Legal · Arcloop
Privacy Policy
Last updated: 16 October 2026
1. Our commitment
Arcloop does not retain your drawings, does not train models on your drawings, and does not sell or share your drawings with third parties for any purpose other than providing the analysis you requested.
2. What we store
- Account data: email, hashed password, plan tier, and credits. Retained as long as your account is active, and deleted within 30 days of account deletion.
- Analysis results: encrypted with Fernet at rest. Retained for your plan's history window — Free 10 days, Starter 90 days, Pro 365 days, Studio 1095 days, Enterprise 3650 days.
- Original uploaded files: not stored after analysis completes. The bytes are discarded once the encrypted result is written.
3. Zero data retention for AI inference
- Drawing content sent to AI providers is not retained by Arcloop beyond the duration of the request.
- We contractually enforce zero data retention with our inference providers where supported.
- Providers currently used: Velona, Vertex AI, Groq, OpenRouter, and Google Gemini. Each provider's zero data retention status is documented in Annex A below, and is also available in-product at /account/zdr.
4. Zero model training
- Your drawings, metadata, and analysis results are never used to train any model, whether ours or a third party's.
- We do not opt in to any provider's training program.
- We do not sell, license, or otherwise commercialize your data.
5. Encryption
- In transit: TLS 1.3 for all client-server communication.
- At rest: Fernet (AES-128-CBC + HMAC-SHA256) for analysis results, drawing metadata, and annotated images.
- Keys are stored in environment variables, rotated annually, and never written to logs.
6. IP protection
- You retain all intellectual property rights in your drawings.
- We claim no ownership over any content you upload.
- We do not use your content for any purpose beyond the analysis you requested.
7. Your rights
- Access:
GET /api/account/exportreturns a machine-readable copy of your data. - Deletion: request account deletion via support@arcloop.tech.
- Portability: JSON export of all analyses on request.
- Correction: contact support@arcloop.tech.
8. Annex A — provider ZDR status
The table below reflects the configuration in production at the time of this writing. Retention is the maximum period a provider may keep the prompt and image content of a request.
| Provider | Retention | Trains? | ZDR available | Our config |
|---|---|---|---|---|
| Velona | 0 days | No | Yes | Zero data retention enabled |
| Vertex AI | 30 days | No | Available on request | No ZDR — documented, no training on our inputs |
| Groq | 0 days | No | Yes | Zero data retention enabled |
| OpenRouter | 90 days | No | No | No ZDR — documented, no training on our inputs |
| Google Gemini | 30 days | No | Available on request | No ZDR — documented, no training on our inputs |
9. Contact
Questions about this policy or your data: support@arcloop.tech.
Also read our Terms of Service and Cookie Policy.