Privacy Policy

This policy explains how Arclo, 4602 S Old Bastrop Highway, San Marcos, TX 78666, handles personal information when you visit arclo.pro, run a free scan, use the Arclo app, or submit a form on a website Arclo runs for one of our customers.

On customer websites, Arclo handles inquiries on behalf of that business. The business decides what happens with your inquiry; contact them directly with questions about their use of it.

• Account details: name, email, password (stored hashed) or Google sign-in, business name and website.
• Scan requests: the website address you submit and, if you give it, your email. We read the public pages of that website to produce the report.
• Billing: plan and payment status. Card details go straight to Stripe; we never see or store full card numbers.
• Connected accounts: if you connect Google Search Console, Google Analytics or Google Ads, the performance data those tools return, plus the access tokens needed to read it (encrypted).
• Website inquiries: on customer sites, what a visitor enters in the inquiry form (name, phone, email, preferred time), the page it came from, and the time.
• Usage and device data: pages viewed, clicks on key buttons, browser type and approximate location from IP address, collected through cookies and Google Analytics.
• Business contact information: for outreach to businesses, we use publicly listed business names, websites, addresses and business email addresses.
• Messages: emails and support requests you send us.

• To build, host, improve and report on websites, and to run the free scan;
• To deliver inquiries to the business they were meant for, by email and text;
• To manage accounts, billing and support;
• To send service emails, and marketing emails you can unsubscribe from at any time;
• To keep the Service secure and prevent abuse;
• To understand how arclo.pro is used and make it better.

• We do not sell personal information or share it for cross-context behavioral advertising.
• We do not use inquiry form contents or customer data to train AI models.
• We do not place advertising pixels on appointment or contact pages of practice websites.
• We do not access customers' scheduling systems, EHRs or patient records.

Service emails about your account and billing are part of the Service. Marketing emails include a one-click unsubscribe and our postal address. Text alerts go only to numbers a customer adds for inquiry notifications; reply STOP to any text to stop them. We do not share phone numbers for others' marketing.

For healthcare practices, inquiries submitted through their website may be protected health information. Arclo signs a Business Associate Agreement with practices on request, and handles that information as the BAA requires. Inquiry forms collect only name, phone, email and preferred time. See the BAA summary and HIPAA and your Arclo website.

We share personal information only with providers that help run the Service, under contracts that limit their use of it:

• Vercel (website and app hosting)
• Neon (database)
• SendGrid / Twilio (email and text notifications)
• Stripe (payments)
• Google (Analytics, Search Console, Ads, PageSpeed, sign-in)
• Microsoft Clarity (session recording and heatmaps on arclo.pro's public and sign-up pages)
• SerpApi (search ranking checks; no personal data is sent)
• Anthropic and OpenAI (AI models used to write and review site content)
• Sentry (error monitoring used to detect and diagnose faults in the Service)

We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

We use essential cookies to keep you signed in, and Google Analytics cookies on arclo.pro to measure visits and sign-up steps. You can block or delete cookies in your browser; the site works without analytics cookies, but signing in needs the essential ones. Customer websites use analytics configured so that form contents are never sent to any analytics tool.

On arclo.pro's public and sign-up pages (never inside the Arclo app), Microsoft Clarity records how visitors scroll and click so we can improve the site, with everything typed into forms masked; it follows the same cookie choice as Google Analytics.

Data is stored and processed in the United States. Every page and form uses HTTPS, access tokens and credentials are encrypted at rest, and access to customer data is limited to people and systems that need it. If a breach affects your personal information, we will notify you and any regulators as the law requires, and for practices with a BAA, as the BAA requires.

We keep account and site data while you are a customer. After an account closes, we keep it for 30 days so you can export it, then delete it, except billing records we must keep for tax purposes and anything a BAA or law requires us to retain. Scan requests without an account are deleted after 12 months.

You can ask us to access, correct, export or delete your personal information, or to stop marketing emails, by writing to contact@arclo.pro. Every marketing email also has a one-click unsubscribe link. We will respond within 30 days and will not treat you differently for making a request.

Depending on where you live (for example California, or other US states with privacy laws), you may have additional rights; we honor them. If you submitted an inquiry on a customer's website, we will pass your request to that business and help them respond.

Arclo is a business service and is not directed at children under 13. We do not knowingly collect their information; if we learn we have, we delete it.

We will post changes here and update the date above; for material changes we will email account owners before they take effect. Questions or requests: contact@arclo.pro, or by mail at 4602 S Old Bastrop Highway, San Marcos, TX 78666.