Privacy Policy

1. Introduction

Arc Cloud is operated by Basekick Labs LLC, a Delaware limited liability company ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use Arc Cloud at cloud.arc.basekick.net.

2. Information We Collect

Account information: name, email address, and authentication credentials. If you sign in with GitHub, we receive your GitHub profile information (name, email, avatar).

Billing information: payment processing is handled by Stripe. We do not store credit card numbers. We retain your Stripe customer ID, subscription status, and billing address for invoicing purposes.

Instance data: data you store in your Arc Cloud instances (databases, tables, queries) is hosted on our infrastructure. We do not access your instance data except as necessary to provide the service or as required by law.

Usage data: we collect basic operational metrics such as API request counts, error rates, and resource utilization to maintain and improve the service.

3. How We Use Your Information

• Provide, operate, and maintain Arc Cloud
• Process billing and send invoices
• Send transactional emails (verification, password reset, instance notifications)
• Respond to support requests
• Monitor and improve service performance and security
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Data Storage & Security

Your data is stored on servers operated by Basekick Labs. All data in transit is encrypted via TLS. Customer instance data is isolated per tenant through separate Kubernetes namespaces, network policies, and dedicated storage volumes. We implement industry-standard security practices including firewalls, access controls, and regular security reviews.

5. Third-Party Services

We use the following third-party services to operate Arc Cloud:

• Stripe — payment processing and billing
• Cloudflare — DNS management
• Mailgun — transactional email delivery
• GitHub — OAuth authentication (optional)

Each service processes data in accordance with their own privacy policies.

6. Data Retention

• Account data is retained while your account is active and deleted upon request.
• Instance data is deleted when an instance is terminated.
• Backups are retained for up to 30 days after deletion.
• Billing records are retained as required by applicable tax and accounting regulations.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and associated data
• Export your instance data at any time via the Arc Cloud API

To exercise any of these rights, contact us at support@basekick.net.

8. Cookies

Arc Cloud uses a single session cookie (arc_session) for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email. Continued use of Arc Cloud after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, contact us at support@basekick.net.

Basekick Labs LLC
Delaware, United States