ARC · LEGAL

Privacy Policy

LAST UPDATED 29 JUNE 2026

ARC (the “Agentic Readiness Check”, “we”, “us”) tests whether AI shopping agents can buy from a website and reports where they get stuck. This policy explains what we collect, why, and your choices. Questions: hello@arcreport.ai.

What we collect

  • Account data — your email address (used for sign-in and to contact you).
  • Scan data — the store/product URLs you submit, and the results we generate (scores, agent journeys, screenshots of the pages our agents visit).
  • Billing data — handled by Stripe. We store your plan and Stripe customer/subscription identifiers; we never see or store full card numbers.
  • Technical data — basic request logs and your IP address, used to run the service, prevent abuse, and rate-limit free scans.

How we use it

  • To run your scans and deliver results, sign-in links, and (if you opt in) monitoring alerts.
  • To process payments and manage your subscription.
  • To operate, secure, and improve the service, and to prevent abuse.

We do not sell your personal data, and we don’t use it for third-party advertising.

Service providers we share data with

We use a small set of processors strictly to run ARC:

  • Vercel — hosting and serverless compute.
  • Turso (libSQL) — database.
  • Vercel Blob — private storage for scan screenshots.
  • Stripe — payment processing.
  • Resend — transactional email (sign-in links, alerts).
  • OpenRouter — large-language-model inference that powers the shopping agents.
  • Browserless — the headless browsers the agents drive.

A note on scanning

When you run a scan, our agents browse the URL you provide like a visitor would and capture screenshots of public pages. You must only scan sites you own or are authorized to test (see our Terms). We don’t submit forms, make purchases, or enter payment details.

Retention & your rights

We keep account and scan data while your account is active. You can ask us to access or delete your data at any time by emailing hello@arcreport.ai; we’ll respond within a reasonable period. Deleting your account removes your scans and personal data, except where we must retain records (e.g. for tax/accounting).

Cookies

We use a single essential, signed session cookie to keep you logged in. No advertising or third-party tracking cookies.

Children

ARC is a business tool not intended for anyone under 18.

Changes

We’ll update this page and the “last updated” date when this policy changes. Material changes will be notified by email where appropriate.