Privacy Policy
Last updated: October 13, 2026
1. Who we are
ArcVision ("we", "us") is an AI automation and web studio based in Poland. This policy explains what data we collect when you visit arcvision.studio or use our AI Consultant, and how we use it. We are the data controller within the meaning of the EU General Data Protection Regulation (GDPR).
2. Data we collect
We collect: (a) contact details you give us through the AI Consultant or other channels, such as your name, email, phone number and company information; (b) the content of your conversation with the AI Consultant, including what you tell it about your business, needs and budget; (c) technical data needed to run the chat: a random session identifier stored in a cookie, a one-way hash of your IP address (we never store the IP itself) and your browser type; (d) usage data from analytics cookies, such as pages visited, device type and referral source, only if you allow analytics.
3. How we use your data
We use your data to: run the AI Consultant and generate its replies; respond to your enquiry and prepare your plan, which our team reviews and sends personally; notify our team about new enquiries; protect the chat from abuse. If you allow "Service quality" in the cookie settings, our team also reviews your conversations with the AI Consultant, including conversations you did not finish, to understand where the consultant falls short and improve its answers and our service. If you allow analytics, we use analytics data to understand how the site is used. We do not sell your data.
4. Legal basis
We process data needed to run the AI Consultant and handle your enquiry because you asked for it and to take steps before a possible contract (Art. 6(1)(b) GDPR), and on our legitimate interest in responding to business enquiries and keeping the service secure (Art. 6(1)(f) GDPR). Reviewing conversations for service quality and analytics cookies are based on your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via "Cookie settings" at the bottom of every page; withdrawal does not affect processing carried out before it.
5. Cookies and similar technologies
We use three categories, which you can manage in the cookie settings. Strictly necessary (always on): the chat session cookie (arc_sid, up to 30 days), a copy of your conversation in your browser's local storage (cleared after 24 hours of inactivity or with the "Reset chat" button), and your cookie choice. These are required for the site and the AI Consultant to work, so they do not require consent. Analytics (optional): Google Analytics 4 runs in consent mode; until you allow analytics it sets no cookies and sends only anonymous, cookieless signals. Service quality (optional): allows our team to review your consultant conversations as described in section 3.
6. AI Consultant
The AI Consultant is an AI system: its replies are generated automatically by a language model, may contain mistakes and are not a binding offer. Any proposal, price or plan is confirmed by a member of our team. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. To keep context between messages, your conversation is stored on our servers and linked to the session cookie. Please do not share sensitive personal data (such as health data) in the chat.
7. Recipients and processors
We use the following providers to operate the site: Vercel (hosting), Supabase (database storing consultant conversations), OpenAI (the language model behind the AI Consultant), Resend (lead notification emails), Telegram (internal notifications for our team: details of new enquiries with the conversation and, if you allowed "Service quality", transcripts of unfinished conversations), and Google (Google Analytics, if you allow it). Some of these providers may process data outside the European Economic Area, in particular in the USA. Where required, such transfers rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on standard contractual clauses.
8. Data retention
Enquiry and lead data are kept for as long as needed to respond to you and pursue a potential business relationship, and no longer than required by accounting or contract law. Conversations that did not lead to an enquiry are kept for up to 12 months and then deleted. Analytics data is retained according to Google Analytics' retention settings.
9. Your rights
Under GDPR, you have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent at any time. To exercise these rights, contact us at the email below. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
10. Contact
Questions about this policy or your data can be sent to hello@arcvision.studio.