Privacy Policy

1. Introduction

Arcana Concept ("we", "us", or "our") operates the ARCANA platform ("Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our mystical web-weaving AI platform.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number)
• Employee identification and role information
• Authentication credentials and access logs
• Professional information relevant to your role

2.2 Usage Data

We automatically collect certain information when you access the Service:

• Log data (IP address, browser type, pages visited)
• Device information and operating system
• Usage patterns and feature interactions
• Session duration and frequency of use

2.3 Communication Data

Information from your interactions with the platform:

• Chat conversations and AI assistant interactions
• Support requests and feedback
• Knowledge base contributions and queries

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain the Service
• To authenticate users and manage access controls
• To improve and optimize platform functionality
• To provide customer support and technical assistance
• To ensure security and prevent unauthorized access
• To comply with legal obligations and company policies
• To generate analytics and usage reports for business purposes

4. Information Sharing and Disclosure

4.1 Internal Sharing

Information may be shared within Arcana Concept on a need-to-know basis for legitimate business purposes, including IT support, security monitoring, and administrative functions.

4.2 Third-Party Service Providers

We may engage third-party companies to facilitate our Service, including cloud hosting, analytics, and security services. These providers have access to your information only to perform specific tasks on our behalf.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Employee training on data protection practices
• Incident response procedures

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we securely delete or anonymize it.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access to your personal information
• Correction of inaccurate or incomplete data
• Deletion of your personal information (subject to business requirements)
• Restriction of processing in certain circumstances
• Data portability where technically feasible

To exercise these rights, please contact our Data Protection Officer using the contact information provided below.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers are conducted in accordance with applicable data protection laws and implement appropriate safeguards.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the Service after such changes constitutes acceptance of the updated policy.

10. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

11. Compliance

This Privacy Policy is designed to comply with applicable data protection regulations, including but not limited to the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant privacy laws.