Privacy Policy
Last updated: April 14, 2026
Arcnull LLC ("Arcnull", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, how long we keep it, and your rights regarding that data.
This policy applies to arcnull.com and Drift Scanner.
1. Information We Collect
Account information — Email address, name, and organization name provided during registration or waitlist signup.
Usage data — API call volume, feature usage patterns, error rates, and performance metrics collected to operate and improve our services.
Technical data — IP addresses, browser type, operating system, and device information collected via server logs. IP addresses are personal data and are treated as such under this policy.
Billing information — Payment details are processed and stored by Stripe. We receive only a transaction reference and the last four digits of your payment method. We never store full card numbers.
Communications — Emails you send us, feedback you submit, and support requests you make.
2. Legal Basis for Processing (GDPR)
If you are located in the European Union or United Kingdom, we process your personal data on the following legal bases:
- Contract — processing necessary to provide our services to you
- Legitimate interests — fraud prevention, security monitoring, and service improvement
- Legal obligation — compliance with tax, accounting, and regulatory requirements
- Consent — marketing communications (you may withdraw at any time)
3. How We Use Your Data
- To create and manage your account
- To provide, operate, and improve our products
- To process billing and manage your subscription
- To send transactional emails — account confirmations, security alerts, and billing receipts
- To monitor service health and prevent abuse
- To respond to your support requests
- To comply with legal and regulatory obligations
We do not sell your personal data to third parties.
We do not use your data to train machine learning models.
4. Cookies and Analytics
Essential cookies — required for the service to function. These include session authentication tokens and security tokens. You cannot opt out of these without stopping use of the service.
Analytics — we use self-hosted, privacy-preserving analytics to understand how visitors use arcnull.com. No third-party analytics scripts (such as Google Analytics) are loaded on our site. No cross-site tracking occurs.
We do not use advertising cookies or tracking pixels.
5. Third-Party Service Providers
We share data with the following service providers solely to operate our services. Each is bound by data processing agreements:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, billing address |
| DigitalOcean | Cloud infrastructure (Frankfurt, Germany) | All service data |
| Titan Mail / Namecheap | Transactional email | Email address, name |
We do not share your data with any other third parties without your explicit consent.
6. International Data Transfers
Arcnull LLC is incorporated in Delaware, USA. Our infrastructure is hosted in Frankfurt, Germany (European Union). If you access our services from outside the EU, your data may be transferred to and processed in the EU or the United States.
For transfers from the EU to the United States, we rely on Standard Contractual Clauses (SCCs) where required by applicable law.
7. Data Retention
| Data type | Retention period |
|---|---|
| Account data | Duration of account + 30 days after deletion |
| Server logs and IP addresses | 90 days |
| Billing records | 7 years (tax and accounting obligations) |
| Support communications | 2 years |
| Waitlist data | Until product launches or you request removal |
When you delete your account, we remove your personal data within 30 days, except where retention is required by law.
8. Security
- All data transmitted over HTTPS with TLS 1.2 or higher
- Passwords stored as bcrypt hashes — never in plaintext
- API keys stored as bcrypt hashes — never in plaintext
- Database credentials encrypted with AES-256-GCM at rest
- Access to production systems restricted by IP allowlist and two-factor authentication
- Regular dependency updates and security patching
No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to hello@arcnull.com before disclosing it publicly.
9. Your Rights
All users:
- Access — request a copy of the data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and data
- Portability — request an export in machine-readable format (JSON or CSV)
- Opt out — unsubscribe from marketing emails at any time via the link in any email
EU and UK users (GDPR / UK GDPR):
- Restriction — request that we restrict processing of your data
- Objection — object to processing based on legitimate interests
- Withdrawal of consent — withdraw consent at any time where processing is based on consent
- Complaint — lodge a complaint with your local supervisory authority
California users (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt out of sale (we do not sell personal data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, email hello@arcnull.com. We will respond within 30 days.
10. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact hello@arcnull.com and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and notify active users via email at least 14 days before changes take effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.
Previous versions of this policy are available on request.
12. Contact
For privacy-related inquiries or to exercise your rights:
For general inquiries: hello@arcnull.com