Privacy Policy
Last updated: 28 July 2026
1. Who we are
Arcloops (“we”, “us”) is an enterprise AI advisory, research, and consulting firm. For this website and related lead-capture processing, Arcloops is the data controller.
Primary office: Dhaka, Bangladesh. Presence: Dubai, UAE.
Contact for privacy requests: hello@arcloops.io
2. Scope
This policy covers personal data processed when you:
• Browse arcloops.io • Submit the contact / discovery form • Book a call via Cal.com (you also interact with Cal.com’s own privacy notice) • Receive transactional email from us (confirmations and replies) • Consent to analytics cookies (Google Analytics 4)
It does not replace engagement contracts, NDAs, or statements of work for paid client work, which may include additional terms.
3. Data we collect
Depending on how you interact with us, we may process:
• Identity and organisation details: full name, organisation name • Contact details: email address, phone number (optional) • Enquiry content: intent (e.g. AI Audit), message text, source path on our site • Technical metadata: approximate IP (stored as a one-way hash for abuse prevention), user agent, timestamps • Marketing attribution (if present in the URL): utm_source, utm_medium, utm_campaign • Analytics data (only with consent): page views and similar events via GA4 • Bot-protection signals via Cloudflare Turnstile when enabled
4. How we collect it
• Directly from you via forms and email • Via Cal.com when you schedule a discovery call • Automatically via essential server logs and security tools • Via cookies / local storage for consent preference and, if you accept, analytics
5. Purposes
We use personal data to:
• Respond to enquiries and schedule discovery conversations • Operate and secure the website (including spam and abuse prevention) • Send transactional email related to your enquiry • Improve the site with aggregated analytics when you grant consent • Comply with applicable legal obligations
6. Legal bases / consent
• Contact form: you provide information voluntarily; submitting the form (with Privacy Policy acknowledgement) constitutes consent to process the enquiry for the purposes above. • Analytics: loaded only after you grant analytics consent via our cookie banner. • Security and rate limiting: narrow legitimate interests in protecting the service from abuse.
You may withdraw analytics consent at any time via Cookie preferences in the site footer. Withdrawal does not affect the lawfulness of processing before withdrawal.
7. Processors / sub-processors
We use service providers that process data on our behalf:
| Processor | Role | Region |
|---|---|---|
| Vercel | Website hosting | US / global edge |
| Supabase | Enquiry database | Per project region (configured in Supabase) |
| Resend | Transactional email | US / EU per Resend |
| Google Analytics 4 | Analytics (consent only) | Google global |
| Cal.com | Scheduling | Per Cal.com |
| Cloudflare | Turnstile bot protection | Global |
8. Retention
• Contact enquiries: typically retained for up to 24 months, or longer if needed for an active engagement or dispute. • Analytics: retained according to our GA4 property settings. • Server / security logs: shorter operational windows.
We delete or anonymise data when it is no longer needed for the purposes above.
9. Cross-border transfers
If you are in Bangladesh or the UAE, your data may be processed by providers located abroad (for example hosting and email). We rely on provider contractual safeguards (including DPAs and, where applicable, standard contractual clauses) and appropriate technical measures.
10. Security
We use HTTPS in transit, access-controlled Supabase projects, service-role isolation for enquiry inserts (no public write from the browser), and least-privilege practices for operational accounts. No method of transmission or storage is perfectly secure; we work to reduce risk proportionate to the data we hold.
11. Your rights
Subject to applicable law, you may request access, correction, deletion, or restriction of personal data we hold about you, and you may withdraw analytics consent.
Exercise rights by emailing hello@arcloops.io. We aim to acknowledge within one business day and fulfil within a reasonable statutory window.
You may also raise concerns with the relevant supervisory or data-governance body in your jurisdiction (including Bangladesh’s national data governance context and, for UAE residents, the UAE Data Office where applicable).
12. Children
This website is directed at business professionals and is not intended for individuals under 18. We do not knowingly collect personal data from children.
13. Changes
We may update this policy as our practices or applicable law evolve. The “Last updated” date at the top of this page will change when we do. Material changes may also be noted via the website.
14. Contact
Privacy questions and requests: hello@arcloops.io
Arcloops — Dhaka, Bangladesh · Dubai, UAE
This policy describes Arcloops' practices. It is not legal advice. We will update it as our processing and applicable law evolve. See also Privacy, Terms, and Cookies.