Privacy Policy
Last updated: April 15, 2026
This Privacy Policy explains how ArcMantis ("ArcMantis," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit arcmantis.ai (the "Site"), request a demo, or otherwise interact with us.
Note on our platform vs. this Site. This policy covers personal information ArcMantis collects through its public website and marketing activities. It does not cover data that flows through the ArcMantis platform on behalf of our customers. When a customer deploys ArcMantis to govern access to their own systems, that customer is the controller of the underlying data and ArcMantis acts as a processor under the terms of the applicable customer agreement and Data Processing Addendum. Platform data stays in the customer's systems; ArcMantis governs the access layer and does not store customer data.
1. Who we are (Controller)
For personal information collected through this Site, the data controller is: ArcMantis, Inc. (a Delaware C corporation), 1111B South Governors Ave, Ste 24620, Dover, DE 19904, USA. Submit a query through our privacy policy contact form.
If and when we are required to designate a representative under Article 27 GDPR / UK GDPR, we will appoint one and update this policy.
2. Personal information we collect
Information you provide directly: Contact and demo-request details: name, business email, company name, job title, phone number, and anything you include in a message or form. Communications: emails and other correspondence you send us.
Information collected automatically: Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps. Analytics and advertising identifiers collected through cookies and similar technologies via Google Tag Manager, Google Analytics 4, Microsoft Clarity, and marketing/advertising pixels. See our Cookie Policy for details.
We do not intentionally collect special categories of data (e.g., health, biometric, or data revealing race, religion, or political opinions) through this Site, and we ask that you not submit such information through our forms.
3. How we use personal information and our lawful bases (GDPR)
Purpose | Personal information used | Lawful basis (GDPR Art. 6) |
|---|---|---|
Respond to demo requests and inquiries | Contact details, message content | Steps taken at your request prior to entering a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) |
Send marketing communications | Contact details | Consent (Art. 6(1)(a)) where required; legitimate interests where permitted, with opt-out |
Analytics and Site improvement | Usage data, analytics cookies | Consent (Art. 6(1)(a)) for non-essential cookies; legitimate interests for aggregated analysis |
Advertising and remarketing | Advertising identifiers, pixels | Consent (Art. 6(1)(a)) |
Security, fraud prevention, and legal compliance | Device/usage data | Legitimate interests (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have balanced those interests against your rights and will provide further detail on request.
4. Cookies and tracking technologies
We use cookies and similar technologies, including Google Tag Manager, Google Analytics 4, Microsoft Clarity, and marketing pixels. Non-essential cookies (analytics and advertising) are set only after you consent via our cookie banner where consent is required (EU/EEA, UK). You can change or withdraw your consent at any time via the "Cookie settings" link in the Site footer, and you can also control or remove cookies through your browser settings. Full details, categories, and durations are in our Cookie Policy.
5. How we share personal information
We share personal information with:
- Service providers / processors acting on our behalf: website hosting, analytics (Google, Microsoft), advertising platforms, CRM and email tools, and similar vendors, each bound by contract to process data only on our instructions.
- Professional advisors: lawyers, accountants, and auditors where necessary.
- Authorities: where required by law, legal process, or to protect our rights.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
We do not sell personal information for money. Certain analytics/advertising cookie activity may constitute "sharing" or "sale" under the CCPA/CPRA; see Section 9 and the Cookie Policy for your opt-out rights.
6. International data transfers
We are based in the United States. If you access the Site from the EU/EEA or the UK, your personal information will be transferred to and processed in the US and other countries that may not provide the same level of protection as your home jurisdiction. Where we transfer EU/EEA or UK personal data internationally, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (2021) and the UK International Data Transfer Addendum, together with supplementary measures where needed. You may request a copy of the relevant safeguards using the contact details above.
7. Data retention
We keep personal information only as long as necessary for the purposes described above:
- Demo/inquiry data: for the duration of our discussions and for 24 months thereafter for follow-up, unless you ask us to delete it sooner.
- Marketing data: until you unsubscribe or withdraw consent.
- Analytics data: per the retention settings in our analytics tools (GA4 is set to 14 months).
When no longer needed, we delete or anonymize the data.
8. Your rights (EU/EEA and UK, GDPR)
If you are in the EU/EEA or the UK, you have the right to:
- Access a copy of your personal data;
- Rectify inaccurate data;
- Erase your data ("right to be forgotten");
- Restrict or object to processing;
- Data portability (receive your data in a machine-readable format);
- Withdraw consent at any time, without affecting prior processing; and
- Lodge a complaint with your local supervisory authority.
We will respond within one month (extendable by two further months for complex requests, with notice). To exercise any right, submit a query through our privacy policy contact form.
9. Your rights (California, CCPA/CPRA)
If you are a California resident, you have the right to:
- Know / access the categories and specific pieces of personal information we collect, use, and disclose;
- Delete personal information we hold about you;
- Correct inaccurate personal information;
- Opt out of the "sale" or "sharing" of personal information (including cross-context behavioral advertising); and
- Non-discrimination for exercising your rights.
We do not sell personal information for money, but our use of advertising cookies may be considered "sharing"/"sale." To opt out of advertising cookies, use the cookie banner controls, reachable any time via the "Cookie settings" link in the Site footer. To exercise other rights, submit a query through our privacy policy contact form. We will acknowledge within 10 business days and respond within 45 calendar days (extendable by 45 days with notice). We will verify your identity before responding; you may use an authorized agent.
10. Children's privacy
The Site is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us information, submit a query through our privacy policy contact form and we will delete it.
11. Security
We maintain reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version with a new "Last updated" date and, where required, notify you.
13. Contact us
Questions or requests regarding this policy or your personal information: ArcMantis, Inc., 1111B South Governors Ave, Ste 24620, Dover, DE 19904, USA. Reach us by submitting a query through our privacy policy contact form.