Privacy.

ARC OS is run by ARC AI, Colombo, Sri Lanka. Last updated 31 October 2026.

This website

The booking form sends us what you type: your name, mobile number, email if you give one, the shop's name, your town, your note and the call time you choose. It goes to our customer records, and we use it only to call you about setting up ARC OS.

To stop the form being misused we keep a scrambled code made from your internet address, never the address itself, for a short time. We also keep each booked call time, with no name beside it, so nobody else can choose it.

This website sets no advertising or tracking cookies and has no analytics. Your browser remembers, for that visit only, that you have seen the opening animation.

The shop's data in the app

Everything a shop enters in ARC OS (products, stock, sales, customers, staff and reports) belongs to the shop. ARC OS keeps it so the app can work, on the shop's computers and on our servers (Supabase, in its Mumbai region), and does not sell it or use it for advertising.

• The owner can export all of the shop's data as files at any time, and keep a nightly backup in a folder they choose.
• For the shop's own customers, the shop decides what is kept and ARC OS processes it for the shop. The app has the tools the shop needs under the PDPA: a customer's data export, erasure, consent for marketing messages and a breach log.
• Marketing messages go only to customers who agreed to get them, and a reply of STOP ends them.
• ARC OS staff see the shop's account (name, contact details, licence) and the app's technical health (versions, last check-in, errors). They see the shop's business data only when the owner switches on support access in the app, for the time the owner chooses, and every section they open is logged for the owner to see.
• App error reports are sent only when the shop switches them on in the app.

Services we use

• Netlify: hosts this website and the booking form.
• Supabase: the database and the server functions.
• Notify.lk: SMS messages, such as sign-in codes.
• WhatsApp Business (Meta): WhatsApp messages the shop sends.
• Resend: emails, such as the daily summary.
• OpenAI: only when someone in the shop uses the AI assistant. Phone numbers, NIC numbers and emails in a question are replaced with placeholders before it is sent, customer and staff names in the shop's figures are replaced with codes, and OpenAI is asked not to store the request.

How long we keep it

Website enquiries are kept until you ask us to delete them. A shop's data is kept while the shop uses ARC OS. The owner can ask for a full copy, or for the shop to be closed and its data deleted, from the app (Customers, Privacy).

Your rights

Under Sri Lanka's Personal Data Protection Act you may ask what we hold about you, ask us to correct it, ask us to delete it, and object to how we use it. If you are a customer of a shop that uses ARC OS, ask the shop first. It controls that data and can export or erase it in the app.

To ask, email support@arcai.agency or call +94 77 185 2522.