportionate information to verify your identity. We normally respond within one month; where the law allows an extension, we will explain it.

You can complain to the Bulgarian Commission for Personal Data Protection or another competent supervisory authority. Contacting us first is optional and does not limit that right.

Updates to this notice

We update this page when relevant website practices or requirements change. The date at the top identifies this version. Contact us if you need clarification about any part of this notice.

Questions about these pages? Write to [email protected]

Terms of Use