Privacy posture.
We collect very little. This page describes what enters our systems, why, and how long it stays — written plainly, not for legal SEO.
What we collect.
Name, email, company, and free-text answers you submit through /intake. Used to respond to your inquiry. Stored by our intake provider (Formspree) and in our engagement records. Not sold, shared, or used for marketing email lists.
Privacy-preserving page-view counts via Vercel Analytics. No cookies, no cross-site fingerprinting, no individual visitor profiles. Used to understand which content earns attention. Aggregated only.
Standard request metadata (IP, user-agent, timestamp, requested path) is recorded by our hosting provider (Vercel) for security and abuse-prevention purposes. Retained ~30 days by default.
When the authenticated client portal is wired (planned), it will store the minimum data required to run an engagement: email, organization, and engagement records. Portal users will receive a separate, contract-binding data agreement before access is granted.
What we do not collect.
- No advertising cookies. No retargeting pixels. No third-party fingerprinting libraries.
- No cross-site identifiers, social-graph imports, or data broker enrichment.
- No marketing email lists. We do not sell, rent, or syndicate your address.
- No A/B-testing tools that segment individual visitors. Anonymous aggregate only.
Where the data sits.
Formspree Inc. — intake form delivery
Anthropic PBC — API-level inference for site features (where applicable)
All three are US-based providers operating under industry-standard data-processing terms. We do not transfer your data to additional sub-processors without notice.
Access, correction, deletion.
If you submitted an intake form and want a copy of what we hold, want it corrected, or want it deleted, email us. We respond within five business days. Statutory rights under California (CCPA), the EU (GDPR), and Oregon (OCPA) are honored on the same channel.
privacy@arcanaoperations.com →