Skip to main content
Arck
LEGAL

Privacy Policy

Last updated: March 27, 2026

Arck ("we," "us," or "our") operates the heyarck.com website and the Arck platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, business name, and password. If you subscribe to a paid plan, we collect payment information through our third-party payment processor.

Review Data

When you connect your Google Business Profile, we access your publicly available review data (reviewer names, ratings, review text, and dates). This data is already public on Google. We do not access health records, appointment data, or any protected health information (PHI).

Chatbot Conversations

When customers interact with your Arck-powered review collector chatbot, we collect the conversation content (messages, sentiment responses, and review text). This data is used to facilitate the review collection process and improve our service.

Usage Data

We automatically collect information about how you interact with our website and platform, including pages visited, features used, browser type, device information, and IP address.

2. How We Use Your Information

  • Provide, operate, and maintain our services
  • Generate AI-powered review responses on your behalf
  • Facilitate review collection through our chatbot system
  • Process payments and manage subscriptions
  • Send you service-related communications (account updates, security alerts, new review notifications)
  • Improve and develop new features
  • Detect, prevent, and address technical issues or abuse

3. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service providers: Third-party companies that help us operate our platform (hosting, payment processing, email delivery, analytics). These providers are contractually obligated to protect your data.
  • Legal requirements: When required by law, regulation, legal process, or governmental request.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
  • With your consent: When you explicitly authorize us to share information with a third party.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use our service. You can control cookies through your browser settings. Disabling cookies may affect some features of our platform.

We use analytics services to help us understand usage patterns. These services may collect information sent by your browser, including pages visited and other usage data.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. Review data and chatbot conversations are retained for the duration of your subscription. If you close your account, we will delete your data within 30 days, except where we are required to retain it by law.

6. Data Security

We implement industry-standard security measures to protect your information. All data is encrypted in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel who need it to operate our services. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

For All Users

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Export your data in a portable format

California Residents (CCPA)

You have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Our legal basis for processing is contract performance (to provide our services) and legitimate interest (to improve our platform).

To exercise any of these rights, contact us at hello@heyarck.com. We will respond within 30 days.

8. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data data handling, contact us at: