ARCASCRIBE PRIVACY POLICY

Effective Date: March 2026

ArcaScribe ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.arcascribe.com (the "Website") and when you use our desktop transcription software (the "Software"). Please read this Privacy Policy carefully. By accessing the Website or using the Software, you agree to the terms of this Privacy Policy.

This Privacy Policy is organized into two parts: Part A covers the Website and Part B covers the Desktop Software. Some provisions apply to both and are addressed in Part C (General Provisions).

=====================================================
PART A: WEBSITE (www.arcascribe.com)
=====================================================

A1. INFORMATION WE COLLECT THROUGH THE WEBSITE.

Information You Provide Voluntarily. When you use our contact form, we collect the information you submit, which may include your name, email address, and the content of your message. This information is stored in our database for the purpose of responding to your inquiry.

Information Collected Automatically. When you visit the Website, certain information is collected automatically through cookies and similar tracking technologies, including:

Google Analytics. We use Google Analytics to collect information about how visitors use our Website. Google Analytics collects information such as how often users visit the Website, what pages they visit, and what other sites they used prior to visiting. Google Analytics collects your IP address (which may be anonymized depending on your region), browser type, device information, and browsing behavior on our Website. We use this information solely to improve our Website and understand how visitors interact with it. Google Analytics uses cookies to collect this information. You can learn more about how Google uses data at www.google.com/policies/privacy/partners. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on available at tools.google.com/dlpage/gaoptout.

Hotjar. We use Hotjar, a behavior analytics tool, to better understand how visitors interact with our Website through heatmaps, session recordings, and surveys. Hotjar may collect information including device type, browser type, geographic location (country only), preferred language, mouse events, keypresses (excluding sensitive fields), and page content viewed. Hotjar does not collect personally identifiable information unless you voluntarily provide it (for example, through a feedback form). You can opt out of Hotjar's tracking by visiting www.hotjar.com/policies/do-not-track.

Download Analytics. When you download our software, we record the platform selected, software version, and your country (derived from your IP address, which is not stored). This data is anonymized and used to improve our software distribution.

A2. HOW WE USE WEBSITE INFORMATION. We use information collected through the Website for the following purposes: to respond to inquiries submitted through the contact form; to analyze Website traffic and usage patterns to improve the Website; to maintain the security and functionality of the Website; and to comply with legal obligations.

A3. COOKIES. The Website uses cookies, which are small data files stored on your device. We use the following types of cookies: strictly necessary cookies required for the Website to function; and analytics cookies used by Google Analytics (and potentially Hotjar in the future) to understand Website usage. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Website. We do not use cookies for advertising purposes.

A4. WEBSITE DATA RETENTION. Contact form submissions are retained indefinitely for our legitimate business purposes, including maintaining a record of inquiries and improving our services. You may request deletion of your contact form submission at any time by contacting us (see Section C8). Google Analytics and Hotjar data are retained in accordance with each provider's default data retention settings.

=====================================================
PART B: DESKTOP SOFTWARE
=====================================================

B1. INFORMATION THE SOFTWARE DOES NOT COLLECT. The ArcaScribe desktop software is designed with privacy as a core principle. The Software does not collect, transmit, or store any of the following: file names or file paths on your device; audio content or audio files; transcript content or output; usage analytics or telemetry data; keystroke data or interaction patterns; any data related to your use of the Software's transcription features. All audio processing and transcription occurs locally on your device. No audio, transcript, or usage data is ever transmitted to ArcaScribe's servers or any third party. No information subject to attorney-client privilege or work product protection is collected or transmitted at any time.

B2. INFORMATION THE SOFTWARE DOES COLLECT. The only personal information collected in connection with the Software is that which is strictly necessary to facilitate subscription management and license verification. This information is processed through our third-party payment processor, Stripe, and may include: your email address (used for account identification and communication); payment details (processed and stored by Stripe, not by ArcaScribe); and license status (whether your subscription is active, expired, or in a trial period). ArcaScribe does not directly store your payment card details. All payment information is handled by Stripe in accordance with Stripe's privacy policy, available at stripe.com/privacy.

B3. HOW WE USE SOFTWARE-RELATED INFORMATION. The limited information collected in connection with the Software is used solely for the following purposes: to verify your license and subscription status; to process subscription payments through Stripe; to communicate with you about your subscription (renewal notices, payment confirmations, and similar transactional communications); and to provide customer support when you contact us.

B4. SOFTWARE DATA RETENTION. Subscription and license information is retained for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Payment records are retained by Stripe in accordance with Stripe's data retention policies and applicable financial record-keeping requirements.

=====================================================
PART C: GENERAL PROVISIONS
=====================================================

C1. THIRD-PARTY SERVICE PROVIDERS. We share personal information only with the following third-party service providers, solely for the purposes described in this Privacy Policy:

Stripe (stripe.com) — payment processing and subscription management. Stripe processes your payment information and maintains subscription records. Stripe's privacy policy is available at stripe.com/privacy.

Google Analytics (analytics.google.com) — website analytics only. Google Analytics processes anonymized browsing data from the Website. Google's privacy policy is available at policies.google.com/privacy.

Supabase (supabase.com) — database hosting and backend services. Supabase's privacy policy is available at supabase.com/privacy.

We do not sell, rent, or trade your personal information to any third party. We do not share your information with third parties for their marketing purposes.

C2. DATA SECURITY. We implement reasonable administrative, technical, and physical safeguards to protect your personal information. The Software's privacy-by-design architecture — processing all audio and transcription locally on your device with no data transmission — is itself a primary security measure. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

C3. INTERNATIONAL DATA TRANSFERS. ArcaScribe operates from Ontario, Canada. If you are accessing the Website or using the Software from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada. By using the Website or Software, you consent to the transfer of your information to Canada and understand that your information will be subject to Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

C4. YOUR PRIVACY RIGHTS.

All Users. Regardless of your location, you may: request access to the personal information we hold about you; request correction of inaccurate personal information; request deletion of your personal information (subject to legal retention requirements); and withdraw consent to processing where consent is the legal basis.

Canadian Residents (PIPEDA). Under the Personal Information Protection and Electronic Documents Act, you have the right to access your personal information held by ArcaScribe, to challenge the accuracy and completeness of your information and have it amended as appropriate, and to withdraw consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions).

California Residents (CCPA/CPRA). If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including: the right to know what personal information is collected, used, and shared; the right to delete personal information; the right to opt out of the sale or sharing of personal information (note: we do not sell or share your personal information as defined by the CCPA); and the right to non-discrimination for exercising your privacy rights.

European Economic Area Residents (GDPR). If you are located in the EEA, our legal bases for processing your personal information include: legitimate interests (Website analytics and improving our services); contract performance (subscription management and license verification); and consent (where applicable, such as for optional cookies). You have additional rights including the right to data portability and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us using the contact form on our Website at www.arcascribe.com. We will respond to verifiable requests within thirty (30) days.

C5. CHILDREN'S PRIVACY. The Website and Software are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

C6. DO NOT TRACK SIGNALS. Some browsers transmit "Do Not Track" signals to websites. At this time, we do not respond to Do Not Track signals because no industry standard for compliance has been adopted. We will update this policy if a standard is established.

C7. CHANGES TO THIS PRIVACY POLICY. We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you by email or through a notice on our Website. Your continued use of the Website or Software after any changes constitutes your acceptance of the updated Privacy Policy.

C8. CONTACT US. If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through the contact form on our Website at www.arcascribe.com.