A brief policy, honestly written.
This Privacy Policy explains how Arco ("we", "us") collects, uses, and protects your personal data. The language below is plain on purpose.
What we collect
- Account data. email, name, password hash, role, onboarding answers.
- Learning data. lesson progress, quiz scores, practice time, compositions, practice notes.
- Billing data. a Stripe customer ID and subscription metadata. Your card never touches our servers.
- Technical data. IP, user agent, basic device info — used for security and abuse prevention only.
How we use it
To provide, improve, and secure the service; to bill you; to send transactional emails (verification, billing, password reset, support). Marketing emails only if you opt in.
Your rights
You can access, export, or delete your data from your account settings at any time, or by writing to support. When you delete, we keep a backup for thirty days and then it is gone.
Third parties
We use Stripe (billing), Resend (email), a database provider, and optionally a privacy-respecting analytics provider. Each processes your data under their own terms.