Privacy Policy

ArcSec provides an automated security scanning and code-fixing tool for vibe-coded applications. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use our website and services (the "Service").

By using ArcSec, you agree to the practices described in this policy.

We use the information we collect to:

• —Perform security scans and generate fix suggestions
• —Maintain your account and scan history
• —Process payments and manage subscriptions
• —Improve and troubleshoot the Service
• —Send important service updates (not marketing spam)
• —Detect and prevent abuse, fraud, or violations of our Terms of Service

We know your code is sensitive. Here's exactly what happens to it:

• —During a scan: Your code is processed in a temporary, isolated environment solely for the purpose of scanning and generating fixes.
• —Third-party AI processing: Vulnerability fix generation is powered by a third-party AI model (currently Groq/Llama). Only the specific vulnerable code snippet — not your entire codebase — is sent to generate a fix. This snippet is not used by the AI provider to train their models, per their API terms.
• —After the scan: Your raw source code is deleted from our active servers within 24 hours of scan completion. We retain only the vulnerability report and fix suggestions (text-based results), not your original code files, unless you explicitly save a project for later re-scanning.
• —We do not manually view, read, or review your code. All processing is automated.
• —We never use your code to train any AI model, ours or any third party's.

We do not share your data with advertisers, data brokers, or any other third party for marketing purposes.

We may disclose information if required by law, court order, or to protect the rights, safety, or property of ArcSec or others.

• —Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
• —Source code: Deleted within 24 hours of scan completion (see Section 3).
• —Scan reports/fix suggestions: Retained until you delete them or delete your account.
• —Payment records: Retained as required by law for tax and accounting purposes (typically 7 years), handled via Stripe.

You have the right to:

• —Access the personal data we hold about you
• —Request correction of inaccurate data
• —Request deletion of your account and associated data
• —Export your scan history and reports
• —Opt out of non-essential communications

To exercise any of these rights, contact us at Arcsec@gmail.com.

We take reasonable technical and organizational measures to protect your data, including:

• —Encrypted data transmission (HTTPS/TLS)
• —Encrypted password storage
• —Access controls limiting who can view stored data
• —Automatic deletion of source code after processing

However, no system is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

We do not knowingly collect personal information from children.

If you access ArcSec from outside India, your information may be transferred to and processed in India or other countries where our service providers operate (e.g., US-based cloud infrastructure). By using the Service, you consent to this transfer.

We use minimal cookies necessary for:

• —Keeping you logged in
• —Remembering your preferences

We do not use third-party advertising or tracking cookies.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a notice on our website before the changes take effect.

If you have questions about this Privacy Policy or how your data is handled, contact us at: