Privacy Policy
1. Scope of This Policy
This Privacy Policy explains how Archon AI Inc. ("Company," "we," "us," or "our") collects, uses, and protects information in connection with our website at getarchon.ai (the "Website") and our software platform (the "Service"). Section 2 covers the Website. The remaining sections cover the Service.
Two categories of data are addressed differently in this policy:
- Account and Business Contact Data — information about our business customers and their administrators/Authorized Users that we collect directly (e.g., for account setup, billing, and support). This policy governs that data directly.
- Customer Data — the data, content, and records that our business customers ("Customers") and their employees upload to or generate within the Service.
Company processes this data on behalf of our Customers, acting as a service provider/processor. If you are an employee of one of our business Customers and have questions about how your data is used within the Service, please contact your employer's administrator. Customer's own privacy notices and policies govern its collection of employee data; our handling of that data on Customer's behalf is governed by our agreement with that Customer (including any data processing terms) rather than by this policy.
2. Our Website (getarchon.ai)
This section describes what happens when you visit getarchon.ai. The Website has no forms and no user accounts, and it does not ask for personal information.
2.1 Server Logs
Our hosting provider, Vercel, processes standard request data (IP address, browser user agent, requested URL, and time) to deliver the Website and protect it from abuse. We use this data only for security and operations.
2.2 Analytics
We use Vercel Web Analytics to count page views and understand which pages are useful. According to Vercel, it does not use cookies, and it reports only aggregate data such as the page visited, referring site, country, browser, operating system, and device type. We do not use it to identify individual visitors or to track you across other sites. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, the Website does not load analytics at all.
2.3 Cookies
The Website does not set any cookies or store anything in your browser (no cookies, localStorage, or sessionStorage). Fonts, images, and video are served from our own domain, so loading a page does not send requests to third parties.
2.4 Links to Third-Party Services
The Website links to services run by others: Calendly (to book a demo), LinkedIn, and our Trust Center hosted by Oneleet. Nothing is loaded from these services until you click a link. When you use them, their own privacy policies apply to the information you give them.
2.5 Email
If you email us, we use your message and contact details to respond and to keep a record of our correspondence.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
3. Information We Collect
3.1 Information You Provide
- Account registration information (name, work email, company name, job title)
- Login credentials (passwords are stored using industry-standard hashing; we do not store plaintext passwords)
- Billing and payment information (processed via our payment processor; we do not store full payment card numbers)
- Support requests and correspondence
3.2 Information Collected Automatically
- Usage data (pages visited, features used, timestamps, actions taken within the Service)
- Device and log data (IP address, browser type, operating system)
- Within the Service, cookies and similar technologies used for authentication/session management and basic analytics (the public Website sets no cookies; see Section 2)
3.3 Customer Data Processed on Behalf of Customers
Data, content, configurations, and records that Customers and their Authorized Users input or generate within the Service. We process this data only as instructed by the Customer and as necessary to provide the Service.
4. How We Use Information
We use the information described above to:
- Provide, operate, and maintain the Service
- Authenticate users and manage account roles/permissions
- Send notifications or alerts through channels Customer configures, where applicable
- Process billing and manage subscriptions
- Provide customer support
- Monitor, secure, and improve the Service, including diagnosing technical issues
- Comply with legal obligations
We do not use Customer Data to train general-purpose models or for any purpose unrelated to providing the Service, except as the Customer separately authorizes in writing.
5. Third-Party Service Providers
We use third-party service providers to operate the Service, including:
- Cloud hosting and database providers, to store and process data
- Integration and notification providers, where Customer elects to connect a third-party service for certain functionality. That third party's own privacy practices govern its handling of any data it receives.
- Payment processors, to handle billing
We require service providers who process data on our behalf to maintain appropriate confidentiality and security protections. We do not sell personal information to third parties.
6. Data Retention
- Account data is retained for as long as the account is active and for a reasonable period afterward for legal, billing, and recordkeeping purposes.
- Customer Data is retained for the duration of the applicable subscription and made available for export for a defined period following termination, as described in the Terms of Service or applicable order form, after which it may be deleted.
- We may retain limited information longer where required by law or for legitimate business purposes such as dispute resolution.
7. Data Security
We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure, including encryption in transit, access controls, and authentication safeguards for stored credentials. No system can be guaranteed 100% secure, and we cannot guarantee the absolute security of information.
8. Your Rights and Choices
Depending on your role:
- Authorized Users of a business Customer should direct requests about their personal data (access, correction, deletion) to their employer's administrator, who can submit such requests to us.
- Business Customer administrators can manage user account information directly within the Service's settings pages, or contact us for assistance.
- We will respond to verified requests consistent with our contractual obligations to the relevant Customer and applicable law.
9. Your Privacy Rights
Depending on where you live (for example California, New Jersey, or Delaware), you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale, sharing for targeted advertising, or profiling. We do not sell or share personal information or use it for targeted advertising or profiling. We will not discriminate against you for exercising any of these rights.
To make a request, email contact@getarchon.ai. We may need to verify your identity before acting on a request. You may use an authorized agent to make a request on your behalf. If we deny your request, you can appeal by replying to our decision with "Appeal" in the subject line. If you work for one of our Customers and your request concerns Customer Data, we will direct it to that Customer as described in Section 8.
10. Children's Privacy
The Service is intended for business use by employees of our Customers and is not directed to individuals under 18. We do not knowingly collect personal information from children.
11. Data Location and Transfers
We currently operate the Service and store data within the United States. If this changes, we will update this Policy accordingly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, will provide reasonable notice to Customer administrators.
13. Contact Us
Questions about this Privacy Policy can be directed to:
Privacy requests: contact@getarchon.ai
Other questions about this policy: legal@getarchon.ai
Archon AI Inc.